Privacy Policy

Cosy Christmas (sole trader)

1. Introduction

This Privacy Policy explains how Cosy Christmas ("we", "us", "our") collects, uses, stores, and protects personal information when you request a quote, contact us, or use our services.

We follow the UK GDPR and the Data Protection Act 2018.

2. Data We Collect

Information you provide directly

• Name
• Phone number
• Email address
• Postcode or address
• Photos or videos of your property
• Details sent through the quote form
• Any follow-up communication (WhatsApp, SMS, email, phone)

Information collected automatically

• Basic website analytics (device, region, page views)
• IP address
• Browser type
• Minimal functional cookies

We do not collect unnecessary or excessive data.

3. Legal Basis for Processing

We process your information under:

Contractual necessity

To provide quotes, communicate with you, schedule work, and deliver services.

Legitimate interest

To operate safely, maintain basic records, and prevent disputes.

Legal obligation

For accounting, tax, and insurance compliance.

We never sell your data.

4. How We Use Your Information

We use your data to:

• Provide accurate quotes
• Contact you via phone, SMS, email, or WhatsApp
• Plan and complete installations or takedowns
• Maintain records required for insurance, safety, and legal compliance
• Improve service quality
• Resolve disputes or verify communication history

Photos/videos are used for:

• Assessing your quote
• Planning the installation
• Documenting work for records, insurance, or safety

They are not shared publicly without your permission.

5. Data Retention

• Quote requests: up to 12 months
• Completed jobs: up to 6 years (legal + tax requirements)
• Photos/videos: 12–24 months unless you approve portfolio use
• Messages/communications: 18–24 months

You may request deletion unless a legal obligation requires retention.

6. Data Sharing

We do not sell or share data for marketing.

We may share limited information only with:

• Insurance providers (claims)
• Accountants / legal advisers
• Website hosting or email service providers

All third parties must comply with UK GDPR.

We do not publish photos/videos without permission.

7. Data Storage and Security

Your data may be stored on:

• Encrypted cloud storage
• WhatsApp (end-to-end encrypted)
• Password-protected devices

Security measures include:

• Encrypted communications
• Restricted access (business owner only)
• Secure password management
• Regular device updates

We do not store card details.

8. Your Rights (UK GDPR)

You can request to:

• Access your data
• Correct inaccurate information
• Delete your data (where legally possible)
• Limit or object to certain processing
• Withdraw consent for photos/marketing
• File a complaint with the Information Commissioner's Office (ICO)

Contact:{" "} hey@cosy.christmas

Responses within 30 days.

9. Marketing

We do not send marketing messages unless you explicitly opt-in.

We only message you in direct response to your enquiry or booking.

10. Photos & Videos

We may take photos/videos of completed installations for:

• Portfolio
• Website examples
• Social media
• Advertising
• Insurance documentation
• Before/after comparisons

We do not publish identifiable property photos without your permission.

You may request removal at any time.

11. Cookies & Analytics

Our website uses minimal functional cookies for:

• Basic analytics
• Performance
• Security

We do not use tracking ads, profiling, or invasive marketing cookies.

You may disable cookies in your browser.

12. Children's Data

We do not knowingly collect information from anyone under 18.

If this occurs, contact us for removal.

13. Changes to This Policy

We may update this policy occasionally.

The "Updated" date reflects the latest version.

14. Contact

Cosy Christmas

Email:{" "} hey@cosy.christmas