Privacy Policy

Our website address is: https://www.cnrdesign.co.uk.

CNR Services International Ltd (“CNR”, “we”, “us”, “our”)
Website: www.cnrdesign.co.uk
Email: admin@cnrdesign.co.uk
Address: 6 Spencer Avenue, Mapperley, Nottingham, NG3 5SP, United Kingdom
Registration: CNR Services International Ltd is a registered limited company in England & Wales company number: 05584407

Last updated: 26 August 2025

CNR respects your privacy and is committed to protecting your personal data. This policy explains what we collect, how we use it, how we keep it safe, and the rights you have under UK data protection law (UK GDPR and the Data Protection Act 2018).

What data do we collect?

Depending on how you interact with us, we may collect:

Identity & Contact Data – name, company, job title, email address, telephone number, postal address.
Transactional Data – purchase history, quotations, invoices, warranty/support records.
Communications Data – enquiries, messages and correspondence you send to us.
Technical & Usage Data – IP address, device/type, browser, pages viewed, referring site, date/time, and other standard log/analytics information.
Marketing Preferences – your choices about receiving updates from us.

We do not intentionally collect special category data (e.g., health, ethnicity) or information about children.

How do we collect your data?

We collect data when you:

Contact us by email, phone, web forms or post.
Request a quotation, place an order, or receive support.
Sign up for updates or marketing (where offered).
Use our website, which collects certain Technical & Usage Data via cookies or similar technologies.
Interact with us at events or via professional networks.

We may also receive information from third parties (e.g., analytics providers, anti-spam/anti-fraud services, or public business directories).

Why do we use your data (lawful bases)?

We process personal data under one or more of these lawful bases:

Contract – to provide quotations, fulfil orders, and deliver services/support.
Legitimate Interests – to run, secure, and improve our website and business; to respond to enquiries; to manage relationships; and to keep records. We balance these interests against your rights.
Consent – for optional marketing or cookies where consent is required. You can withdraw consent at any time.
Legal Obligation – to comply with tax, accounting, product safety, and other legal requirements.

How will we use your data?

We use your data to:

Respond to enquiries and provide quotations.
Process and deliver orders; provide customer service, warranties and technical support.
Operate, maintain, and improve our website, products and services.
Administer and protect our business (e.g., troubleshooting, data analysis, testing, system maintenance, support, reporting).
Send service communications (e.g., order updates).
Send marketing updates only if you have opted in or where permitted by law (you can opt out at any time).

Who do we share your data with?

We only share personal data when necessary and with appropriate safeguards, for example with:

Service providers / processors who supply hosting, email, IT, analytics, security, delivery/courier, payment processing, accounting or CRM tools.
Professional advisers (lawyers, accountants, insurers) where needed.
Authorities where required by law or to protect rights, safety or property.

We do not sell your personal data.

International transfers

Some providers may process data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place (e.g., UK adequacy regulations, the UK–US Data Bridge where applicable, or ICO-approved Standard Contractual Clauses), plus additional technical/organisational measures as needed.

How do we store and protect your data?

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These include access controls, secure servers, and staff awareness. While no system is completely secure, we continually work to protect your information.

How long do we keep your data?

We keep personal data only for as long as necessary for the purposes set out in this policy and to meet legal/accounting/reporting requirements. Typical retention periods are:

Customer/order records: up to 7 years from the end of the financial year in which the transaction occurred.
General enquiries (no ongoing relationship): up to 24 months after last contact.
Website logs & analytics: typically 12–26 months (tool-dependent).

When retention periods expire, we delete or anonymise the data securely.

Your data protection rights

Under UK GDPR you have the right to:

Access your personal data.
Rectify inaccurate or incomplete data.
Erasure (delete) your data in certain circumstances.
Restrict processing in certain circumstances.
Object to processing based on legitimate interests and to direct marketing.
Data portability (receive your data in a reusable format) in certain cases.
Withdraw consent at any time where processing relies on consent.
Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (we do not perform such decisions).

We normally respond within one month. We do not charge a fee unless your request is manifestly unfounded or excessive.

To exercise your rights, please contact admin@cnrdesign.co.uk.

Cookies

Cookies are small text files placed on your device to help our site work and to understand how it’s used. We use:

Strictly necessary cookies – essential for core site functionality.
Analytics cookies – to understand site usage and improve performance (e.g., pages visited, time on page).
Preference/functional cookies – to remember choices you make (where used).

You can control cookies via our cookie banner (where shown) and/or your browser settings. Blocking some cookies may affect site functionality. For more about cookies in general, see independent resources such as allaboutcookies.org.

If we use specific third-party tools (e.g., Google Analytics or reCAPTCHA), they may set their own cookies. Their processing is governed by their own privacy policies.

Privacy policies of other websites

Our website may contain links to other sites. We are not responsible for their content or privacy practices. We encourage you to read the privacy policy of any site you visit.

Changes to this policy

We may update this policy from time to time. The latest version will always be posted on this page with the “Last updated” date.

How to contact us

Questions about this policy or your data?
Email: admin@cnrdesign.co.uk
Post: CNR Services International Ltd, 6 Spencer Avenue, Mapperley, Nottingham, NG3 5SP, United Kingdom

How to contact the ICO

You have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Helpline: 0303 123 1113 • www.ico.org.uk