Privacy Policy

Last updated: 22 October 2026

This policy explains how Wigan Gates uses personal information when you visit www.wigangates.co.uk or contact us about our gates, railings and related services. It is written for our enquiry-only website under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is responsible for your information?

Wigan Gates is responsible for deciding how the personal information described in this policy is used. You can contact us at Unit 7, Park Street, Poolstock, Wigan, WN35HE; by telephone on 01942 495027; or by email at [email protected]. Please use these details for privacy questions or requests about your information.

2. Information we collect

Cookie preferences are stored locally using c15t, including preference identifiers, timestamps and policy information. They are not uploaded to a consent service. The first-party consent cookie may accompany requests to our own website; see our Cookies Policy for storage and controls.

• Enquiries: your name, email address, optional telephone number, message and any details you choose to give us about a proposed job, together with our correspondence. The form also generates an enquiry reference.
• Technical and security information: IP addresses, requested pages, request times and response/error information can be processed by our server and hosting/security providers. Providers may also process browser and device information to deliver and protect the website. The contact API uses short-lived information to limit abuse and duplicate submissions.
• Optional analytics: with your consent, Google Analytics processes online identifiers and information about page visits (including the contact page), browsers and devices to help improve the site. Our tracking code does not read enquiry fields and removes query strings and fragments from reported page URLs. Referrers are reduced to their origin. See our Cookies Policy.

There are no customer accounts, online checkout, payment-card fields, newsletters, public comments or file uploads on this website. Please do not include payment-card information, passwords, health information or other sensitive personal information in your enquiry. Giving us a name, email address and message is necessary for the online form; a phone number is optional. You can choose to call or email instead.

3. Why we use information and our lawful bases

The contact form uses Cloudflare Turnstile to distinguish genuine visitors from automated spam. Cloudflare processes technical signals such as IP address, browser/device information and challenge interactions for this security check. Our server sends the challenge token and client IP address to Cloudflare for verification before sending an enquiry, and keeps a token hash in memory for up to five minutes to prevent reuse. We do not send your enquiry text, name, email address or phone number to Turnstile. This security processing supports our legitimate interest in preventing abuse; it is separate from optional analytics. If the check cannot be completed, please call or email us.

• Responding to a request for a quote or work: taking steps at your request before entering into a contract, and performing a contract where one is subsequently agreed (Article 6(1)(b)).
• Other enquiries and business correspondence: our legitimate interest in answering questions and keeping an appropriate record of our communications, balanced against your rights (Article 6(1)(f)).
• Website operation, security and abuse prevention: our legitimate interests in providing a reliable website, preventing spam and investigating faults or misuse (Article 6(1)(f)).
• Records required by law: compliance with applicable legal obligations, where relevant (Article 6(1)(c)).
• Optional Google Analytics: consent if analytics is enabled and you choose to allow it (Article 6(1)(a)).

Submitting an enquiry does not subscribe you to marketing. We do not use the contact form for automated advertising or make decisions about you with legal or similarly significant effects solely by automated means. Rate limiting and spam checks protect the form; if they prevent you from sending an enquiry, please contact us by phone or email.

4. Who receives information?

Enquiries are sent to Wigan Gates by email using Resend as our transactional email delivery provider. Resend processes the enquiry content, sender/recipient addresses and delivery information needed to send and troubleshoot these messages. Our mailbox provider also processes the received email. See Resend's privacy information. Cloudflare provides website delivery and security services and can process requests passing through its network. Authorised people supporting Wigan Gates' website or email may have access where needed to operate those services. We may also disclose relevant information to professional advisers or authorities where necessary for a legal obligation or the establishment, exercise or defence of legal claims. We do not sell enquiry information or share it for other organisations' direct marketing.

Google Analytics receives analytics information only if you consent. We do not send names, email addresses, phone numbers, enquiry text or private test-link tokens as analytics event parameters. See Google's privacy information and Cloudflare's privacy information for more about these providers.

5. Processing outside the UK

Providers such as Resend, Google and Cloudflare operate internationally and may process information outside the UK, including in the United States. Transfers must comply with UK data protection requirements, using an applicable UK adequacy arrangement or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum where required. Contact us for information about the arrangements applicable to your information.

6. How long information is kept

We keep enquiry correspondence for as long as it is needed to answer you, progress a requested quote or job, and resolve related questions or disputes. We consider whether an enquiry is closed, whether work was agreed, applicable legal record-keeping requirements and the need to establish or defend a claim. Information no longer needed for those purposes should be deleted. If an enquiry leads to work, relevant correspondence may form part of the business records for that work.

The contact API does not keep a permanent enquiry database. Rate-limit entries are held in memory for a 15-minute client window and an hourly overall limit; enquiry-reference and duplicate-detection records expire after one hour or when the API restarts. Enquiry email still exists in the receiving mail system. Server and provider logs are separate from the form and are retained according to log rotation, operational/security needs and the relevant service settings. Backup copies may persist until replaced or deleted; retention and deletion decisions also need to account for those copies. Contact us if you need information about a particular record.

7. Keeping information secure

We use access restrictions and technical controls to protect the form, including validation, request limits and encrypted SMTP connections. No internet service or email system can be guaranteed completely secure. Please send only information reasonably needed for your enquiry.

8. Your rights

Depending on the circumstances, you may ask for access to your personal information, correction, erasure, restriction of processing or a portable copy. You may object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. These rights are subject to legal conditions and exemptions.

Contact [email protected] to make a request. We may need reasonable information to verify your identity. We normally respond within one calendar month; applicable law permits extensions in some circumstances, and we will explain if an extension applies.

9. Complaints, children and changes

You can raise concerns with us or complain directly to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. You do not have to contact us first.

This website is aimed at people enquiring about gates and railings, not at children. We do not ask for children's information. External websites have their own privacy practices. We will update this policy if our practices change and show the revision date above.

Adapted for Wigan Gates from the Website Contracts privacy policy template.