GDPR Compliance Statement

Last updated: April 2026

Our commitment to data protection

Disce Home Glazing Ltd is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the privacy and security of your personal data seriously.

Data controller

Disce Home Glazing Ltd is the data controller for personal information processed through our website and business operations.

Registered address: Unit 7, Riverside Trade Park, Kew Bridge Road, Brentford, TW8 0BH, United Kingdom

Lawful basis for processing

We process personal data under the following lawful bases:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for a contract we have with you, or to take steps at your request before entering into a contract
• Legal obligation: Where we need to comply with the law
• Legitimate interests: Where processing is in our legitimate interests and does not override your fundamental rights

Your GDPR rights

Under the UK GDPR, you have the following rights:

Right to be informed

You have the right to clear, transparent information about how we use your personal data. This is provided through our privacy policy and this statement.

Right of access

You can request a copy of the personal data we hold about you. We will provide this within one month of your request.

Right to rectification

You can ask us to correct inaccurate or incomplete personal data.

Right to erasure

You can request deletion of your personal data in certain circumstances, including where it is no longer necessary for the purpose for which it was collected.

Right to restrict processing

You can request that we restrict processing of your personal data in specific circumstances.

Right to data portability

You can request a copy of your personal data in a structured, commonly used, machine-readable format.

Right to object

You have the right to object to processing of your personal data in certain circumstances, including for direct marketing purposes.

Rights related to automated decision-making

We do not use automated decision-making or profiling in our processing of your personal data.

How to exercise your rights

To exercise any of your GDPR rights, please contact us:

Email: [email protected]

We will respond to your request within one month. In complex cases, we may extend this by a further two months and will inform you of any such extension.

Data security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication
• Staff training on data protection
• Incident response procedures

Data breach notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach.

International transfers

We do not routinely transfer personal data outside the United Kingdom. If such transfers become necessary, we will ensure appropriate safeguards are in place as required by UK GDPR.

Complaints

If you believe we have not complied with data protection law, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

Updates to this statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We will post any updates on this page.

Contact us

For questions about GDPR compliance or data protection:

Email: [email protected]