1. About This Privacy Notice

This privacy notice explains how Thornbury Glasshouses collects, uses, stores and protects personal information when you visit our website, contact us about our glasshouses or related services, or otherwise communicate with us in connection with our business. It also explains the rights available to you under applicable data protection law.

Thornbury Glasshouses is committed to handling personal information responsibly, transparently and fairly. This notice is written for visitors to our website and people who contact us as prospective or existing customers, suppliers or other business contacts. It is intended to describe the information processing that is relevant to those interactions.

This notice was last reviewed on 2026-05-22. We may update it from time to time when our services, website, technology or legal obligations change. The current version will be made available on our website, and the effective date will identify when it was last updated.

2. Who Is Responsible for Your Information

Thornbury Glasshouses is the controller responsible for personal information covered by this notice. Our contact details are:

Thornbury Glasshouses
The Workshop, Gloucester Road, Cirencester, Gloucestershire, GL7 2NZ, United Kingdom
Email: workshop@thornburyglasshouses.co.uk

As data controller, we decide why and how your personal information is processed. Where another organisation processes information for us, such as a website hosting provider or email service provider, that organisation acts as a processor or independent controller as appropriate. We require processors to protect information and to process it only in accordance with our instructions and applicable law.

If you have a question about this notice, want to exercise a data protection right, or have a concern about the way we use your information, please contact us using the email address above. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection. Further information is available from the Information Commissioner’s Office website.

3. Information We May Collect

We collect only information that is reasonably necessary for the purposes described in this notice. The information we collect depends on how you interact with us and may include:

Your name and contact details, such as your email address, telephone number and postal address.
Information included in a message or enquiry, such as the type of glasshouse or service you are interested in, your requirements, measurements, location, preferred timescales and any other details you choose to provide.
Information needed to understand or respond to a business enquiry, including correspondence, quotations, design discussions, delivery or installation details and records of communications.
Information you provide when arranging or discussing work, including property or site information where it is relevant to providing a quotation or service.
Payment, invoicing and transaction information where this is necessary for an agreed service or supply. We do not need to retain complete payment-card details where these are handled directly by a payment provider.
Technical information generated when you use our website, such as your IP address, browser type, device information, approximate location inferred from an IP address, pages viewed, referring website and information about how the website is used.
Cookie and similar technology information, as described in the section below.

Please avoid sending sensitive personal information through a general website enquiry unless we specifically ask for it and it is necessary. Sensitive information can include health, biometric, political, religious or similar information. If you voluntarily provide such information, we will handle it only where there is a lawful reason to do so.

4. How We Collect Information

We may collect personal information directly from you when you contact us by email, telephone, post or through a website contact form, request information, ask for a quotation, discuss a glasshouse or related work, provide details needed to arrange a visit or service, or otherwise correspond with us.

We may also receive information from someone acting on your behalf, such as a household member, architect, contractor or business contact, where that person is legitimately entitled to provide it. We may receive limited information from service providers that help operate our website, communications or business administration systems. We do not generally seek personal information about you from publicly available sources unless there is a reasonable business purpose and a lawful basis for doing so.

You are not generally required to provide personal information to browse our website. However, if you choose to contact us, information such as your name and a reliable way to respond may be needed for us to deal with your enquiry. If you do not provide information that is necessary for an agreed service, quotation or communication, we may be unable to respond fully or provide that service.

5. Why We Use Information and Our Lawful Bases

We use personal information for the following purposes, depending on the circumstances:

To respond to questions, requests and enquiries.
To prepare, discuss and provide quotations, designs, products or services that you request.
To communicate with you about an enquiry, quotation, agreed work, delivery, installation, maintenance or other business matter.
To administer customer and supplier relationships, maintain appropriate business records and manage invoicing and payments.
To understand, secure, maintain and improve our website, systems and communications.
To prevent fraud, misuse, security incidents and other unlawful activity.
To comply with legal, regulatory, accounting and insurance requirements, and to establish, exercise or defend legal claims.

Under the UK General Data Protection Regulation and the Data Protection Act 2018, our lawful basis may be performance of a contract or taking steps at your request before entering into a contract. This may apply when we prepare a quotation or provide a product or service.

Our lawful basis may be compliance with a legal obligation where we must keep records, respond to a lawful request or meet accounting, tax, regulatory or other legal requirements. Our lawful basis may also be our legitimate interests, for example operating and securing our business, responding to business correspondence, keeping records of enquiries, improving our website and protecting our legal position. We consider those interests carefully and balance them against your privacy rights and reasonable expectations.

Where the law requires consent, we will ask for it. For example, consent may be required for certain non-essential cookies or electronic marketing communications. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that took place before withdrawal and may not affect processing supported by another lawful basis.

6. Communications and Marketing

We may use contact details to respond to communications you initiate and to manage an enquiry or service. We may also send service-related information where this is necessary to administer an existing relationship or fulfil an agreement.

