Privacy Policy | SF London

Last updated: 29 September 2026

This policy explains how SF London (“we”, “us”, “our”) collects, uses and protects personal data when you use our website, ask us for a quote, or use our shopfront, shutter, glazing and security services. We are the data controller for the personal data described here.

We are based in the UK, so our processing is governed by the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR). These apply the same core principles and individual rights as the EU General Data Protection Regulation (EU GDPR), so the rights below are available to you whether you are in the UK or the European Economic Area.

1. Who we are and how to contact us

SF London provides shopfront design and installation, roller shutters, glass and aluminium works, security locks, gates, canopies and emergency repairs to commercial premises across Greater London.

Email: info@shopfrontsinlondon.co.uk
Phone: 07758 665337
Website: shopfrontsinlondon.co.uk

If you have any question about this policy or your personal data, contact us using the details above.

2. The personal data we collect

Enquiry and quote details: your name, business name, phone number, email address, the address or postcode of the premises, a description of the work you need, and any photos or documents you send us.
Customer records: quotes, specifications, contracts, invoices, payment records, site notes, and correspondence about the work. We do not store payment card details on this website.
Emergency callout details: your contact details, the location of the premises, a description of the damage, and records of the call or messages.
Website and device data: your IP address, browser type, device, pages viewed and the time of your visit, collected through server logs and cookies.
Marketing preferences: whether you have asked to receive updates from us, or asked us to stop.
Information from others: where relevant to the work, details from a landlord, managing agent, insurer or other person acting for you.

We do not intentionally collect special category personal data (such as health or biometric data). Please do not include it in your messages.

3. How we collect your data

We collect data directly from you when you fill in a form on this website, call, email or message us, or accept a quote. We collect website data automatically through cookies and server logs. We may also receive data from third parties acting for you, as described above.

4. Why we use your data and our lawful basis

To respond to enquiries and prepare quotes. Lawful basis: taking steps at your request before entering a contract, and our legitimate interests in running our business.
To carry out surveys, supply goods and provide services. Lawful basis: performing our contract with you.
To handle emergency callouts. Lawful basis: performing our contract with you and our legitimate interests in responding quickly to urgent requests.
To invoice you, keep accounts and meet tax and legal duties. Lawful basis: legal obligation.
To keep our website secure, prevent fraud and improve our services. Lawful basis: our legitimate interests.
To handle complaints, insurance matters and legal claims. Lawful basis: our legitimate interests and, where relevant, establishing or defending legal claims.
To send you marketing. Lawful basis: your consent, or where PECR allows, our legitimate interests in telling existing customers about similar services. You can opt out at any time.
To set non-essential cookies. Lawful basis: your consent.

We do not use your personal data for automated decision making or profiling that has legal or similarly significant effects on you.

5. Who we share your data with

We only share personal data where we need to, and we do not sell it. Recipients may include:

service providers that support our business, such as our website host, email and telephone providers, accounting and payment providers, and IT support;
suppliers, manufacturers and fitters who need details to complete your job;
insurers, professional advisers, and where required by law, courts, regulators, the police or other authorities;
a buyer or successor if our business is sold or restructured.

Where a provider processes data on our behalf, we require them to protect it and to use it only on our instructions.

6. Transfers outside the UK and EEA

Some of our providers may process data outside the UK or the EEA. Where that happens, we make sure a lawful transfer mechanism is in place, such as an adequacy decision, the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses, together with any additional safeguards required.

7. How long we keep your data

Enquiries that do not lead to work: up to 12 months after our last contact with you.
Customer, contract, invoice and payment records: 6 years after the end of the contract, in line with tax, accounting and limitation periods.
Marketing preferences: until you withdraw your consent or ask us to stop.
Website logs: for as long as needed for security and troubleshooting, and normally no longer than 12 months.

When we no longer need data, we delete it or anonymise it.

8. How we protect your data

We use appropriate technical and organisational measures to protect personal data, including access controls, secure hosting and limiting access to people who need it. No system is completely secure, so please take care when sending information by email.

9. Your rights

Under UK GDPR and EU GDPR you have the right to:

be informed about how we use your data (this policy);
access a copy of your personal data;
have inaccurate data corrected;
have your data erased in certain circumstances;
restrict how we use your data in certain circumstances;
receive your data in a portable format where we process it by consent or contract;
object to processing based on our legitimate interests, and to direct marketing at any time;
withdraw your consent at any time, without affecting earlier processing.

To use any of these rights, email info@shopfrontsinlondon.co.uk. We may need to check your identity first. We will normally reply within one month and we do not charge a fee unless a request is clearly unfounded or excessive.

If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. If you are in the EU or EEA, you may complain to your local data protection authority.

10. Cookies

Cookies are small files placed on your device. We use cookies and similar technologies to make this website work and to understand how it is used.

Strictly necessary cookies keep the website secure and working. They do not need your consent.
Analytics and marketing cookies are only set if you give consent, and you can withdraw it at any time.

You can also block or delete cookies in your browser settings, although parts of the website may not work as intended. Instructions are available at aboutcookies.org.

11. Our contact form

When you send an enquiry through our contact form, the details you enter are stored securely on our website hosting and emailed to us so we can reply. We use them only to deal with your enquiry, as described in this policy.

12. Links to other websites

Our website may link to other websites. We are not responsible for their content or privacy practices, so please read their policies.

13. Children

Our services are aimed at businesses and property owners. Our website is not intended for children under 18 and we do not knowingly collect their personal data.

14. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with the date it was last updated.