Your data

Privacy policy

What we collect when you get in touch, what we do with it, and how to ask us to show you, correct or delete it.

Last updated

Who we are

This website is run by BD Signs Limited, trading as BD Signs, a company registered in England and Wales under company number 09792387. Our registered office is 1 Derby Road, Eastwood, Nottingham NG16 3PA, and our showroom and factory are at 19 Northern Ct, Nottingham NG6 0BJ.

We are the controller of the personal data described here, which means we decide how it is used and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What we collect

We only collect what you give us, plus the basic technical details any website receives.

  • The enquiry form — your name, email address, phone number (if you give it), what you need help with, your message, and the page you sent it from.
  • Open day RSVPs — your name, business name, email address, phone number, how many people are coming, roughly when you will arrive, and any notes you add.
  • Email, phone and showroom visits — whatever you tell us about yourself and your project.
  • If you become a customer — the details we need to quote, design, make, fit and invoice the work: contact and site addresses, photos and measurements of the site, your artwork, and payment records.
  • Technical details — like every website, our server records your IP address, browser type and the pages requested, which is used to keep the site secure and working.

Please do not send us sensitive information (such as health details) through the website — we do not need it to quote for your project.

How we use it, and why we are allowed to

The law only lets us use personal data when we have a lawful basis. Ours are:

  • Replying to your enquiry and quoting — steps you have asked us to take before entering into a contract.
  • Carrying out work you have ordered — performing our contract with you or your business.
  • Planning the open day, keeping the website secure and filtering out spam — our legitimate interests, which we balance against your rights.
  • Keeping accounting and tax records — a legal obligation.

We do not sell your data, and we do not use it to make automated decisions about you. We will only send you marketing emails if you have agreed to receive them, and you can opt out at any time.

Who we share it with

We share personal data only where it is needed, with:

  • our email delivery provider (SMTP2GO), which delivers website form submissions to our inbox;
  • our website host, and the developer who maintains this website and receives a copy of form submissions to check they are being delivered;
  • couriers and suppliers, where that is needed to deliver your order;
  • our accountants and professional advisers;
  • the police, HMRC or other authorities, when the law requires it.

These providers act on our instructions and may only use your data to provide their service to us. Where a provider processes data outside the UK, we rely on the safeguards UK data protection law requires, such as adequacy regulations or the approved international data transfer agreement.

Cookies

This website does not use advertising or analytics cookies. It sets two cookies that it needs to work, which expire after 120 minutes without activity:

  • laravel-session — keeps track of your visit, so a form you have filled in is not lost if something needs correcting;
  • XSRF-TOKEN — a security token that stops other websites sending forms in your name.

The "I am not a robot" check on our forms runs in your browser and does not use cookies or a third-party service. Project videos are played from YouTube in its privacy-enhanced mode and only load when you press play; once a video is playing, YouTube may store information on your device as described in Google's privacy policy. Links to our social media profiles take you to those sites, whose own policies then apply.

How long we keep it

We keep enquiries for as long as we need them to deal with your enquiry and any follow-up. Open day RSVPs are used to plan that event and follow up with you about it. Customer records are kept for as long as we need them for the work and any aftercare, and accounting records for six years, as UK tax law requires. After that the data is deleted or anonymised.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you;
  • ask us to correct anything that is wrong or incomplete;
  • ask us to delete your data, or to restrict how we use it;
  • object to us using your data on the basis of our legitimate interests, or for marketing;
  • ask for data you gave us to be passed to you or another organisation in a usable format;
  • withdraw your consent, where we rely on it, at any time.

There is normally no charge, and we will reply within one month. If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

How to contact us

For any question about your data, or to use any of the rights above, reach us by post or email:

BD Signs Limited

19 Northern Ct, Nottingham NG6 0BJ

info@bdsignsnottingham.co.uk

We may update this policy when the website or the way we work changes. The date at the top of the page shows when it last changed.