Privacy Policy

---

Last updated: 19 February 2026

This Privacy Policy explains how C S J (a trading name of West Mains Joinery Limited) (“we”, “us”, “our”) collects, uses, stores and shares personal information. We are a family-run double glazing company based in Linlithgow, serving customers across Scotland, supplying and installing bespoke uPVC windows and composite doors, and providing a 10-year guarantee on qualifying products.

We are committed to protecting your privacy and handling personal data responsibly and securely.

For the purposes of UK data protection law, West Mains Joinery Limited (trading as C S J) is the data controller of your personal information.

Website: CSJ-Windows.co.uk
Contact email: william.ferguson@csj-windows.co.uk

Depending on how you contact us and what services you request, we may collect:

Identity & contact details

• Name, address, email address, phone number
   

Enquiry, survey & installation details

• Details about your property and requirements (e.g., window/door types, measurements, photos you provide, appointment times, notes from surveys, quotes, and installation details)
   

Guarantee information

• Information needed to administer and support your 10-year guarantee (e.g., installation details, product details, service/repair history)
   

Marketing & communication preferences

• How you prefer to be contacted and your marketing opt-in/opt-out choices
   

Website & device data

• IP address, browser/device information, pages visited, and cookie data (see Cookies section)
   

Social media / Facebook

• If you contact us or complete a lead form via Facebook/Instagram, we may receive information from Meta such as your name, contact details and message/form content.
   

Doorstep canvassing

• If you speak to our canvassers, we may collect details (e.g., name, address, and contact details) to follow up with your enquiry or arrange an appointment.
   

We collect personal information when you:

• Fill in a form on our website or contact us by phone/email
   
• Message us or submit a lead form via Facebook/Instagram
   
• Speak to our canvassers (doorstep enquiries)
   
• Request a quote, survey, installation, aftercare, or make a guarantee claim
   
• Use our website (including via cookies and analytics)
   

We use personal data for the following purposes:

A) Responding to enquiries and providing quotes
To contact you, arrange surveys/appointments, and prepare quotes.
Lawful basis: Legitimate interests (responding to enquiries) and/or Contract (steps prior to entering a contract).

B) Supplying and installing products and services
To manage orders, surveys, installation, snagging, and customer service.
Lawful basis: Contract.

C) Administering the 10-year guarantee
To register, validate, and manage guarantee claims and aftercare.
Lawful basis: Contract and Legitimate interests.

D) Marketing and promotions
To send offers or updates where you have opted in, or where permitted by law. You can opt out at any time.
Lawful basis: Consent (where required) and/or Legitimate interests (limited direct marketing where permitted).

E) Website improvement and analytics
To understand how visitors use our website and improve it.
Lawful basis: Consent for non-essential cookies; Legitimate interests for essential site functionality.

F) Security and fraud prevention
To protect our systems, staff, customers, and business.
Lawful basis: Legitimate interests and/or legal obligations.

We may share personal information with trusted third parties only where necessary, including:

• Surveyors/installers and operational staff to deliver our services
   
• IT and security providers supporting our systems (we have a dedicated IT protection team providing security across IT-related systems)
   
• Website hosting, email, CRM and scheduling providers
   
• Payment providers (where applicable)
   
• Manufacturers/suppliers where required for product specification, warranty/guarantee support, or parts
   
• Professional advisers (accountants, insurers, legal advisers)
   
• Authorities/regulators where required by law or to protect legal rights
   

We require service providers to protect your data and only use it for the agreed purpose.

Some providers we use (for example, social media platforms and certain website/analytics services) may process data outside the UK. Where this happens, we use appropriate safeguards (such as UK adequacy regulations or approved contractual clauses) to protect your information.

We keep personal data only as long as necessary for the purposes described above. Typical retention periods may include:

• Enquiries/quotes: up to 24 months after last contact
   
• Customer and installation records: for the duration of our relationship and for up to 6 years afterwards for accounting/tax/legal purposes
   
• Guarantee records: for the 10-year guarantee period, plus a reasonable administrative period afterwards
   
• Marketing records: until you opt out or we refresh consent/interest
   

Retention may vary depending on legal requirements and the nature of the service.

Under UK GDPR, you have rights including:

• Access – request a copy of your personal data
   
• Rectification – correct inaccurate or incomplete information
   
• Erasure – request deletion in certain circumstances
   
• Restriction – limit how we use your data in certain circumstances
   
• Objection – object to certain processing, including direct marketing
   
• Data portability – receive certain data in a transferable format
   
• Withdraw consent – where we rely on consent
   

To exercise your rights, contact us at william.ferguson@csj-windows.co.uk.

You can opt out of marketing at any time by:

• Using any “unsubscribe” link in marketing emails (where used), or
   
• Emailing us at william.ferguson@csj-windows.co.uk, or
   
• Telling us by phone when we contact you
   

We will always respect opt-out requests.

Our website CSJ-Windows.co.uk uses cookies. Some are essential for the site to work; others help measure performance or support marketing. Where required, we will ask for consent before placing non-essential cookies.

If you engage with us through Facebook/Instagram, Meta may also process your information under its own policies. We recommend reviewing Meta’s privacy information.

We take appropriate technical and organisational measures to protect personal data, including access controls and security processes. We also have a dedicated IT protection team providing security across IT-related systems. While no system is 100% secure, we work to minimise risks and protect your information.

Our services are intended for adults/homeowners. We do not knowingly collect personal information from children.

If you have concerns, please contact us first and we will do our best to resolve them. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.

We may update this Privacy Policy from time to time. The latest version will always be available on our website and will show the updated date at the top.