Privacy Notice

This privacy notice is issued by Certass Limited (referred to as “we”; “us”; “our”; and “Certass”) and relates to our use of any personal data concerning you, (referred to as “data”) which has been passed to us by a third party, Windowbase Limited.

We shall respect your privacy rights and your rights as a data subject. We will manage and protect your data accordingly whilst it is in our hands in accordance with all applicable data protection legislation and in accordance with this notice.

How Did We Receive Your Data?

We received your data from Windowbase Limited, which provides records of the UK’s window fabricators; installers; and trade counters.

Who is the Data Controller?

We are registered with the Information Commissioner’s Office, as a data controller, under the registration number of Z2589446. We can be contacted at the following address:

Certass Ltd
14 Castle Street
L2 0NE

Who is the Data Protection Officer?

We have appointed a Data Protection Officer, who is the point of contact for enquiries relating to how your data is processed. The Data Protection Officer can be contacted at the following address:

Blair Houston, 
4 Forbes Drive 
KA8 9FG, 
Email: [email protected]

On What Basis Do We Process Your Data?

We shall process your data lawfully in accordance with the legitimate basis for data processing set out in Article 6 of the General Data Protection Regulation. The legal basis for processing your data is as follows:

  • In the course of contacting you in respect of products or services that may be of interest to you; processing your data is necessary for the pursuit of our legitimate interests (providing that these interests are not overridden by your own rights and interests). This shall be the default basis of processing your data unless we inform you otherwise.

What Types of Data Do We Process?

We shall in the normal course of business process the following types of personal data:

  • Your name.
  • Your email address.
  • Your contact details.

We will not -in the normal course of business- process “special categories” of personal data. Exceptionally, we shall only process these categories of personal data where we have separately obtained your positive, explicit, informed consent; unless your consent is not required by law, or the information is necessary to protect your health. The special categories of personal data are as follows:

  • Racial or ethnic origin.
  • Political opinions.
  • Religious and philosophical beliefs.
  • Trade union membership.
  • Biometric data.
  • Sexual orientation.
  • Health data.

Will Third Parties Receive Your Data? What Are Their Interests?

We will only pass your data to our employees and agents who have a legitimate interest in contacting you on our behalf. We will update you if it becomes necessary to pass your data to any party other than the aforementioned.

Your data will not be transmitted to organisations outside of the European Union.

What Are Your Rights to the Data?

Right of Subject Access

You can request details of all data we hold about you by submitting a subject access request to the Data Protection Officer, at the address provided above.

We aim to comply with such a request from you within one month of the request being made. Where we cannot provide you with this information within one month; we shall inform you of this and provide the reasons why this cannot be achieved; at which point, we shall have a total of 3 months to comply with this request.

In the normal course of business, we shall not charge a fee for a subject access request. However, in the event that you make a subject access request that is of a manifestly unfounded, repetitive or excessive nature, we reserve the right to charge a fee of £10 per request.

Right of Rectification

In the event that your data is incorrect; you have the right to have this rectified by us. In the event that any of your data is incorrect, please contact the Data Protection Officer at the address provided above. We shall not charge a fee for your data to be rectified.

Right of Objection

You have the right to object to our processing of your data. Please note, that where we require to continue to process your data for reasons such as the defence of claims, we shall not be required to cease processing your data. In the event that you wish to object to us processing your data, please contact the Data Protection Officer at the address provided above.

Right of Erasure

You have the right to request that we delete your data provided that; we no longer require your data; or there is no legitimate legal basis for us to process your data; or we have unlawfully processed your data; or the data must be erased in order to comply with the law.

If you have grounds to request that we delete your data -and you wish to do so- please contact the Data Protection Officer at the address provided above. We shall not charge a fee for your data to be deleted from our databases.

Right of Data Portability

You have the right to request that we provide you a copy of your data in a machine-readable format, for the purposes of transferring your data from us to another data controller.

Can a Complaint Be Made?

If you have any complaints about how we process your data; please contact the Data Protection Officer, at the address provided above.

In the event that we are unable to resolve your complaint: You have the right to make a complaint to the Information Commissioner’s Office if you believe that your information has been mishandled by us. The Information Commissioner’s Office can be contacted as follows:

Information Commissioner’s Office
Wycliffe House
Water Lane
Tel: 0303 123 1113