Privacy Policy

Introduction

Sash & Case Windows Direct is a trading name of B&M Joiners Group Ltd (Company No. SC354884). The registered office is 13-15 Rodney Street, Edinburgh EH7 4EN. We are committed to protecting and respecting your privacy.

Information We Collect

We may collect your name, email address, phone number, property address and details of your enquiry when you contact us. If you use an estimate tool, we also store the choices you make and any photos or videos you upload of the property. Please avoid photos that show people's faces.

How We Use Your Information

We use your details to prepare the estimate or reply you asked for, and to contact you about that enquiry. That does not need separate consent, because you asked us to do it. We only send news and offers by email if you tick the optional box on the form, and you can unsubscribe at any time. The photo estimate measures windows automatically from your photo; a member of the team reviews the result before a price is confirmed. Photos may be processed by our measurement provider for that purpose.

Cookies and Similar Technologies

Draft for client and solicitor review. The cookie and Meta wording in this policy should be checked before it is treated as final legal text.

We use three kinds of cookies on this website. Your choice is stored for about six months in a first-party cookie named sash_cookie_consent.

Strictly necessary cookies are always active. They keep you signed in, protect forms against cross-site request forgery, remember whether you have dismissed notices, and store your cookie choice itself. The site cannot function without them, so they do not require your consent.

Analytics cookies are set only if you choose Accept all, or switch Analytics on under Manage preferences. They are provided by Google (Google Tag Manager and Google Analytics) and, if enabled, TikTok. They help us understand how visitors find and use the site. The lawful basis is consent.

Marketing cookies are set only if you choose Accept all, or switch Marketing on. They are used to measure and optimise our advertising. Until you opt in, we do not load the Meta script, set Meta cookies, or send data to Meta. See the Meta section below.

You can change or withdraw your choice at any time using the Cookie settings link in the footer of any page. Reject all, or turning Marketing off, stops further Meta collection immediately. It does not delete data already collected. You can also clear cookies in your browser.

Advertising measurement (Meta)

If you opt in to marketing cookies, we use the Meta Pixel and Meta Conversions API to record that a page was viewed and that a quote, contact, or photo estimate form was submitted successfully. The purpose is ad measurement and optimisation. The recipient is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The lawful basis is consent (PECR and UK GDPR Article 6(1)(a)).

Meta may set _fbp and _fbc on our domain. Meta documents each as lasting about 90 days. We send Meta a page URL, an event id, your IP address, your browser type, those cookie values if they are present, and a SHA-256 hash of your email and phone number when you submit a form. We do not send your name, address, photos, or the text of your message.

Meta Platforms Ireland Limited may transfer this information outside the UK, including to Meta Platforms, Inc. in the United States. Where that happens we rely on the UK International Data Transfer Addendum or another lawful transfer tool published by Meta. Withdraw consent with Cookie settings in the footer. Turning Marketing off stops the pixel and further server events immediately.

Who We Share Information With

We do not sell your personal information. We share it only with service providers who help us operate: our hosting provider, our email delivery provider (to send you quotations and replies), and where you have consented, the analytics providers named above and Meta Platforms Ireland Limited for advertising measurement. Some of these providers process data outside the UK; where that happens we rely on the safeguards those providers put in place, such as the UK International Data Transfer Addendum.

How Long We Keep It

Enquiry and quotation records are kept for as long as we may need them to serve you and to meet our legal and accounting obligations. Website analytics data is retained according to the provider’s own retention settings. You can ask us to delete your information at any time using the contact details below.

Your Rights

Under UK data protection law you have the right to access a copy of your personal data, to have inaccurate data corrected, to ask us to delete it, to restrict or object to how we use it, and to withdraw consent where we rely on it. To exercise any of these rights, contact us using the details below. If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk.

Facebook and Instagram

If you message or comment on our Facebook Page or Instagram professional account, Meta may send us that content so we can reply. We store conversation and comment records needed to operate the inbox, moderate comments, and (only if a member of staff explicitly converts the thread) create a lead. We do not treat a display name as proof of identity, and Messenger does not reliably provide email or phone numbers.

Webhook payloads are processed then redacted from storage after 30 days, and event keys are dropped after 90 days. Closed chat records follow the platform retention window. You can request deletion by emailing us, or via Facebook’s app data deletion flow. Deletion status pages are issued with a confirmation code after Facebook sends a signed deletion request.

Ask Sash chat assistant

Ask Sash is an automated AI assistant, not a member of staff. Messages you type are sent to Google (Gemini) to generate a reply. We do not save the conversation as a customer record. The assistant cannot store your phone number or address, arrange a callback, or book a survey.

Please do not put personal details in the chat. Use the contact form, email or phone if you want the team to call you.

To access, correct or delete personal information we hold, including an enquiry, an estimate, or security logs that may keep a short excerpt of a chat, email info@sashandcasewindowsdirect.com or write to 13-15 Rodney Street, Edinburgh, EH7 4EN, Scotland. You can also complain to the Information Commissioner’s Office as described under Your Rights.

Contact

For questions about this policy, contact us at info@sashandcasewindowsdirect.com or write to 13-15 Rodney Street, Edinburgh, EH7 4EN, Scotland.