Avanti Doors Policy
1Who we are
This notice applies to personal information collected through the Avanti Doors website and our related handling of website enquiries.
Data controller
Avanti Doors Ltd is the controller of this information. Our business address is Unit 19, East Coast Business Park, West Lynn, Norfolk, PE34 3LW. You can contact us at service@avantidoors.co.uk or on 01553 615608.
Last updated
This notice was last updated on 10 July 2026. We will update it if our services, suppliers or uses of personal information materially change.
2Information we collect
Contact and business details
When you contact us or ask for a quotation, we collect the information you provide, such as your name, company or site name, email address, telephone number and postal or site address.
Enquiry and service details
We collect the project, equipment, fault, urgency and site-access information you enter, together with the page from which you sent the form and a random submission identifier used to prevent duplicate records.
Uploaded files
Quotation and emergency-report forms may accept documents or photographs. These can contain personal information, location details or site-security information. Please upload only what is needed for us to assess the requested work and avoid including identification documents, access codes or images of people unless necessary.
Communications and customer records
We keep relevant emails, calls, quotations, service instructions and follow-up correspondence when needed to handle an enquiry or provide services.
Security and diagnostic data
Cloudflare and our security tools may process network information such as an IP address, browser details and request metadata to deliver the website, verify the Turnstile security check, prevent abuse and diagnose failures. The website enquiry database does not retain the raw request IP address or full user-agent string.
Optional analytics and session replay
If you allow optional analytics, Google Analytics may collect a pseudonymous browser identifier, page and event data, approximate location, and device or browser information. Configured events cover form starts, successful enquiries, and contact or quotation-link clicks. Microsoft Clarity may collect pseudonymous identifiers, page URLs, device, browser and performance data, and interactions such as clicks, scrolling and pointer movement to create heatmaps and visual session replays. The project uses Strict masking, and every enquiry form is additionally marked for masking, so page content and form contents are masked before upload. Masking limits what is visible in replays; it does not make all technical or interaction data anonymous. We do not intentionally include names, contact details, enquiry text, uploads, filenames or submission identifiers in analytics events.
3Why we use it
Quotations and requested work, contract
We use the details needed to provide a quotation, take steps you ask us to take before entering a contract, respond to an existing-customer issue report, and deliver an agreed service. The lawful basis is contract or steps requested before a contract, where that basis applies.
General enquiries and service administration, legitimate interests
Where an enquiry is not a contractual request, we use proportionate contact and message details to answer it and administer our business. Our legitimate interests are responding to people who contact us, maintaining accurate business records and operating an effective customer-service process. We consider the nature of the information and your reasonable expectations before relying on this basis.
Website and form security, legitimate interests
We use limited technical data, Turnstile and duplicate-submission controls to protect the website, our systems and users from spam, fraud and disruption. Our legitimate interest is maintaining a secure and reliable service.
Legal obligations and claims
We may retain or disclose relevant information when required by law, regulation, court order, taxation or accounting duties, or when necessary to establish, exercise or defend legal claims.
Analytics, consent
Google Analytics runs in consent mode: until you choose ‘Allow optional analytics’ it sets no cookies and sends only anonymous, cookieless page counts. Heatmaps, privacy-masked session recordings and cookie-based analytics run only after you choose ‘Allow optional analytics’. You can reject them or withdraw that choice at any time through Cookie settings. Allowing analytics is not required to use the website or send an enquiry.
No inferred marketing consent
Sending an enquiry does not sign you up for marketing. We will not treat a quotation, contact or emergency form submission as consent to receive promotional messages.
Automated decisions
We do not use website enquiry information to make solely automated decisions that produce legal or similarly significant effects.
4Where information goes
Cloudflare
Cloudflare provides the website runtime and security services. Enquiry records are stored in Cloudflare D1. Uploaded files are stored in a private Cloudflare R2 bucket when an upload is included. Cloudflare Turnstile checks whether a form submission appears legitimate.
Resend and Zendesk
Resend is used to deliver internal notification emails. Zendesk is used as the service-team workflow and ticketing layer. The same relevant contact, site and enquiry details may be sent to these services so our team can respond. Cloudflare D1 remains the website enquiry system of record.
Google Analytics and Microsoft Clarity
Google Analytics measures website visits and configured interaction events, including successful enquiry outcomes. Microsoft Clarity provides heatmaps and visual session replays with Strict masking. The Google tag loads on every page in consent mode, with analytics and advertising storage denied and no cookies set until you allow optional analytics. Clarity loads only after you allow optional analytics. Google advertising storage, advertising user data, Google Signals and ad personalisation remain disabled; Clarity advertising storage remains denied.
Other disclosures
We may share information with professional advisers, insurers, subcontractors or authorities only where this is necessary for the requested work, our legal obligations, or the establishment or defence of legal claims.
International processing
Some service providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we use an applicable adequacy regulation or approved contractual and organisational safeguards. You can ask us for further information about safeguards relevant to your information.
5How long we keep it
Enquiries and service records
We keep enquiry records only while they are needed to respond, prepare a quotation, provide or administer services, maintain relevant customer, warranty and accounting records, and meet legal or claims-related obligations. The period therefore depends on whether an enquiry becomes a customer instruction and on the applicable contractual or statutory limitation period. Records are deleted or anonymised when those purposes no longer apply.
Uploads
Uploaded photographs and documents are tied to the relevant enquiry or service record and are removed when they are no longer needed for assessment, service delivery, warranty, safety or legal-claims purposes.
Security and provider logs
Security and diagnostic logs are retained for the shortest period reasonably needed to investigate abuse, availability or delivery failures, subject to the configuration and documented retention controls of the relevant provider.
Optional analytics
The Google Analytics property retains user- and event-level data for 14 months; standard aggregated reports are not affected by that setting. Microsoft Clarity retains session playback for 30 days and click or heatmap data, labelled sessions and favourited sessions for up to nine months.
Cookie preference
Your analytics preference is stored in your browser for up to nine months. You can change it sooner through Cookie settings or by clearing the site’s local storage.
6Cookies and analytics choices
Default position
Analytics cookies are off by default. Google Analytics runs cookieless in consent mode, and Microsoft Clarity is not requested, until you allow optional analytics.
Analytics cookies
If you allow analytics, Google may set _ga to distinguish browsers and _ga_NJRPMEM4GV to retain session state; Google’s default expiry is up to two years, subject to browser limits. Clarity may set _clck to retain a site-specific browser identifier and preferences, and _clsk to connect page views into a session replay. Microsoft controls their duration within its published limits and applicable browser restrictions.
Your choice
The cookie panel offers equal options to allow or reject optional analytics. After choosing, use the Cookie settings control to review the choice or withdraw consent. Rejecting or withdrawing denies analytics storage, removes the analytics cookies that the website can access, and reloads the page without either analytics tag. Withdrawal does not retroactively erase provider records already received; those remain subject to the retention periods above.
Form security
Cloudflare Turnstile is a security service used on forms when configured. It processes limited technical information needed to identify automated abuse; it is not used by us for advertising.
7Security
Protecting information
We use access controls, encrypted network connections, private object storage, input and file validation, duplicate-submission controls and security monitoring designed to protect enquiry information. No internet service can be guaranteed completely secure, so please do not send unnecessary sensitive information through a website form.
8Your rights
Data-protection rights
Depending on the circumstances and lawful basis, you may ask for access to your personal information, correction of inaccurate information, erasure, restriction, or portability. You can also withdraw consent where processing relies on consent. Some rights are subject to legal conditions and exemptions.
Your right to object
You may object to processing based on legitimate interests. You have an absolute right to object to direct marketing, although website enquiries are not enrolled into marketing by default.
How to make a request
Contact us at service@avantidoors.co.uk or using the contact details above. We may need enough information to verify your identity and locate the relevant records.
Complaints
Please contact us first if you are concerned about how we use your information. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
