Privacy Policy – Gaviota UK Ltd
Effective date: 01.08.2025
Last update: 01.08.2025
Who We Are
Gaviota UK Ltd is a company registered in England and Wales with company number 15123915 and registered office at Tagus House, 9 Ocean Way, Southampton, Hampshire, SO14 3TJ. We are a manufacturer and distributor of awnings and accessories.
We are the “data controller” of the personal data we process.
Contact Details
If you have any questions about this policy or wish to exercise your rights, please contact:
Gaviota UK Ltd
(Rear of) Anfield House
Gorley Nurseries
Ringwood Road
Fordingbridge
SP6 2EX
Email: ukinfo@gaviotagroup.com
Phone: +44 (0)2380 773533
You can also contact the Information Commissioner’s Office (ICO) at www.ico.org.uk if you have concerns about our use of your personal data.
What Personal Data We Collect
We may collect and process the following categories of personal data:
– Name, job title, company name
– Contact details (email address, phone number, delivery/billing address)
– Purchase or order history
– Payment and bank information (for suppliers/customers)
– Communications with us (e.g., emails, calls, online forms)
– Website usage data (e.g., IP address, cookies)
– CCTV footage (for security at our premises)
– Visitor information for site access or showroom visits
How We Use Your Personal Data
We only process your data when we have a lawful reason to do so. These reasons include fulfilling a contract with you, complying with legal obligations, and pursuing our legitimate interests (e.g., responding to enquiries or marketing our services).
You can exercise your rights at any time by contacting us at ukinfo@gaviotagroup.com.
Sharing Your Data
We may share your personal data with:
– Delivery partners and couriers
– IT and CRM service providers
– Payment processors
– Regulatory authorities (where legally required)
– Other entities in the Gaviota Group (where necessary for administration/support)
We do not sell or rent your data to third parties.
Data Transfers Outside the UK
Some of our service providers or group companies may be located outside the UK. When this occurs, we implement appropriate safeguards (such as Standard Contractual Clauses) to ensure your personal data is protected in accordance with UK data protection laws.
How long we retain your personal data
We will not keep your personal data for longer than is necessary for the purpose for which it is used. The exact time period depends on the type of data and our legal obligations, but examples include:
- Customer and supplier records – retained for up to 7 years for accounting and tax compliance purposes.
- Marketing data – retained until you withdraw consent or unsubscribe.
- CCTV footage – retained for up to 30 days for the purpose of site security, unless required for investigation.
We may also retain personal data to establish, exercise or defend our legal rights.
Your Rights
Under UK data protection law, you have the following rights:
– Access – Request a copy of the personal data we hold about you.
– Rectification – Request correction of inaccurate data.
– Erasure – Request deletion of your data, where appropriate.
– Restriction – Request we limit how we process your data.
– Objection – Object to our use of your data for direct marketing or where based on legitimate interests.
– Data Portability – Request your data in a structured, machine-readable format.
To exercise any of these rights, please contact us using the details at the top of this policy.
Data Security
We implement appropriate technical and organisational measures to safeguard your data. These include:
– Encrypted systems and secure servers
– Staff confidentiality training
– Role-based access controls
– CCTV monitoring at premises
Children’s Data
Our services are not intended for individuals under the age of 18, and we do not knowingly collect data from children.
Cookies and Website Analytics
We use cookies to enhance your website experience and understand user behaviour.
Please see our separate Cookie Policy for more details. If you do not accept cookies, some features of our site may not work as intended.
Data Protection Impact Assessments (DPIAs)
Where required by law, we carry out Data Protection Impact Assessments (DPIAs) to evaluate and mitigate risks associated with new technologies, CCTV usage, or significant changes to our data processing activities.
Changes to This Privacy Policy
We may update this policy periodically. Where appropriate, we will notify you of significant changes by email or via a notice on our website homepage.
How to Contact Us
If you would like us to update the information we hold about you or exercise your data rights, please contact:
Gaviota UK Ltd
(Rear of) Anfield House
Gorley Nurseries
Ringwood Road
Fordingbridge
SP6 2EX
Email: ukinfo@gaviotagroup.com
Phone: +44 (0)2380 773533