Privacy Policy & Cookie Notice.

1. Who we are

Forrestal Flooring Ltd is a family-run limited company founded by Darren Forrestal, registered in England & Wales (Company No. 14532635) and based at Ramillies Gardens, Bognor Regis, West Sussex PO22 7QH. For the purposes of UK GDPR, Forrestal Flooring Ltd is the data controller for any personal information you provide via this website, by phone or by email.

If you'd rather just talk to a human about anything on this page: info@forrestalflooring.co.uk · 07973 658149.

2. What we collect

We only collect what we need to reply to your enquiry and (if you go ahead) do the work. Specifically:

• Quote enquiry form — name, phone, email, postcode, project type, the message you type. All optional except name and email.
• Phone / email enquiries — whatever you tell us, plus the call record in our phone log or the email thread.
• Site visits — at the survey we'll note room dimensions, subfloor type, sometimes a few photos to refer to when quoting. We do not photograph the inside of your home for marketing without your written consent.
• Customer records during the job — installation address, billing address (if different), invoice records, payment confirmations.
• Website analytics — see the cookies section below. This website carries no analytics or third-party tracking — see §8.

We do not collect: bank account numbers (you pay us, not the other way round), passwords, your date of birth, your political/religious/health status, or anything else that isn't directly needed to quote and lay your floor.

3. Why we collect it (lawful basis)

Under UK GDPR every bit of personal data has to sit under a specific "lawful basis". Here's ours:

• Replying to your enquiry — Legitimate interest: you've asked us a question and we'd like to answer it.
• Producing a quote — Legitimate interest / Pre-contractual steps: you've asked us to price work.
• Carrying out the work and invoicing — Contract: you've engaged us to lay a floor.
• Keeping records for tax & insurance — Legal obligation: HMRC require us to retain financial records for six years.
• Marketing follow-ups — We don't do these. We don't run a newsletter and we don't put you on a marketing list. If you've been a customer we may, with your spoken consent, contact you once after install to ask for a Google review (or, where applicable, a Checkatrade review).

4. Who we share it with

Personal information stays inside the business. We share it only with:

• HMRC and our accountant — for tax filings, invoice records and compliance.
• Our insurance provider — if a claim is ever made on our public liability policy.
• Trade suppliers — but only the delivery address and a contact phone in case the haulier needs to ring on the day.
• Review platforms (Google / Checkatrade) — only with your explicit consent, after a job is complete, so they can verify the review you've left.

We never sell your data, rent it, or pass it to third-party marketers.

5. How long we keep it

• Enquiries that don't become jobs — deleted after 12 months.
• Quotes that didn't go ahead — deleted after 24 months.
• Customer records for completed jobs — kept for 6 years for HMRC + insurance + warranty reasons, then deleted.
• Email backups — purged on the same rolling schedule.

6. Your rights

Under UK GDPR you have the right to:

• Ask us what personal data we hold about you (Subject Access Request) — free, replied to within one calendar month.
• Ask us to correct anything that's wrong.
• Ask us to delete your data ("right to be forgotten") — subject to the legal-retention windows in §5.
• Object to processing where our basis is "legitimate interest".
• Withdraw consent (e.g. for marketing follow-ups) at any time.
• Receive a copy of your data in a portable format.

To exercise any of these: email info@forrestalflooring.co.uk with "Data request" in the subject line.

7. Cookies & tracking

This site is intentionally low-cookie. Here's the full inventory.

What we do not use: Google Analytics, Google Ads, Meta Pixel, Hotjar, TikTok Pixel, or any other behavioural / advertising tracker. No retargeting. No "people who looked at hardwood also looked at…" nonsense.

Because the only cookies are strictly necessary for the map tiles to load (and they're on a single page), we don't show a cookie consent banner — UK PECR doesn't require one for strictly-necessary cookies. If we ever add anything that does need consent, you'll see a banner before it loads.

How to control cookies in your browser

You can block or delete cookies via your browser settings:

• Chrome — Settings → Privacy and security → Cookies and other site data
• Safari — Preferences → Privacy → Manage Website Data
• Firefox — Settings → Privacy & Security → Cookies and Site Data
• Edge — Settings → Cookies and site permissions → Cookies and site data

8. Third-party services

The website embeds two third-party services. Each has its own privacy policy:

• CARTO / OpenStreetMap — used to render the coverage map on /contact/. Tile requests include your IP. CARTO privacy policy · OSM privacy policy.
• Google Fonts — webfont delivery. Font requests include your IP. Google Fonts privacy FAQ.

If you'd prefer to view the site without either, blocking them in your browser will degrade the visual styling and the map, but everything else (content, contact details, forms) will continue to work.

9. Security

Practical measures we take:

• HTTPS (TLS) across the whole site — your enquiry never travels in plain text.
• Email accounts secured with strong unique passwords and two-factor authentication.
• Devices used to access customer data are password-protected and encrypted.
• Paper records (signed quotes, deposit slips) are kept in a locked filing cabinet at the Bognor Regis workshop and shredded after the retention window in §5.
• If we ever suffer a data breach affecting your data, we'll tell you within 72 hours of becoming aware of it, as required by UK GDPR.

10. Changes to this policy

We may update this page from time to time. The "Last updated" date at the top will always reflect the most recent change. Material changes (e.g. introducing analytics, or starting a marketing list) will be flagged on the home page for at least 30 days before they take effect.

11. Contact & complaints

For any privacy question, data request, or complaint about how we've handled your information:

• 📧 info@forrestalflooring.co.uk
• 📞 07973 658149
• ✉️ Forrestal Flooring Ltd, Ramillies Gardens, Bognor Regis, West Sussex PO22 7QH

If you don't think we've resolved your concern, you have the right to complain to the UK regulator:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
ico.org.uk · 0303 123 1113