Skip to main content

Website information

Privacy policy

This notice explains how Windsor Heritage Collection handles personal information when you enquire, request a quotation or use this website.

Last updated:
29 July 2026
Policy version:
1.1

Who is responsible for your information

Windsor Heritage Collection is responsible for deciding how personal information connected with this website and its enquiries is used. You can contact us at info@windsorheritagecollection.com, by telephone on 01344 534109, or at Stableway North Street, Winkfield, SL4 4SY.

Information we collect

Our enquiry and quotation forms collect the information needed to understand and respond to a request. Required fields are your name, email address and message; quotation requests also require a service selection. You may also provide:

  • your organisation, telephone number and location;
  • the service, quantity and required date;
  • project details, engraving wording or personalisation instructions;
  • one JPG, PNG, WebP or PDF attachment, such as a logo, engraving list or trophy photograph; and
  • your choice about receiving occasional marketing communications.

The website also processes limited technical information needed to deliver and protect the service, including an IP address for short-lived rate limiting and, when configured, Cloudflare Turnstile verification. Google Analytics processes information about page visits and selected website actions. Form-field and attachment contents are not intentionally sent to Google Analytics.

How we collect information

We collect information when you submit a website form, send an email, telephone us, use an enabled WhatsApp link or correspond with us about an enquiry, quotation or order. Uploaded files are collected through the same enquiry form. Analytics information is collected when the website becomes interactive.

How we use information and our lawful bases

  • Enquiries and quotations: to respond, clarify requirements and prepare a quotation. We generally rely on steps requested before entering into a contract and our legitimate interest in managing genuine enquiries.
  • Orders and personalisation: to produce engraving or personalised items, communicate about the order and arrange fulfilment. This is generally necessary to perform a contract.
  • Business records: to keep appropriate transaction and financial records where required by law.
  • Website security: to validate submissions, prevent misuse, apply short-lived rate limits and diagnose failures. We rely on our legitimate interest in operating a secure, reliable website.
  • Analytics: to understand website use and improve it. We rely on our legitimate interest in measuring and improving the website.
  • Marketing communications: to send occasional updates, offers and relevant information only where you select the optional consent box. You may withdraw consent at any time by contacting us.

Information about other people

You may give us limited information about award recipients, employees, pupils, team members or event participants when requesting engraving or personalisation. Please provide only what is needed for the order and do not include sensitive personal information unless it is genuinely necessary and has been agreed with us.

Service providers and recipients

The website is hosted by Vercel. Form submissions are delivered through Resend and may be checked by Cloudflare Turnstile when that security feature is configured. Google Analytics starts when the website becomes interactive. Selecting a WhatsApp link takes you to WhatsApp, operated by Meta; no enquiry information is sent merely because the link is displayed.

Information may also be shared with delivery, engraving or production providers where this is necessary to fulfil an order. The repository does not identify those operational suppliers, so this notice does not name them.

International processing

Some website providers operate internationally and may process information outside the United Kingdom. The website code does not establish the locations used for each customer account or the contractual safeguards in place. Contact us if you would like information about the arrangements relevant to your information.

How long we keep information

Exact operational retention periods are not defined in the website code. We use the following criteria rather than claiming unsupported fixed periods:

  • unsuccessful enquiries and quotations are kept only while they remain relevant to follow-up, dispute handling and reasonable business administration;
  • order and financial records are kept for the period needed to fulfil the order and meet accounting or other legal duties;
  • uploaded files are sent as email attachments and are subject to the retention applied to the resulting business correspondence and production workflow;
  • marketing preferences and evidence of consent are kept while needed to respect and demonstrate your choice, including a record of withdrawal where appropriate;
  • the website rate limiter holds an IP-based entry in server memory for a ten-minute window; hosting and provider security logs are governed by the relevant service configuration; and
  • Google Analytics retention is controlled by the analytics property settings, which cannot be verified from the repository.

Security

We use proportionate technical and organisational measures including encrypted web connections, server-side validation, file type and size checks, origin checks, rate limiting and optional anti-abuse verification. No website or transmission method can be guaranteed completely secure.

Your data protection rights

Depending on the circumstances, you may ask for access to your information, correction, erasure, restriction, objection or data portability. You may withdraw consent at any time without affecting earlier lawful processing. Some rights are subject to legal conditions or exemptions.

Contact us using the details below. You may also complain to the Information Commissioner’s Office.

Automated decision-making

The website does not use submitted enquiry information for automated decisions or profiling. Its rate limiter and anti-abuse checks may automatically accept or reject a submission for security purposes, but they do not make decisions with legal or similarly significant effects about customers.

Contact us about privacy

Email info@windsorheritagecollection.com or telephone 01344 534109. For information about cookies and browser storage, read our cookie policy.