This privacy policy sets out how Thru-Floor Ltd uses and protects any information collected when using this website or dealing with clients.
Thru-Floor Ltd’s address is: 68 Faraday Mill Business Park, Cattewater Road, Plymouth, PL4 0ST.
Your privacy is important to us and we are committed to a privacy policy that shows respect for our client’s personal data in a professional, regulatory and transparent way.
Please note that we may change this page from time to time as our business changes. You should therefore periodically check this page to ensure you are happy with the way we view your personal information.
Introduction
This document covers the following points regarding the privacy of your data.
- Information we collect
- Lawful basis of processing
- Who we share data with
- How data is used
- How long data is held
- Your personal rights
- Security
- Links to other websites
- Data security breach procedure
1 Information we collect from you
- Photographs of your property or installation (for site surveys and, with your permission, case studies)
- Full name
- Address
- Post code
- Email address
- Telephone numbers
- Property details, floor plans and drawings (for designs and quotes)
1.1 Information we collect when you visit our website
This website uses cookies. Please see our separate cookies policy.
1.2 Information we collect from third parties
When we are required by law or business need, we will use third party checks to verify identity, criminal checks or credit references. Please note these third parties will only be used with your permission.
2 Lawful basis of processing
Thru-Floor Ltd will only process your personal data under one of the six legal grounds stated under the GDPR regulations, namely: contract, legal obligation, vital interests, public interest, legitimate interests and consent.
3 Who we share your personal data with
We do not sell or rent your personal information to third parties.
We may share your personal information where necessary with trusted third-party service providers who help us operate our business, including payment processing providers, website hosting providers, IT support providers, suppliers and subcontractors involved in your installation, delivery companies, professional advisers (such as accountants), and government or law enforcement authorities where we are required to do so by law.
Any third parties who process personal data on our behalf are required to keep your information secure and only use it for the purposes for which it was provided.
4 How your information is used
The personal information we collect is used only for legitimate business purposes, including:
- Responding to enquiries made through our website, by email or by telephone
- Preparing designs, quotations and specifications for your project
- Supplying, installing and supporting our underfloor heating, floor and renewable energy systems
- Processing payments (please note that payment card information is processed securely by our payment service provider and is not stored by us)
- Contacting you about your order, installation, guarantee or aftercare where necessary
- Sending marketing information or special offers where you have given your consent (you may opt out at any time)
- Complying with legal and regulatory obligations
- Preventing fraud and protecting our business, staff and customers
5 How long is your information held for
The information we gather is held for 6 years
6 Your personal rights
- You can ask for a copy of your personal information we hold
- You can ask us to correct your personal information
- You can ask us to delete your personal information
- You can withdraw consent to use your data
- Lodge a complaint with the Information Commissioners Office
7 Security
We are committed to ensuring that your personal information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard the information we collect online.
8 Links to other websites
Our website may contain links to enable you to visit other websites of interest. However, once you have used these links and leave our site, you should note that we do not have any control over the website you visit. Therefore, we cannot be responsible for the protection and privacy of any information which you provide while visiting such sites. You should exercise caution and look at the privacy policy applicable to the website in question.
9 Data Security Breach Procedure
In the event of a data security breach, this will be communicated to those users affected and an emergency plan will be put into action. A notification will be sent to those affected within 72 hours.

