Privacy Policy

1. Introduction

Blanket Solutions Ltd ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website blanketsolutions.co.uk and any related services (collectively, the "Service").

We are registered in England and Wales. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller.

2. Information We Collect

2.1 Information You Provide

When you use our contact form, we collect:

• Your name
• Email address
• Company name (optional)
• Message content

2.2 Information Collected Automatically

With your consent, we automatically collect certain information when you visit our website:

• Device Information: Device type, browser type, operating system, screen resolution
• Usage Data: Pages visited, time spent on pages, referring website
• Traffic Source: How you found our website (search engine, social media, direct, etc.)
• Location Data: Timezone and language preferences (we do not collect precise location)
• Device Fingerprint: A unique identifier generated from your browser characteristics to recognize returning visitors

2.3 Cookies and Similar Technologies

We use localStorage (similar to cookies) to store:

• Cookie Consent: Your preference for accepting or declining analytics
• Visitor ID: A randomly generated identifier to recognize you across sessions
• Session ID: A temporary identifier for your current browsing session

3. Legal Basis for Processing (GDPR)

Under the UK GDPR, we process your personal data based on the following legal grounds:

• Consent: For analytics and device fingerprinting, we only collect data after you click "Accept All" on our cookie banner
• Legitimate Interests: For contact form submissions, to respond to your enquiries
• Contract Performance: When you engage our services, to fulfil our contractual obligations

4. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and provide customer support
• Understand how visitors use our website to improve our services
• Analyze traffic sources to measure marketing effectiveness
• Detect and prevent fraud or abuse
• Comply with legal obligations

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Firebase (Google) for hosting and data storage, operating under their own privacy policies and GDPR compliance
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Retention

We retain your data for the following periods:

• Contact Form Submissions: 2 years from submission, or until you request deletion
• Analytics Data: 26 months from collection
• Device Fingerprints: 26 months from last visit

7. Your Rights Under GDPR

Under the UK GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time by clicking the cookie icon or clearing your browser data

To exercise these rights, contact us at privacy@blanketsolutions.co.uk. We will respond within 30 days.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the UK, including the United States (where Firebase/Google operates). These transfers are protected by:

• Standard Contractual Clauses approved by the UK ICO
• The recipient's certification under recognized frameworks

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption for all data transmission
• Secure cloud infrastructure with Firebase
• Access controls limiting who can view your data
• Regular security reviews

10. Children's Privacy

Our Service is not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Material changes may be communicated via email or a prominent notice on our website.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

13. Complaints

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):