About this policy
This policy explains how Steelcity Skylights Sheffield ("we", "us") collects, uses and protects personal information when you contact us, ask for a survey or quote, have work carried out, or use this website. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who is responsible for your information
The data controller is Steelcity Skylights Sheffield [company details to be confirmed].
We work from site to site and have no office open to visitors, so questions about this policy reach us by:
- Email: info@steelcityskylightssheffield.co.uk
- Phone: 0114 419 0424
The information we collect
- Contact details you give us: your name, phone number, email address and the address of the property where the work would be done.
- Enquiry details: what you tell us about the job, your preferred dates and times, and any photos you send of your room, roof or existing rooflight.
- Survey and job records: measurements, notes and photos taken at the survey and during the work, the quote, the life plan, and records of the work completed.
- Payment records: invoices and records of payments made. We do not keep full card details.
- Messages: emails, WhatsApp messages and notes of phone calls between us.
- Technical information: our web host keeps standard server logs, such as IP addresses and the pages requested, for security and to keep the site running.
How and why we use it
UK GDPR requires a lawful basis for each use of personal information. Ours are:
- Taking steps before a contract, and performing the contract: replying to your enquiry, arranging and carrying out the survey, preparing your quote and life plan, carrying out the work, and dealing with guarantee claims.
- Legal obligation: keeping financial records for tax purposes, making Building Control notifications where the work is notifiable, and meeting health and safety duties.
- Legitimate interests: keeping job records so we can deal with later questions about the work, defending legal claims, and keeping the website secure. We weigh these interests against your rights and do not use your information in ways you would not reasonably expect.
- Consent: where we ask for it, for example before using a photo of your finished job anywhere public. You can withdraw consent at any time.
We never sell your personal information, and we only send marketing messages if you have asked us to.
Who we share it with
We share personal information only where needed for the purposes above:
- Our enquiry form provider. The form on this website is provided by a third-party CRM service, embedded from mortaro-crm-production.up.railway.app. It receives and stores the details you submit on our behalf.
- Email, hosting and IT providers who run our website, email and records.
- WhatsApp. If you contact us on WhatsApp, your messages are handled by WhatsApp under its own privacy terms.
- Building Control bodies: the local authority or a registered building control approver, where work is notifiable.
- Manufacturers and suppliers, where needed to order your unit or to raise a product warranty claim on your behalf.
- Our accountant and professional advisers, and HMRC where the law requires.
Some of these providers may store data outside the UK. Where they do, we rely on the safeguards UK data protection law requires, such as a UK adequacy decision or approved contract terms.
How long we keep it
- Enquiries that do not lead to work: up to two years from our last contact, then deleted.
- Quotes, job records, life plans and photos for completed work: for the length of the 10-year workmanship guarantee plus one year, so we can deal with any claim.
- Financial records: for as long as tax law requires, normally six years from the end of the relevant financial year.
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information, where we no longer need it
- ask us to restrict how we use it, or object to how we use it
- ask for information you gave us to be passed to you or another organisation in a usable format
- withdraw consent at any time, where we rely on consent
To use any of these rights, email or call us. We will reply within one month, as the law requires, and there is normally no charge.
Keeping your information safe
We use password-protected accounts, secure connections and access limited to the people who need it. Paper notes from surveys are kept securely and destroyed when no longer needed.
Cookies
For how this website uses cookies, see our cookie policy.
Complaints to the regulator
If you are unhappy with how we have handled your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The current version is always on this page.
This policy was last updated on 14 October 2026.