Privacy Policy

1. Introduction

NMG Outdoor Living ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website nmgpvcsupplies.co.uk or use our services.

We comply with the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR).

2. Information We Collect

Personal Information You Provide

• Name and contact information (email, phone number, address)
• Project details and preferences
• Payment information (processed securely by third-party providers)
• Communications you send to us

Information Automatically Collected

• Browser type and version
• IP address and device information
• Pages visited and time spent on site
• Referral source and exit pages
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Process your quotes and project requests
• Communicate with you about your project
• Send you updates, marketing materials, and promotional offers (with your consent)
• Improve our website and services
• Analyze usage patterns and optimize user experience
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Consent: When you explicitly agree to receive marketing communications
• Contract: To fulfill our obligations in providing services to you
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with UK laws and regulations

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third parties who assist in operating our website and business
• Payment Processors: Secure payment gateways for transaction processing
• Analytics Services: Google Analytics and similar tools (anonymized data)
• Resend: Email delivery platform used to send marketing emails to subscribers who have given consent
• Twilio: SMS platform used solely for internal staff lead notifications (we do not send marketing SMS to customers)
• Legal Authorities: When required by law or to protect our rights

5a. Email Marketing

Lawful basis: Consent — Article 6(1)(a) UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

• Processor: Resend (email delivery platform)
• Data processed: Email address, name, product interest
• Retention: Until you unsubscribe, or 24 months of inactivity, whichever comes first

Every marketing email includes an unsubscribe link. You may withdraw your consent at any time by clicking that link or by contacting us directly. Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal.

5b. SMS — Internal Staff Notification

Lawful basis: Legitimate Interests — Article 6(1)(f) UK GDPR. We have a legitimate interest in responding to enquiries promptly.

• Processor: Twilio
• Purpose: When a new enquiry is received via the website, an automated SMS is sent to NMG staff so they can follow up promptly

We do not send marketing SMS to customers or enquirers. Twilio is used exclusively for internal team notifications.

5c. Call Recording (Future)

Lawful basis: Legitimate Interests — Article 6(1)(f) UK GDPR. Purpose: quality assurance and staff training.

• Processor: TBD — AI-assisted call handling system (not yet active)
• Retention: 90 days

When this feature is activated, an automated announcement will inform callers that the call is being recorded at the start of every call. You may object to recording by requesting a callback via email instead.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze site traffic and usage patterns
• Deliver personalized content and advertisements
• Improve website functionality and performance

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption for data transmission
• Secure servers and databases
• Regular security audits and updates
• Access controls and employee training

8. Your Rights Under GDPR

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (right to be forgotten)
• Restriction: Limit how we use your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Opt-out of marketing communications at any time

To exercise these rights, contact us at info@nmgpvcsupplies.co.uk

9. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy, unless a longer retention period is required by law. Project-related information is typically retained for 7 years for accounting and warranty purposes.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

11. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last Updated" date.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: