Privacy Notice

When you enquire or book with us, we collect your contact details, property address, photographs, video links, lighting requirements, our messages back and forth, and relevant payment records — payment references for bank transfers; we never see or store card details.

We use this information to prepare your quote, communicate with you, carry out your installation, maintain your display, arrange take-down and manage payments. We also keep appropriate records for accounting, security and resolving complaints or disputes.

We rely on the relevant legal grounds: taking steps towards or performing your contract, meeting legal obligations, our legitimate business interests and, where applicable, your consent.

You don't have to enquire, but we cannot prepare a reliable quote without the necessary property and contact information.

We use property photographs and walkthrough videos to design, price and document your installation. We store the photographs you provide and links to videos you share with us — never a copy of the video itself.

We will never publish identifiable photographs of your property for marketing without your separate permission. We normally ask after installation. You can withdraw permission by contacting us, and we'll stop using the images for that purpose and remove them from materials we control.

We only share information where needed to operate the business, including our website and hosting providers, communication services, accountant, insurer and professional advisers. Where you message us on WhatsApp, that service is involved too.

We may also disclose information where required by law or to handle a legal claim.

We never sell your personal information.

Where information is transferred outside the UK, we use the protections required by applicable data-protection law.

• Unsuccessful enquiries, and everything attached to them — photographs, video links, messages — normally 12 months
• Completed jobs, invoices and relevant payment records — normally 6 years
• Portfolio photographs — for as long as we have a valid reason and permission to use them

We may retain particular records longer where reasonably necessary for a legal obligation, complaint or claim.

We protect customer information using appropriate security measures — encrypted connections, private storage for photographs, expiring and revocable private links, and access limited to the people who need it for their work.

Our website uses essential technologies to function — remembering your appearance preference, your visit source and a half-finished quote request. We explain any additional cookies or tracking technologies and provide the choices required by law.

We also collect anonymous technical performance measurements such as page-load, layout-shift and interaction timings so we can find and fix slow or unstable pages. These samples do not contain your name, contact details, property address, enquiry token, IP address or cookie identifier.

We contact you about your enquiry or booking. We send unrelated promotional messages only where permitted, and you can tell us to stop at any time.

You can ask to see or correct your information, request deletion, object to certain uses, withdraw consent or exercise your other applicable data-protection rights. Some information must be kept for legal or legitimate reasons, so deletion is not always immediate or complete.

Email hello@cosy.christmas and we'll respond within the applicable legal timeframe. There is no charge.

If you have a complaint about how we've handled your information, contact us at the same address. We'll acknowledge it, investigate it and explain the outcome. You can also complain to the Information Commissioner's Office at ico.org.uk.