Britmet Privacy Notice

Last updated: July 2026

1. Who we are

2. Our data protection officer 

We have appointed an external Data Protection Officer (DPO) who is responsible for overseeing questions about this notice. If you have any questions, wish to exercise your rights, or want to make a complaint, contact our DPO:

• DPO: The Privacy Worx Ltd
• Email: dpo@theprivacyworx.com

3. The personal data we collect

When you use our website, for example by completing our online estimate/enquiry form, or as you browse, we collect the following categories of personal data. 

• Identity and contact data - such as your name, email address, telephone number and postal address / postcode.
• Business information - such as your company name, job title, organisation and other business details relevant to your enquiry. 
• Property and project data - information about your property, roofing project or the products and services you are interested in. 
• Communications data - the content of your enquiry, correspondence with us, and records of our communications 
• Customer relationship data - records of enquiries, quotations, product interests and previous interactions with us. 
• Documents and images - files you choose to upload, such as photographs, plans or specifications (where applicable)
• Marketing preferences - your preferences for receiving marketing communications and records of your consent or opt-out. 
• Technical and usage data - collected automatically as you use the site, such as your IP address, browser type and version, device information, operating system, pages visited, referring website and interactions with our website. We do not intentionally collect special category personal data (such as information about health, ethnicity or religious beliefs). Please do not include this type of information in free-text fields unless it is necessary for your enquiry. 

4. Why we use your data and our lawful basis

We only use your personal data where the law allows. The purposes and the lawful basis under Article 6 of the UK GDPR are:

Where we rely on legitimate interests, our interest is operating and growing our business and responding efficiently to enquiries, and we have balanced this against your rights. 

5. Who we share your data with (categories of recipients)

We do not sell, rent or trade your personal data. We may share it with the following categories of recipients: 

• Our staff who need it to respond to your enquiry or provide our products and services. 
• Service providers acting on our behalf (processors) such as our website hosting provider, CRM and email/communications systems, and IT support providers, who process data only on our instructions under a written contract. 
• Approved installers, stockists or distributors where necessary to progress your estimate request or arrange supply. 
• Professional advisers, such as our accountants, auditors, insurers and lawyers.
• Regulators, law enforcement and other authorities where we are required or permitted by law to share data (e.g. HMRC, the courts).

6. International transfers

We make no such transfers; data is stored and processed within the UK only. 

7. How long we keep your data 

We keep personal data only for as long as necessary for the purposes above. 

Indicative retention periods include:

• Disciplinary and grievance records - 13 months after final resolution. 
• Appraisal and performance records - 13 months after leaving employment 
• PAYE and National Insurance records - 6 years 
• Employers' liability and attendance records - 6 years 
• Medical and attendance records - 6 years after leaving employment. 
• Pension and payroll records - up to 12 years after employment ends. 
• Unsuccessful job applications - 6 months after the closing date. 

After these periods, data will be securely deleted or anonymised. 

8. Your rights 

Under UK data protection law you have the right to:

• Access a copy of your personal data 
• Rectification of inaccurate or incomplete data 
• Erasure ("right to be forgotten") in certain circumstances 
• Restrict our processing in certain circumstances
• Object to processing based on legitimate interests, and to direct marketing at any time
• Data portability in certain circumstances 
• Withdraw consent at any time, where we rely on consent (this does not affect processing already carried out) 

To exercise any of these, contact our DPO (section 2). We will respond within one month. There is normally no charge. 

9. Complaints

Complaining to us. You have the right to complain to us directly about how we handle your personal data. To make a complaint, contact our DPO (section 2), we make it easy to raise a complaint and you can do so by email, by post or by completing our online form here: Data Protection Complaint Form. When you complain, we will:

• Acknowledge your complaint promptly (and in any event within 30 days of receiving it)
• Investigate it without undue delay and take appropriate steps to address it.
• Keep you informed of progress and let you know the outcome. 

Complaining to the ICO. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:

• Website: https://ico.org.uk/ - Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF 

We would, however, appreciate the chance to address your concerns first. 

10. Is providing your data required?

Where you request an estimate or make an enquiry, providing the requested details is necessary for us to respond. If you do not provide them, we may be unable to deal with your request. Providing marketing consent is entirely optional. 

11. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects. 

12. Changes to this notice

We may update this notice from time to time. The current version, with its date, will always be available on our website. Where changes are significant, we will take reasonable steps to bring them to your attention.