GDPR Compliance

Last updated: June 22, 2026

Our Commitment to GDPR

Secure Home Openings is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and respect your rights as a data subject.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you submit enquiry forms or agree to communications
• Contract Performance: To fulfill service agreements and provide quotes
• Legal Obligation: To comply with tax, accounting, and warranty requirements
• Legitimate Interest: To improve our services and maintain business records

Your GDPR Rights

Under GDPR, you have the following rights:

Right to Access

You can request access to the personal data we hold about you. We will provide a copy of your data in a commonly used electronic format.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You can request deletion of your personal data, subject to legal retention requirements for warranty and tax purposes.

Right to Restriction

You can request that we limit how we use your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where we rely on consent as the legal basis for processing, you can withdraw consent at any time.

Data Protection Measures

We implement appropriate technical and organizational measures to ensure data security:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorized personnel
• Regular security assessments and updates
• Staff training on data protection principles
• Incident response procedures for data breaches

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

International Data Transfers

We process and store data primarily within the United Kingdom. Any international transfers of personal data comply with GDPR requirements, including appropriate safeguards such as standard contractual clauses.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month, unless the request is complex, in which case we may extend the response period by an additional two months.

Complaints

If you believe we have not complied with GDPR requirements, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.