Our Privacy Policy

Grady Door & Window Manufacturers Group – Privacy Policy

1.0 Introduction

Grady Door & Window Manufacturers Group (“GDWM”, “we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit https://gdwmgroup.com/ or interact with our services.

GDWM operates in both Ireland and the United Kingdom. We comply with:

EU GDPR and the Irish Data Protection Act 2018
UK GDPR and the UK Data Protection Act 2018

This policy applies to all users in Ireland, the UK, and any other region where our services are accessed.

2.0 Who We Are (Data Controller)

GDWM Group is the data controller for all personal data processed through our website and services. Our registered head office is:

Grady Door & Window Manufacturers Group

Charlestown, Co. Mayo, Ireland, F12 N6V2

Email: info@gdwmgroup.com

Phone: +353 (0) 94 900 5096

If specific processing activities are carried out by a UK entity within the GDWM Group, that entity acts as the controller for those activities.

3.0 Information We Collect

We may collect the following categories of personal data:

Identity and Contact Information: name, email address, phone number, postal address.
Technical Information: IP address, browser type, device identifiers, time zone settings, and website usage data.
Transactional Information: purchase history, service records, payment details (processed securely by third‑party providers).
Communications: information provided through forms, emails, calls, or customer service interactions.
Installer Request Information: details you submit when requesting quotes or installation services.

4.0 How We Use Your Personal Data

We use your information for the following purposes:

Providing services: processing enquiries, delivering products, managing orders, and responding to requests.
Customer support: handling queries, complaints, and service updates.
Improving our services: analysing website usage and customer interactions to enhance performance and user experience.
Marketing: sending updates or promotional content where you have given consent.
Security and compliance: detecting fraud, ensuring system security, and meeting legal obligations.
Analytics: using aggregated or anonymised data to understand trends and improve operations.

5.0 Legal Basis For Processing

We process your personal data under the following lawful bases:

Contractual necessity: to provide products or services you request.
Legitimate interests: improving services, ensuring security, and supporting business operations (balanced against your rights).
Consent: for marketing communications or optional data collection.
Legal obligations: tax, accounting, regulatory, and compliance requirements.

You may withdraw consent at any time.

6.0 Data Sharing

We do not sell your personal data. We may share it only with:

Service providers: IT support, hosting providers, payment processors, and other suppliers who help us operate our business.
Regulators or authorities: where required by law.
Composite door installers: when you request a quote or service. These installers are carefully vetted and receive only the minimum data necessary to: i)contact you, ii) provide a quote, and iii) arrange consultations or installations.

Installers act as independent data controllers once they receive your information and must comply with GDPR in their own right.

Data is shared based on your consent, legitimate interests, or contractual necessity.

7.0 International Data Transfers

Some of our service providers may be located outside the UK or the European Economic Area (EEA). When this occurs, we ensure your data is protected through:

Adequacy decisions (where the destination country is approved as providing adequate protection)
Standard Contractual Clauses (SCCs)
UK International Data Transfer Agreements (IDTAs)
Additional safeguards, where required

These measures ensure your data remains protected to GDPR standards.

8.0 Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal and regulatory requirements. Typical retention periods include:

Customer enquiries: up to 12 months
Order and installation records: up to 7 years (legal/insurance obligations)
Marketing data: until you withdraw consent
Website analytics: retained in anonymised or aggregated form where possible

9.0 Your Rights

Under UK GDPR and EU GDPR, you have the following rights:

Access: request a copy of your personal data
Rectification: correct inaccurate or incomplete data
Erasure: request deletion of your data (subject to legal exceptions)
Restriction: limit how your data is processed
Portability: receive your data in a machine‑readable format
Objection: object to processing based on legitimate interests or for direct marketing
Withdraw consent: at any time, where processing is based on

To exercise any of these rights, contact info@gdwmgroup.com.

10.0 Supervisory Authorities

You have the right to lodge a complaint with your local data protection authority.

For users in Ireland:

Data Protection Commission (DPC)
www.dataprotection.ie

For users in the United Kingdom:

Information Commissioner’s Office (ICO)
www.ico.org.uk

11.0 Cookies And Tracking Technologies

Our website may use cookies or similar technologies to:

improve website functionality
analyse traffic
personalise content

You can manage cookie preferences through your browser settings. A separate Cookie Policy may provide further detail.

12.0 Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or loss. While we take all reasonable steps to safeguard your information, no online transmission is completely secure.

13.0 Changes To This Policy

We may update this Privacy Policy to reflect legal, technical, or business changes. The updated version will be posted on this page with a revised “Last Updated” date.

14.0 Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact: