Privacy notice
Last updated 27 August 2026
This explains what personal information Whitten Ltd collects, why we hold it, how long we keep it and what you can ask us to do with it. If anything here is unclear, email hello@whittenltd.co.uk and we’ll explain it properly.
Who we are
Whitten Ltd, registered in England & Wales, company number 13585713. We are the data controller for the information described here. Contact us at hello@whittenltd.co.uk.
What we collect, and why
When you use the enquiry form
We collect your name, and whichever of your email address and phone number you give us, along with the services you tick and anything you write in the message box.
We use it only to reply to your enquiry and, if it goes further, to quote for and carry out the work. Our lawful basis is legitimate interests — responding to someone who has asked us to get in touch — and, once you become a customer, performance of a contract.
We do not use enquiry details for marketing, we do not add you to a mailing list, and we do not sell or share your details with anyone for their own purposes.
When you become a customer
We hold the address where we’re working, records of what we quoted, supplied and installed, any service history, and the invoicing details our accountants need. The lawful bases are performance of a contract and, for the accounting records, legal obligation.
When you visit this website
This site sets no tracking or advertising cookies and has no analytics. Our hosting provider keeps standard server logs, including IP addresses, to deliver the site and protect it from abuse. Web fonts are loaded from Google Fonts, which means your browser contacts Google to fetch them.
Who else handles it
We use a small number of established suppliers to run the business. They process data on our instructions and for no other purpose:
- Google — email and calendar, so your correspondence with us lives in our mailbox.
- Vercel — website and back-office hosting.
- Supabase — the database behind our quoting and job records, hosted in the EU.
- Xero — accounting, for quotes, invoices and payment records.
Some of these are US companies and may process data outside the UK. Where that happens it is covered by the safeguards those providers offer for international transfers, such as the UK extension to the EU–US Data Privacy Framework or standard contractual clauses.
How long we keep it
- Enquiries that don’t become work — up to 12 months, then deleted.
- Customer and job records — for the life of the installation and any warranty or service arrangement, so we know what we fitted if you call us back.
- Invoices and accounting records — six years after the end of the financial year they relate to, which is what HMRC requires.
Your rights
You can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that’s wrong;
- delete it, where we don’t have a legal reason to keep it;
- stop using it for a particular purpose, or object to how we’re using it;
- hand it over in a portable form.
Email hello@whittenltd.co.uk and we’ll respond within one month. There’s no charge.
Complaints
If you think we’ve handled your information badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes
If we change how we handle personal information we’ll update this page and the date at the top.