Contact details

Company: Smart Amenity Ltd
Email: info@staired.co.uk

Phone: 020 3746 7775

If you are not sure what something means in this Policy, contact us at the details above.

1) What personal data we collect

When you use our 4-step quotation form, we collect the information you provide:

Step 1: Your name (required), email (required), phone number, company name / door number, postcode

Step 2: Preferred time to contact (required), type of metalwork required (required), free-text description

Step 3: File uploads (up to 3 files, max 8 MB each; JPG, PNG, PDF only)

Step 4: “Where did you hear about us?”

We may also collect basic technical data when you visit the Site (e.g., IP address, device/browser type) generated by our web server and security tools.

reCAPTCHA: We enable Google reCAPTCHA on the submit button to prevent spam. That service may collect device and interaction data; the widget only loads after consent via our cookie banner. Details are in our Cookie Policy.

⚠️ Important: Please do not upload sensitive or special category data (e.g., health, biometric, political, or religious information). We do not use such data and will delete it if discovered.

2) Why we use your data (purposes) & legal bases

Preparing and sending your quote; contacting you about your request
Examples: reading your form details, calling/emailing you with questions or pricing.
Legal basis: Contract – Art. 6(1)(b) (steps prior to entering a contract).

Routine follow-up relating to your enquiry
Examples: checking if you received the quote, clarifying technical details.
Legal basis: Legitimate interests – Art. 6(1)(f). We have carried out a balancing test to ensure our interests are not overridden by your rights. You can object at any time and request a copy of this assessment.

Security and troubleshooting
Examples: server logs, firewall/anti-spam checks, backup and restore.
Legal basis: Legitimate interests – Art. 6(1)(f).

Compliance and record-keeping
Examples: tax, legal, or regulatory requirements.
Legal basis: Legal obligation – Art. 6(1)(c).

Marketing (only if you opt in)
Examples: occasional news or offers by email.
Legal basis: Consent – Art. 6(1)(a). You can withdraw consent at any time.

We do not sell personal data.

Note: If you do not provide the required fields in the quotation form, we will be unable to process your request or provide a quote.

3) File uploads

If you attach drawings or photos (JPG/PNG/PDF), we use them only to assess feasibility and prepare your quote. Access is limited to our project/sales team.

Do not upload sensitive or special category personal data.

4) Who we share data with (recipients)

We use vetted service providers (processors) to run the Site and handle communications. These typically include:

Web hosting & CDN/security: e.g., Cloudflare

Email & productivity: e.g., Google Workspace / Microsoft 365

Form plugin: NEX-Forms

Backups & monitoring: UpdraftPlus

Each provider only processes data on our instructions and under a contract (DPA) that protects your information.

If required by law, we may share data with public authorities.

5) International transfers

Some providers may store or access data outside the UK (for example, Google Workspace in the USA). Where this happens, we rely on a valid transfer mechanism (such as the UK Addendum to the EU Standard Contractual Clauses or an adequacy regulation) to protect your information.

Details of safeguards for specific providers are available on request.

6) How long we keep your data (retention)

Quotation enquiries: normally up to 12 months from our last interaction, or longer if required for legal/accounting purposes or if your enquiry progresses into a project.

Server/security logs: typically 90 days unless we need them longer to investigate issues.

Marketing emails: until you unsubscribe or withdraw consent.

We periodically review and securely delete data we no longer need.

7) Your rights

Under UK GDPR you have the right to:

Access your personal data

Rectify inaccuracies

Erase data (in certain cases)

Restrict or object to processing (especially where based on legitimate interests)

Data portability (for data you provided to us)

Withdraw consent at any time (e.g., by clicking “unsubscribe” in our emails or contacting info@staired.co.uk)

We do not use your data for automated decision-making or profiling that has legal or significant effects.

To exercise any right, email info@staired.co.uk.
We may need to verify your identity.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
ico.org.uk
or 0303 123 1113.

8) Cookies and similar technologies

Our Site uses necessary cookies for core functions. Non-essential cookies (e.g., analytics or reCAPTCHA) are blocked by default and only load if you consent via our cookie banner.

Google reCAPTCHA may process data in the USA; see Google’s Privacy Policy for details.

For full details, see our Cookie Policy, where you can adjust preferences at any time.

9) Children

Our services are not directed to children under 16. Please do not submit data about minors.

10) Security

We use reasonable technical and organisational measures to protect your data, including TLS/HTTPS encryption, access controls, backups, and security monitoring. However, no system is 100% secure.

11) Changes to this Policy

We may update this Policy from time to time. The latest version will always be posted on this page with the updated date.

We review this Policy at least annually and sooner if there are significant changes in our processing or applicable law.

12) How to contact us

If you have any questions about this Policy or how we handle your data, contact: info@staired.co.uk