20260326_1829_Image Generation_remix_01kmn3mg2afb1r0pqq2z71yavv.png

Privacy Policy

Your privacy matters to us. Learn how AliLuxe collects, uses, and protects your information with transparency and care.

AliLUXE LTD

AliLUXE LTD (“we”, “us”, “our”) is committed to protecting the privacy of our customers, prospective customers, suppliers and website visitors. This Privacy Policy explains how we collect, use and protect your personal data when you use our website or otherwise interact with us.

We are a UK-based glazing company providing supply and installation of glazing and related services. For the purposes of UK data protection law, we are the data controller of your personal data.

1. Who we are

AliLUXE LTD
Registered office: 167–169 Great Portland Street, London, W1W 5PF
Country of registration: United Kingdom

If you have any questions about this Privacy Policy or our data protection practices, you can contact us using the contact details on our website or by writing to our registered office.

2. The laws that apply

We process your personal data in accordance with:

The UK General Data Protection Regulation (“UK GDPR”).
The Data Protection Act 2018.
Any other applicable UK data protection and privacy legislation, including rules on electronic marketing and cookies.

3. What personal data we collect

The types of personal data we may collect include:

Identity data: name, title, company name or trading name.
Contact data: address, email address, telephone number and any other contact details you provide.
Project and property information: installation address, property type, site photographs or measurements you provide, and details of products you are interested in.
Communication data: records of enquiries, emails, messages submitted through our website forms, and notes of phone calls.
Transaction data: details of quotations, orders, invoices, payments and warranty information.
Technical and usage data (website): IP address, browser type, device information, pages visited, time and date of visits, and other analytics data collected through cookies or similar technologies.
Marketing preferences: your preferences in receiving marketing communications from us.

We do not intentionally collect special categories of personal data (such as health information) via our website. If you choose to provide this type of information (for example, accessibility needs relating to an installation), we will handle it with additional care and only use it where necessary to deliver our services.

4. How we collect your personal data

We collect personal data in several ways, including:

Directly from you when you:
Fill in forms on our website (for example, “Contact us” or quotation request forms).
Communicate with us by phone, email or post.
Engage us to carry out a survey, supply products, or perform an installation.
Automatically when you use our website, via cookies and similar technologies (see “Cookies and similar technologies” below).
From third parties, such as:
Referrals from existing customers or business partners.
Publicly available sources (for example, Companies House or trade directories) to confirm business contact details.

Purpose:Legal and regulatory obligations

Examples of what we do: Keeping records required by law, handling data subject requests, and responding to lawful requests from authorities

Lawful basis: Legal Obligation Where we rely on consent (for example, certain email marketing), you can withdraw your consent at any time by following the unsubscribe instructions in our communications or by contacting us.

Purpose: Marketing and promotions

Examples of what we do: Sending information about our glazing products, services, offers or news (where permitted by law)

Lawful basis: Consent (where required) or legitimate interests (for existing customers, in line with PECR)

Purpose: Website operation and security

Examples of what we do: Monitoring website performance, protecting against fraud or misuse, and maintaining IT security

Lawful basis: Legitimate interests (secure and reliable operation of our website and systems)

Purpose: Customer service and support

Examples of what we do: Handling queries, complaints, or service-related communications

Lawful basis: Legitimate interests (to provide good customer service and resolve issues)

Purpose: Managing our business relationship

Examples of what we do: Invoicing, payment administration, warranty records, and general account management

Lawful basis: Performance of a contract; legitimate interests (efficient operation of our business)

Purpose: Supplying products and services

Examples of what we do: Manage orders, arrange delivery and installation, coordinate installers, and handle snagging or aftercare

Lawful basis: Performance of a contract

Purpose: Responding to enquiries and providing quotations

Examples of what we do: Respond to web, email and phone enquiries; prepare and send quotations; arrange surveys or site visits

Lawful basis: Performance of a contract or steps prior to entering into a contract

5. Why we use your personal data (purposes) and our lawful bases

We will only use your personal data when we have a lawful basis to do so under UK GDPR. The main purposes and lawful bases are:

6. Sharing your personal data

We may share your personal data with carefully selected third parties where necessary for the purposes set out above, including:

Our professional advisers, such as accountants or legal advisers.
External surveyors, installers or subcontractors involved in fulfilling your order.
Product manufacturers or suppliers, for example where they provide a product warranty or need delivery details.
Service providers who support our business, such as website hosting, IT support, email service providers and payment processors.
Regulatory bodies, law enforcement agencies or courts where we are legally required to do so.

We require all third parties who process personal data on our behalf to respect the security of your data, to act only on our instructions, and to keep your data confidential.

We currently intend to store and process your personal data within the UK or the European Economic Area (EEA). If we ever need to transfer personal data outside the UK or EEA, we will ensure that appropriate safeguards are in place in accordance with UK GDPR (for example, using approved standard contractual clauses).

7. How long we keep your personal data

We will keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements.

In general:

Enquiry and quotation records are kept for a period that allows us to follow up and manage potential projects, typically up to 2–3 years, unless you request deletion earlier.
Contract, installation, warranty and financial records are usually kept for longer periods (often 6 years or more) to comply with legal and tax obligations and to manage warranties or potential claims.
Technical and usage data (such as cookies and analytics) is retained for a shorter period that is appropriate for analytics and security purposes.

We will take reasonable steps to delete or anonymise personal data when we no longer need it.

8. Your data protection rights

Under UK GDPR, you have several rights in relation to your personal data, subject to certain conditions and exceptions. These include:

Right to be informed: to receive clear information about how we use your data, which is the purpose of this Privacy Policy.
Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to have inaccurate or incomplete data corrected.
Right to erasure: to request deletion of your personal data where there is no good reason for us continuing to process it.
Right to restrict processing: to ask us to suspend the processing of your personal data in certain circumstances.
Right to data portability: to receive your personal data in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible.
Right to object: to object to processing based on our legitimate interests or to direct marketing at any time.
Rights in relation to automated decision-making and profiling: we do not currently make decisions about you that are solely based on automated processing and which have legal or similarly significant effects.

If you wish to exercise any of these rights, please contact us using the contact details on our website or at our registered office. We may need to verify your identity before responding to your request.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, if you are unhappy with how we have handled your personal data. Further information is available on the ICO website.

9. Cookies and similar technologies

Our website may use cookies and similar technologies to improve your browsing experience, understand how our site is used, and support our marketing activities. Cookies are small text files placed on your device when you visit a website.

We will provide you with clear information about the cookies we use and, where required by law, we will ask for your consent before placing non-essential cookies on your device. You can manage your cookie preferences through your browser settings and, where provided, through our cookie banner or preference centre.

For more detailed information, please refer to our separate Cookies Policy (if available on our website).

10. How we protect your personal data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures include limiting access to personal data to those employees, contractors and third parties who need to know it for legitimate business purposes and requiring them to process data only on our instructions.

While we do our best to protect your personal data, transmission of information over the internet is not completely secure, and we cannot guarantee the security of data transmitted to our website.

11. Children’s privacy

Our products and services are aimed at adults and business customers and are not intended for children. We do not knowingly collect personal data relating to children via our website.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. When we make changes, we will update the “Last updated” date at the bottom of this page and, where appropriate, notify you by a suitable method.

Please check this page periodically to ensure you are happy with any changes.

Last updated: 19th May 2026