Avanti Doors Policy
1Who we are
This notice applies to personal information collected through the Avanti Doors website and our related handling of website enquiries.
Data controller
Avanti Doors Ltd is the controller of this information. Our business address is Unit 19, East Coast Business Park, West Lynn, Norfolk, PE34 3LW. You can contact us at service@avantidoors.co.uk or on 01553 615608.
Last updated
This notice was last updated on 18 September 2026. We will update it if our services, suppliers or uses of personal information materially change.
2Information we collect
Contact and business details
When you contact us or ask for a quotation, we collect the information you provide, such as your name, company or site name, email address, telephone number and postal or site address.
Enquiry and service details
We collect the project, equipment, fault, urgency and site-access information you enter, together with the page from which you sent the form and a random submission identifier used to prevent duplicate records.
Uploaded files
Quotation and emergency-report forms may accept documents or photographs. These can contain personal information, location details or site-security information. Please upload only what is needed for us to assess the requested work and avoid including identification documents, access codes or images of people unless necessary.
Communications and customer records
We keep relevant emails, calls, quotations, service instructions and follow-up correspondence when needed to handle an enquiry or provide services.
Security and diagnostic data
Cloudflare and our security tools may process network information such as an IP address, browser details and request metadata to deliver the website, verify the Turnstile security check, prevent abuse and diagnose failures. The website enquiry database does not retain the raw request IP address or full user-agent string.
Visit statistics and optional session replay
Unless you turn analytics off, Google Analytics collects a pseudonymous browser identifier, page and event data, approximate location, and device or browser information, which we use only as statistics to improve the website. Configured events cover form starts, successful enquiries, and contact or quotation-link clicks. Only if you choose to allow Clarity recordings, Microsoft Clarity may collect pseudonymous identifiers, page URLs, device, browser and performance data, and interactions such as clicks, scrolling and pointer movement to create heatmaps and visual session replays. The project uses Strict masking, and every enquiry form is additionally marked for masking, so page content and form contents are masked before upload. Masking limits what is visible in replays; it does not make all technical or interaction data anonymous. We do not intentionally include names, contact details, enquiry text, uploads, filenames or submission identifiers in analytics events.
3Why we use it
Quotations and requested work, contract
We use the details needed to provide a quotation, take steps you ask us to take before entering a contract, respond to an existing-customer issue report, and deliver an agreed service. The lawful basis is contract or steps requested before a contract, where that basis applies.
General enquiries and service administration, legitimate interests
Where an enquiry is not a contractual request, we use proportionate contact and message details to answer it and administer our business. Our legitimate interests are responding to people who contact us, maintaining accurate business records and operating an effective customer-service process. We consider the nature of the information and your reasonable expectations before relying on this basis.
Website and form security, legitimate interests
We use limited technical data, Turnstile and duplicate-submission controls to protect the website, our systems and users from spam, fraud and disruption. Our legitimate interest is maintaining a secure and reliable service.
Legal obligations and claims
We may retain or disclose relevant information when required by law, regulation, court order, taxation or accounting duties, or when necessary to establish, exercise or defend legal claims.
Visit statistics, legitimate interests
We use Google Analytics only to count visits, contact taps and enquiries so we can improve the website. Under the statistical-purposes exception in the Privacy and Electronic Communications Regulations (as amended by the Data (Use and Access) Act 2025) this runs without asking for consent first, and our lawful basis is our legitimate interest in improving the website. It is never used for advertising or to profile you. You can object at any time with ‘Turn off analytics’ in Cookie preferences.
Session recordings, consent
Microsoft Clarity heatmaps and privacy-masked session recordings run only if you choose ‘Also allow Clarity recordings’. You can withdraw that choice at any time through Cookie preferences. Neither analytics nor Clarity is required to use the website or send an enquiry.
No inferred marketing consent
Sending an enquiry does not sign you up for marketing. We will not treat a quotation, contact or emergency form submission as consent to receive promotional messages.
Automated decisions
We do not use website enquiry information to make solely automated decisions that produce legal or similarly significant effects.
4Where information goes
Cloudflare
Cloudflare provides the website runtime and security services. Enquiry records are stored in Cloudflare D1. Uploaded files are stored in a private Cloudflare R2 bucket when an upload is included. Cloudflare Turnstile checks whether a form submission appears legitimate.