We will send promotional electronic communications only where we have a lawful basis to do so and where applicable have obtained the consent required by the Privacy and Electronic Communications Regulations. You can opt out of marketing at any time by contacting workshop@thornburyglasshouses.co.uk or by using an unsubscribe method included in the message. We will continue to retain limited information about your preference so that we can respect your request.

We do not sell your personal information. We do not use this website to invite people to create public profiles or publish personal content. Any information you provide in an enquiry is treated as confidential business correspondence, subject to the disclosures described in this notice and any legal obligations.

7. Cookies and Similar Technologies

Our website may use cookies or similar technologies. Cookies are small files or identifiers stored on or read from your device. Some are necessary for the website to function, remember a privacy preference, maintain security or provide a service you request. These are generally referred to as strictly necessary cookies.

Where implemented, the website may also use preference cookies to remember choices you make, analytics cookies to help us understand website use, or functionality cookies to support features you request. We will seek consent before placing non-essential cookies where the law requires it. You can manage cookie settings through your browser and, where available, through the website’s cookie control. Blocking some cookies may affect website functionality.

Our website may contain links to third-party websites or services. Those third parties have their own privacy and cookie practices, and this notice does not govern them. We recommend reviewing their notices before submitting personal information or accepting optional technologies.

8. Who May Receive Information

We may share personal information where necessary for the purposes described in this notice. Recipients may include website hosting, domain, email, IT, security, backup, customer communication, accounting, payment, delivery, installation, professional advisory and other business service providers.

We may also disclose information to insurers, auditors, accountants, legal advisers, courts, regulators, law-enforcement bodies or government authorities where necessary to comply with law, protect rights, investigate suspected wrongdoing or handle a dispute. If our business is reorganised, sold or transferred, relevant information may be disclosed to professional advisers and the prospective or actual successor, subject to appropriate confidentiality and data protection arrangements.

Service providers are expected to use personal information only for the agreed purpose and to maintain suitable security. Some providers may process information outside the United Kingdom. Where a restricted international transfer occurs, we will use a lawful transfer mechanism and appropriate safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU standard contractual clauses, or another mechanism recognised by applicable data protection law.

9. Retention of Personal Information

We keep personal information only for as long as it is reasonably needed for the purposes for which it was collected, including to deal with enquiries, provide services, maintain accurate records, comply with legal requirements and resolve disputes. Retention periods vary according to the type and sensitivity of information, whether an enquiry becomes a customer relationship, and whether a legal or regulatory period applies.

For example, we may retain enquiry and correspondence records for a reasonable period after the matter has ended so that we can follow up appropriately, evidence what was agreed and deal with later questions. Records connected with contracts, invoices, payments and tax may be retained for the period required by accounting, tax and other applicable laws. Information may be retained longer where necessary to establish, exercise or defend legal claims.

When information is no longer required, we will delete it, anonymise it or securely dispose of it. Backups may retain information for a limited additional period while they are securely overwritten or deleted in the ordinary course of our backup processes.

10. Security and Confidentiality

We take reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, alteration, disclosure or destruction. Measures may include access controls, secure communications, appropriate device and account protection, service-provider due diligence, backups and staff or contractor awareness of confidentiality obligations.

No method of sending or storing information is completely secure. You should take reasonable care when sending information online and should not include unnecessary confidential or sensitive details in an initial enquiry. If we identify a personal data breach that is likely to result in a risk to individuals, we will assess and report it to the Information Commissioner’s Office and notify affected individuals where required by law.

11. Your Data Protection Rights

Subject to legal exceptions and applicable conditions, you may have the right to:

Request access to the personal information we hold about you and receive information about how we use it.
Ask us to correct inaccurate or incomplete personal information.
Ask us to delete personal information where there is no good reason for us to continue processing it.
Ask us to restrict processing in certain circumstances, such as while the accuracy of information is being checked.
Object to processing based on legitimate interests, or object to direct marketing at any time.
Ask to receive certain information in a structured, commonly used and machine-readable format, or ask us to transmit it to another controller where the right to data portability applies.
Withdraw consent where our processing relies on consent.

These rights are not absolute. For example, we may need to retain information to comply with a legal obligation, establish or defend legal claims, or exercise another applicable right. We will explain any relevant restriction when responding.

To exercise a right, contact workshop@thornburyglasshouses.co.uk and describe your request. We may need to verify your identity before providing information or acting on a request. This is a security measure designed to prevent personal information being disclosed to the wrong person. We normally respond within one month, although the period may be extended where a request is complex or multiple requests are made, as permitted by law. We do not usually charge for a request, but may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive.

12. Complaints and Contact

If you have concerns about our use of your personal information, please contact us first at workshop@thornburyglasshouses.co.uk so that we can investigate and try to resolve the matter. You may also complain directly to the Information Commissioner’s Office, which regulates data protection in the United Kingdom. The ICO’s current contact details and complaint process are available on its official website.

Questions about this privacy notice, requests for further information, and data protection rights requests should be sent to workshop@thornburyglasshouses.co.uk or to Thornbury Glasshouses at The Workshop, Gloucester Road, Cirencester, Gloucestershire, GL7 2NZ, United Kingdom.