Privacy Policy

1. Introduction

Excelsior Kitchens Ltd is committed to protecting your personal information and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us or enquire about our products and services.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who we are

Company: Excelsior Kitchens Ltd
Address: 3 Takeley Business Centre, Dunmow Road, Takeley, CM22 6SJ
Email: info@excelsiorkitchens.com
Website: www.excelsiorkitchens.com

Excelsior Kitchens Ltd is the data controller responsible for personal information collected through this website.

3. Information we collect

When you contact us through our website, we may collect:

• Your first and last name.
• Your email address.
• Your telephone number, where provided.
• Information included in your enquiry.
• Your acknowledgement of our Privacy Policy.
• Technical information associated with website security and form submissions, where recorded.

We may also collect information you voluntarily provide when discussing a kitchen design, installation or other project.

4. How we use your information

We use personal information to:

• Respond to enquiries about our products and services.
• Discuss potential kitchen projects.
• Prepare quotations and provide requested information.
• Maintain appropriate correspondence and customer records.
• Protect our website against spam and unauthorised activity.
• Maintain and improve website functionality.
• Understand website usage through optional analytics, where consent has been provided.

We do not use contact-form enquiries to send unsolicited marketing emails.

5. Lawful bases for processing

Depending on the circumstances, we may rely on:

• Legitimate interests: Responding to general enquiries and maintaining website security.
• Pre-contractual steps: Preparing quotations or discussing services at your request.
• Legal obligations: Retaining or disclosing information where required by law.
• Consent: Processing optional website analytics where consent is required.

6. Contact forms

Our website uses Gravity Forms to process enquiries.

Information submitted through our Contact form is stored within the website's form-management system. A notification containing the enquiry details is also generated for Excelsior Kitchens.

We use this information to respond to your enquiry and provide requested information.

Submitting an enquiry does not subscribe you to marketing communications.

7. Cloudflare Turnstile

We use Cloudflare Turnstile to help protect our Contact form against spam, automated submissions and misuse.

Turnstile may process technical information about your browser, device and interaction with the website to assess whether a submission is legitimate.

This technology is used for security purposes rather than advertising.

Further information is available in Cloudflare's Privacy Policy and Turnstile Privacy Addendum.

8. Cookies and Google Analytics

Our website uses necessary technologies to support its operation, security and cookie preferences.

We use GDPR Cookie Compliance by Moove Agency to manage visitors' choices about optional cookies.

Google Analytics 4 has been configured to help us understand website usage and improve our website. Its production operation and consent controls remain subject to final testing.

Optional analytics will be activated only in accordance with the consent choices and configuration described in our Cookie Policy.

You can manage your preferences using the cookie banner or the Cookie settings link in our footer.

9. Google Fonts and external services

The website may use externally hosted typography resources, including Google Fonts; this will be confirmed during production checks.

Where fonts are loaded from Google's servers, your browser may transmit technical information, including your IP address.

10. Sharing information

We do not sell personal information.

We may share relevant information with service providers where necessary to operate our website, manage enquiries or deliver services.

These may include:

• Krystal Hosting and website technical support providers.
• Microsoft 365 (email services).
• Cloudflare for website security.
• Google for consented analytics and, if applicable, externally hosted fonts.
• Other professional service providers where necessary.

11. Data retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

General enquiries: A retention period of up to 12 months after the last relevant communication has been proposed, subject to confirmation of business practice and an appropriate deletion process.

Customer and project records: Different retention periods may apply where information relates to quotations, contracts, completed projects or legal obligations.

Technical and analytics information: Retention depends on the relevant security, hosting and analytics configuration.

12. International data transfers

Some service providers may process or access personal information outside the United Kingdom.

Where international transfers occur, we will use appropriate safeguards where required by UK data protection law.

13. Your rights

Subject to applicable legal conditions, you may have the right to:

• Access your personal information.
• Request correction of inaccurate information.
• Request deletion of your information.
• Restrict certain processing.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent where processing relies on consent.

To exercise your rights, contact info@excelsiorkitchens.com.

14. Complaints

If you have concerns about how we use your information, please contact us so we can investigate.

You also have the right to complain to the Information Commissioner's Office (ICO).

Website: https://ico.org.uk/make-a-complaint/

15. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse and disclosure.

These may include access controls, website security protections, spam prevention and appropriate hosting safeguards.

16. Changes to this policy

We may update this Privacy Policy to reflect changes in our services, website technology or legal obligations.