Resend and Zendesk
Resend is used to deliver internal notification emails. Zendesk is used as the service-team workflow and ticketing layer. The same relevant contact, site and enquiry details may be sent to these services so our team can respond. Cloudflare D1 remains the website enquiry system of record.
Google Analytics and Microsoft Clarity
Google Analytics measures website visits and configured interaction events, including successful enquiry outcomes. Microsoft Clarity provides heatmaps and visual session replays with Strict masking. Google acts only on our behalf as a processor: Google advertising storage, advertising user data, Google Signals, ad personalisation and data sharing are switched off, and the property is not linked to any advertising account. The Google tag does not load at all once you turn analytics off. Clarity loads only if you allow Clarity recordings, and its advertising storage remains denied.
Other disclosures
We may share information with professional advisers, insurers, subcontractors or authorities only where this is necessary for the requested work, our legal obligations, or the establishment or defence of legal claims.
International processing
Some service providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we use an applicable adequacy regulation or approved contractual and organisational safeguards. You can ask us for further information about safeguards relevant to your information.
5How long we keep it
Enquiries and service records
We keep enquiry records only while they are needed to respond, prepare a quotation, provide or administer services, maintain relevant customer, warranty and accounting records, and meet legal or claims-related obligations. The period therefore depends on whether an enquiry becomes a customer instruction and on the applicable contractual or statutory limitation period. Records are deleted or anonymised when those purposes no longer apply.
Uploads
Uploaded photographs and documents are tied to the relevant enquiry or service record and are removed when they are no longer needed for assessment, service delivery, warranty, safety or legal-claims purposes.
Security and provider logs
Security and diagnostic logs are retained for the shortest period reasonably needed to investigate abuse, availability or delivery failures, subject to the configuration and documented retention controls of the relevant provider.
Analytics
Google Analytics keeps user- and event-level data for two months. After that we keep only aggregate reports that do not identify anyone. Microsoft Clarity retains session playback for 30 days and click or heatmap data, labelled sessions and favourited sessions for up to nine months.
Cookie preference
Your analytics preference is stored in your browser for up to nine months. You can change it sooner through Cookie preferences or by clearing the site’s local storage.
6Cookies and analytics choices
Default position
Google Analytics is on by default under the statistical-purposes exception, with a notice explaining it and a ‘Turn off analytics’ button. Microsoft Clarity is off by default and is not requested unless you allow Clarity recordings. We never use advertising cookies.
Analytics cookies
Unless you turn analytics off, Google may set _ga to distinguish browsers and _ga_NJRPMEM4GV to retain session state; Google’s default expiry is up to two years, subject to browser limits. If you allow Clarity recordings, Clarity may set _clck to retain a site-specific browser identifier and preferences, and _clsk to connect page views into a session replay. Microsoft controls their duration within its published limits and applicable browser restrictions.
Your choice
The notice offers ‘Turn off analytics’, ‘OK’ and ‘Also allow Clarity recordings’. You can reopen it at any time from Cookie preferences in the website footer. Turning analytics off works immediately and free of charge: Google Analytics stops, the analytics cookies the website can access are removed, and neither tag loads on later pages. Your choice is remembered for up to nine months. Objecting or withdrawal does not retroactively erase provider records already received; those remain subject to the retention periods above.
Form security
Cloudflare Turnstile is a security service used on forms when configured. It processes limited technical information needed to identify automated abuse; it is not used by us for advertising.
7Security
Protecting information
We use access controls, encrypted network connections, private object storage, input and file validation, duplicate-submission controls and security monitoring designed to protect enquiry information. No internet service can be guaranteed completely secure, so please do not send unnecessary sensitive information through a website form.
8Your rights
Data-protection rights
Depending on the circumstances and lawful basis, you may ask for access to your personal information, correction of inaccurate information, erasure, restriction, or portability. You can also withdraw consent where processing relies on consent. Some rights are subject to legal conditions and exemptions.
Your right to object
You may object to processing based on legitimate interests. You have an absolute right to object to direct marketing, although website enquiries are not enrolled into marketing by default.
How to make a request
Contact us at service@avantidoors.co.uk or using the contact details above. We may need enough information to verify your identity and locate the relevant records.
Complaints
Please contact us first if you are concerned about how we use your information. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
