Over 30 Years Experience
2 Year Guarantee On Installation
Bespoke Available
Exceptional Customer Service
Privacy Policy
This policy explains what personal information GMD Pennine collects when you use our website, place an order or request a quote, how we use it, who we share it with, and the rights you have over it.
GMD Pennine (“we”, “us”, “our”) manufactures and supplies aluminium rainwater and roofline products. Our registered trading address is Aqueduct Road, Blackburn, BB2 4HT, and our website is gmdpennine.co.uk.
We are the data controller for the personal information described in this policy. That means we decide what information is collected and how it is used.
If you have any questions about this policy, or about how we handle your information, please contact us at sales@gmdpennine.co.uk or on 01254 693 196.
We collect the following information:
- When you place an order: your name, billing and delivery addresses, email address, telephone number, company name where given, the products ordered, and the amount paid.
- When you request a quote or make an enquiry: your name, contact details, the products or services you are interested in, the site address where relevant, and anything else you choose to tell us.
- If you create an account: your name, email address, password (stored in encrypted form) and saved addresses, along with your order history.
- When you pay: your card details are entered directly with our payment provider and are never seen or stored by us. We receive confirmation of payment and a reference, not your full card number.
- Automatically, when you browse: your IP address, browser and device type, the pages you view, and how you arrived at our website. See the section on cookies below.
We do not collect special category data (such as health information), and we do not knowingly collect information from children.
Under data protection law we must have a lawful basis for using your information. Ours are set out below.
- To fulfil your order — processing payment, arranging delivery, providing order confirmations and dealing with returns. This is necessary to perform our contract with you.
- To respond to quotes and enquiries — preparing a quotation and contacting you about it. This is necessary to take steps at your request before entering a contract.
- To meet our legal obligations — keeping accounting and VAT records, and complying with consumer law.
- For our legitimate business interests — keeping our website secure, preventing fraud, understanding how our website is used so we can improve it, and keeping records of the work we have done for customers.
- With your consent — where you have asked to receive marketing from us, or agreed to non-essential cookies. You can withdraw consent at any time.
We do not sell your personal information, and we do not use it to make automated decisions about you.
Card payments are processed by Stripe. When you pay, your card details are sent directly to Stripe over an encrypted connection. We never receive or store your full card number.
Stripe uses your information to process the payment and to prevent fraud, and acts as a data controller in its own right for those purposes. You can read how Stripe handles personal information in its privacy policy at stripe.com.
If you choose to pay by bank transfer, we receive only the payment reference and the amount from our bank.
Cookies are small files stored on your device. We use them for two purposes.
Essential cookies keep the website working. They remember what is in your basket and your quote list, keep you signed in if you have an account, remember whether you are viewing prices inclusive or exclusive of VAT, and help protect against fraud. The website cannot function properly without these.
Analytics cookies help us understand how visitors use the website — which pages are popular, which products are viewed, and whether orders complete successfully. We use Google Analytics for this, managed through Google Tag Manager. This information is collected in aggregate and we do not use it to identify you personally.
You can control or delete cookies through your browser settings. Blocking essential cookies will stop parts of the website, including the basket and checkout, from working.
We share your information only where it is necessary, and only with organisations that are required to protect it. These are:
- Our payment provider (Stripe), to take payment and prevent fraud.
- Our accounting software (Xero), where your order and invoice details are recorded so we can keep proper financial records.
- Delivery partners, who receive the name, address and contact number needed to deliver your order.
- Our website hosting and IT suppliers, who maintain the website and its backups on our behalf.
- Google, for the website analytics described above.
- Professional advisers and authorities, where we are required to share information by law.
Some of these providers process information outside the UK. Where that happens, we rely on the safeguards permitted by UK data protection law, such as the UK International Data Transfer Agreement or an adequacy decision.
We keep your information only for as long as we need it.
- Orders, invoices and payment records: six years after the end of the financial year they relate to, as required for tax and accounting purposes.
- Quotes and enquiries: up to two years, so that we can deal with follow-up questions and repeat work.
- Account information: for as long as your account remains open. You can ask us to close it at any time.
- Analytics information: up to 14 months.
- Marketing preferences: until you tell us you no longer wish to hear from us.
Our website is secured with an encrypted (HTTPS) connection, and payment details are handled entirely by our payment provider. Access to customer information is limited to the people who need it to do their job, and our systems are protected by passwords and kept up to date.
No website can be completely secure. If a breach occurs that is likely to put your rights at risk, we will inform you and the Information Commissioner’s Office as the law requires.
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information, where we no longer need it;
- ask us to restrict how we use your information, or object to us using it;
- ask us to transfer your information to another organisation;
- withdraw your consent at any time, where we rely on consent.
Some of these rights do not apply in every case. For example, we cannot delete order records that we are legally required to keep for accounting purposes.
To exercise any of these rights, contact us at sales@gmdpennine.co.uk. We will respond within one month. There is no charge.
We will only send you marketing by email where you have asked us to, or where you have bought from us and we are telling you about similar products. Every marketing email includes an unsubscribe link, and you can ask us to stop at any time by contacting us. Unsubscribing will not affect emails about orders you have placed.
Our website may link to other websites, and some pages may include content hosted elsewhere, such as embedded videos or maps. We are not responsible for the privacy practices of other websites, and we encourage you to read their privacy policies.
If you are unhappy with how we have handled your personal information, please contact us first so we can put it right.
You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk, by calling 0303 123 1113, or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
We may update this policy from time to time, for example if we change how the website works or start using a new supplier. The date below shows when it was last updated, and we recommend checking it occasionally.
Last updated: 23 September 2026