Privacy policy

Robin Skylights Nottingham ("Robin Skylights", "we", "us") installs and replaces skylights and rooflights in Nottingham and the surrounding area. We are the controller of the personal data described in this notice, which means we decide how and why it is used.

We have no public premises and do not publish a postal address; we visit customers at their homes. For any question about this notice or your data, email info@robinskylightsnottingham.co.uk or call 0115 775 0605.

This notice is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect only what we need to answer your enquiry and carry out the work.

• Enquiry form. Your name, email address, phone number, postcode or address, your message and any photos you attach. The form is run by our customer relationship management (CRM) provider, which stores the enquiry for us.
• WhatsApp. If you choose to message us on WhatsApp, we receive your phone number, your WhatsApp profile name, your messages and any photos or videos you send.
• Survey notes. When we visit, we take measurements, notes and photos of the roof and the room. Photos taken inside may show parts of your home.
• Job records. If you go ahead, we keep the quote, any variations agreed in writing, invoices and payment records, Building Control paperwork and your guarantee.
• Website data. Our website records limited technical information, such as your IP address and browser type, and uses cookies as set out in our cookie policy.

We do not ask for special category data, such as health information. If you tell us something of that kind, for example that someone in the house needs extra notice before work starts, we use it only to plan the visit.

UK GDPR requires a lawful basis for each use of personal data. Ours are:

• Replying to your enquiry, arranging a survey and preparing a quote: steps taken at your request before entering into a contract.
• Carrying out the installation and honouring the guarantee: performance of our contract with you.
• Notifying Building Control: legal obligation, since notifiable building work must be reported to a building control body with the address and details of the work.
• Keeping accounts and tax records: legal obligation.
• Keeping job records after completion, and dealing with any dispute or claim: our legitimate interest in being able to stand behind our work and defend our position.
• Running and securing the website: our legitimate interest in a site that works and is protected from misuse.
• Sending you news or offers: only with your consent, which you can withdraw at any time.

Where we rely on legitimate interests, we have weighed those interests against your rights and kept the use limited to what is needed.

We do not sell personal data. We share it only with:

• Our CRM and form provider, which stores enquiries and customer records on our behalf under a contract that limits its use of the data to our instructions.
• WhatsApp, part of Meta, when you choose to contact us that way. Messages pass through WhatsApp's service and are covered by WhatsApp's own terms and privacy policy as well as this notice.
• Our website host, which stores the site and the technical data it records.
• The building control body handling your job, either the council or a registered building control approver, where the work is notifiable.
• Professional advisers and public bodies, such as an accountant or HM Revenue and Customs, where the law requires it or where it is needed to establish or defend a legal claim.

Each provider acting for us is a processor and may use the data only to provide its service to us.

Some of our providers, including WhatsApp, may store or process data outside the UK. Where that happens, the transfer is protected by UK adequacy regulations or by contractual safeguards approved for use under UK law, such as the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can ask us for more detail by email.

• Enquiries that do not lead to work: up to 12 months after our last contact, so we can pick up a conversation if you come back to us, then deleted.
• Customer and job records: for the length of the 10-year workmanship guarantee, and for six years after it ends, which covers the period in which a legal claim could be brought.
• Accounting records: for as long as tax law requires.
• WhatsApp messages and photos: held on our devices for the same periods as the enquiry or job they relate to, then deleted.

When a retention period ends, we delete the data or anonymise it so it can no longer identify you.

Under UK GDPR you have the right to:

• Access the personal data we hold about you and receive a copy.
• Rectification: have inaccurate data corrected or incomplete data completed.
• Erasure: have your data deleted where there is no longer a good reason to keep it.
• Restriction: ask us to limit how we use your data while a question about it is resolved.
• Objection: object to uses based on our legitimate interests, and to direct marketing at any time.
• Portability: receive data you gave us, in a common electronic format, where we process it by automated means on the basis of contract or consent.

Where we rely on your consent, you can withdraw it at any time without affecting what was done before. We make no decisions about you by purely automated means.

To use any of these rights, email us. There is normally no charge. We may ask you to confirm your identity, and we will reply within one month, or tell you within that month if a complex request needs longer, as the law allows.

Please tell us first, by email, and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at any time.

Website: ico.org.uk
Helpline: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Access to customer records is limited to the people who need it to do the work. Phones and computers holding enquiries, photos or job files are password protected, and we use providers that encrypt data in transit. Paper notes from a survey are transferred to the job record and then destroyed.

Our website uses cookies and similar technologies. What each one does, and how to manage them, is set out in our cookie policy.

We review this notice when the way we handle personal data changes, for example if we take on a new provider. The current version is always the one on this page. This notice was last updated in October 2026.