domivo.pro

Menu

privacy

  1. Who we are
    “NOVA Kitchen Extensions” is the trading name of [company name], a company registered in [country] under company number [number]. Our registered office is at [address]. For data-protection questions, email dpo@kitchextensions.com or write to Data Protection Officer at the address above.

  2. What this policy covers
    This policy explains how we collect, use, store and share your personal data when you visit kitchextensions.com, request a quote, or otherwise interact with us. It complies with Regulation (EU) 2016/679 (GDPR) and the ePrivacy Directive 2002/58/EC as amended.

  3. Personal data we collect

  • Contact data: name, address, e-mail, telephone number.
  • Project data: measurements, photos, plans, budget range.
  • Technical data: IP address, browser type, pages visited, time zone.
  • Marketing data: preferences, survey answers, cookie identifiers.
  • Payment data: last four digits of card, tokenised ID (we never store full card numbers).
  1. Lawful bases
  • Contract: to prepare a design proposal you requested (Art. 6(1)(b)).
  • Legitimate interests: advertising similar products to existing customers, preventing fraud (Art. 6(1)(f)).
  • Consent: sending newsletters, setting non-essential cookies (Art. 6(1)(a)).
  • Legal obligation: accounting, tax, health & safety records (Art. 6(1)(c)).

  1. Special-category data
    If you disclose health or disability information so we can design accessible features, we rely on Art. 9(2)(b) – employment, social security and social protection law.

  2. Cookies & trackers
    We use strictly necessary, analytics and marketing cookies. The banner records your consent choice in a cookie called “cookieConsent”. See our Cookie Statement for the full list of third-party processors (Google Analytics 4, Meta Pixel).

  3. Recipients

  • Internal: sales, design, site surveyors.
  • External: cloud host (AWS Ireland), email provider (ProtonMail Switzerland), payment processor (Stripe Ireland), analytics (Google). All are GDPR-compliant and sign Art. 28 Data-Processing Agreements.

  1. International transfers
    Data stays within the EEA. If support is provided from outside the EEA, we rely on Standard Contractual Clauses approved by the European Commission.

  2. Retention

  • Quotes & plans: 3 years after last contact (limitation period for construction claims).
  • Accounting invoices: 7 years (statutory requirement).
  • Marketing consent: until withdrawn or 24 months of inactivity.
  • Analytics: 26 months.
  1. Your rights under GDPR
  • Access: obtain a copy of your data.
  • Rectification: correct inaccurate data.
  • Erasure: “right to be forgotten” where no overriding obligation exists.
  • Restriction: freeze processing while we verify a dispute.
  • Portability: receive data in machine-readable format.
  • Object: stop direct marketing at any time.
  • Withdraw consent: via e-mail or the unsubscribe link; this does not affect prior lawful processing.
  • Lodge a complaint: with your local Supervisory Authority (list: edpb.europa.eu).

  1. Automated decision-making
    We do not use profiling that produces legal or similarly significant effects.

  2. Security
    TLS-encrypted connections, AES-256 at rest, role-based access, 2FA, annual penetration tests, ISO 27001-certified infrastructure.

  3. Changes
    We will post material changes on this page and, where appropriate, notify you by e-mail.

  4. Contact
    Data Protection Officer: dpo@kitchextensions.com, phone +44 7575 014464

Shopping Cart