Privacy Policy

1. Introduction

This Privacy Policy explains how Craig McLean Flooring (“we”, “us”, “our”) collects, uses and protects your personal information when you use our website, contact us, or use our services.

We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy laws.

By using our website or providing your information, you agree to the terms of this Privacy Policy.

2. Who we are

We are the data controller for the personal information collected via this website and in the course of providing our flooring services.

Website design & hosting provider: Cascade Digital (Cascade UK) — www.cascadeuk.ai — act as our website designers/technical providers and may have access to limited data only for hosting, maintenance and security purposes, under our instructions.

3. What information we collect

We may collect and process the following types of personal data:

• Contact details: name, email address, telephone number, postal address.
• Enquiry details: information you provide when requesting quotes, site visits or product information (e.g. room sizes, property details, preferences).
• Transaction details: records of goods and services supplied, invoices, payments, and related correspondence.
• Website usage data: IP address, device and browser information, pages visited, time and date of visits, referring websites (through server logs and analytics tools).
• Reviews and testimonials: any feedback you choose to provide about our services, including your name and general location where applicable.

We do not intentionally collect special category data (such as health data) through our website. Please do not include such information in your enquiries unless absolutely necessary.

4. How we collect your information

We collect personal information when:

• You contact us by phone, email or through any contact form on our website.
• You request a quote, consultation, supply and/or fitting of flooring products.
• You leave us a review or testimonial.
• You interact with our website, social media pages or online advertising (e.g. click on our Google/Facebook ads which lead to our site).
• Our website technology (server logs, analytics tools, cookies) automatically records certain technical data.

5. How we use your information

We use your personal information to:

• Respond to your enquiries and provide quotes for carpets, vinyl & LVT, laminate flooring, artificial grass and related services.
• Schedule and carry out site visits, measurements, deliveries and installations.
• Manage our customer records, invoices, payments and general business administration.
• Improve our services and website, including monitoring performance and understanding how visitors use our site.
• Maintain our reputation (e.g. using verified reviews/testimonials, where you have provided consent).
• Comply with legal and regulatory obligations, such as tax and accounting requirements.

We will only use your personal data when we have a lawful basis to do so, including:

• Contract: to take steps at your request before entering into a contract, and to perform a contract (e.g. supplying and fitting flooring).
• Legitimate interests: to manage and grow our business, respond to enquiries, and improve our services, provided your rights are not overridden.
• Legal obligation: to comply with laws applicable to our business.
• Consent: where required by law (for example, certain marketing communications). You may withdraw consent at any time.

6. Marketing communications

We are a local, family-run business and we do not engage in aggressive marketing.

• We may contact you about similar flooring services you have previously enquired about or purchased, where we rely on legitimate interests and it is permitted by law.
• If we ever use email marketing lists or newsletters, we will only do so with your consent (e.g. through an opt-in form), and you will be able to unsubscribe at any time.

We do not sell your data to third parties.

7. Cookies and website analytics

Our website may use cookies and similar technologies to:

• Ensure the website functions properly.
• Understand how visitors use the website (for example via tools such as Google Analytics).
• Improve performance and user experience.

Where required, we will provide a cookie banner or settings that allow you to consent to or manage non-essential cookies.

You can usually disable cookies in your browser settings, but this may affect how the website works. For more detailed information on cookies used, please contact us.

8. Sharing your information

We may share your personal data with:

• Our staff and authorised fitters who need the information to provide our services.
• Service providers who help us run our business (for example, IT hosting providers such as Cascade Digital, accountants, payment processors) under appropriate contracts.
• Professional advisers such as solicitors or accountants where required.
• Public authorities where we are legally obliged to do so (for example HMRC).

We do not share your information with unrelated third parties for their own marketing.

9. International transfers

We primarily store and process data within the UK. If any of our service providers are located outside the UK, we will ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent measures required by UK GDPR.

10. How long we keep your information

We keep your personal data only for as long as necessary for the purposes set out in this Privacy Policy, including:

• Enquiry records: typically up to 2 years from last contact.
• Customer records and invoices: usually up to 6 years, in line with tax and accounting requirements.
• Website analytics data: retained for a reasonable period to analyse trends and improve our site.

After these periods, data is securely deleted or anonymised where possible.

11. Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data in certain circumstances.
• Object to processing based on our legitimate interests.
• Restrict our processing of your data in certain cases.
• Withdraw consent where we rely on consent (for example, certain marketing).
• Lodge a complaint with the Information Commissioner's Office (ICO) if you are unhappy with how we handle your data (www.ico.org.uk).

To exercise any of these rights, please contact us using the details above.

12. Security

We take reasonable technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration or destruction. However, no system is completely secure, and you provide information at your own risk.

13. Third-party links

Our website may contain links to other websites, such as social media profiles or review platforms. We are not responsible for the privacy practices or content of those websites. You should review their privacy policies separately.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last updated” date.

Last updated: 30 July 2026