We are Sanford Group Limited trading as Wandsworth Sash Windows, Parsons Joinery and Rotoplas. We are committed to processing personal information about our customers in ways that comply with our legal obligations as well as being clear with our customers about what we do with their personal information.


The information we ask for in the first instance is: the clients name, a contact number, email address and the property address.

  • Email;

We ask for an email address to send the clients quotation to them in a PDF format, discount offers and to contact them if we were unable to reach them via phone.

  • Contact Number;

We ask our clients to provide us with a contact number for our surveyor to call them upon arrival; to keep clients updated about their job; to book in an installation date. Client contact numbers are passed onto our fitters as they manage their own diary.

  • Address;

We ask our clients to provide their property address/site address for our surveyor to attend for a site survey; when a client has consented to have the works completed by us, their property address will be passed onto our fitters for them to carry out installation.


We keep your personal information for no longer than is necessary for the purposes for which the personal information is collected. When determining the relevant retention periods, we will consider the following factors:

Legal obligations under applicable law to retain data for a certain period of time; statute of limitations under applicable law(s); (potential) disputes, and; guidelines issued by relevant data protection authorities.

Otherwise, we securely erase your information once this is no longer needed.


Our websites:

This document informs you about information we collect and store about you. Our websites are as follows:




A website cookie is a small piece of data sent from a website and stored on the user’s computer by the user’s web browser while the user is browsing. When browsing one of our websites, you do not have to accept the use of cookies and can opt out at any time.

The type of information our website collects:

  • IP address
  • If you have visited before.
  • How long you spend looking at the website.
  • Demographic data incl. gender, age, interests and preferences.

Please see our cookie policy.


Sanford Group Limited makes marketing enquiries to old and new clients to update them about offers and other relevant news. Clients can opt out of this by telling us they do not want to receive marketing updates.

We have social media accounts, which are updated regularly. The social media accounts we have are as follows: Instagram, Twitter, Facebook, Pinterest. Clients are able to contact us via these pages and can be directed to our websites. Data is not stored through our social media accounts.


Sanford Group Limited delete customer banking information once used. With the exception of companies who make up our regular customers.


  • We don’t sell or give your data to third parties.
  • We don’t rent or trade email lists with other organisations and businesses.
  • We do make it easy for you to manage your information, you can change your communication preferences at any time.
  • We do use data to help us provide great customer service, which includes tailoring the information we share with you to help ensure that it’s relevant, useful and timely.


Security is a priority for us when it comes to your personal data. We’re committed to protecting your personal data and have appropriate technical and organisational measures in place to make sure that happens.


The following section explains your rights. The various rights are not absolute, and each is subject to certain exceptions or qualifications. We will grant your request only to the extent that it follows from our assessment of your request that we are allowed and required to do so under data protection laws. Nothing in this Privacy Statement is intended to provide you with rights beyond or in addition to your rights as a data subject under data protection laws.

  • The right to be informed

You have the right to be provided with clear, transparent and easily understandable information about how we use your personal information and your rights. Therefore, we’re providing you with the information in this Privacy Statement.

  • The right of access

You have the right to obtain a copy of your personal information (if we’re processing it), and other certain information (similar to that provided in this Privacy Statement) about how it is used. This is so you’re aware and can check that we’re using your personal information in accordance with data protection law. We can refuse to provide information where to do so may reveal personal information about another person or would otherwise negatively impact another person‘s rights.

  • The right to rectification

You can ask us to take reasonable measures to correct your personal information if it’s inaccurate or incomplete. E.g. if we have the wrong date of birth or name for you.

  • The right to erasure

This is also known as ‘the right to be forgotten’ and enables you to request the deletion or removal of your personal information where there’s no compelling reason for us to keep using it or its use is unlawful. This is not a general right to erasure; there are exceptions, e.g. where we need to use the information in defence of a legal claim.

  • The right to restrict processing

You have rights to ‘block’ or suppress further use of your personal information when we are assessing a request for rectification or as an alternative to erasure. When processing is restricted, we can still store your personal information, but may not use it further. We keep lists of people who have asked for further use of their personal information to be ‘blocked’ to make sure the restriction is respected in future.

  • The right to data portability

You have rights to obtain and reuse certain personal information for your own purposes across different organisations. This enables you to move, copy or transfer your personal information easily between our IT systems and theirs (or directly to yourself) safely and securely, without affecting its usability. This only applies to your personal information that you have provided to us that we are processing with your consent or to perform a contract which you are a party to (such as pay and compensation services), which is being processed by automated means.

  • The right to object

You have the right to object to certain types of processing, on grounds relating to your situation, at any time insofar as that processing takes place for the purposes of legitimate interests pursued by Sanford Group Limited or by a third party. We will be allowed to continue to process the personal information if we can demonstrate “compelling legitimate grounds for the processing which override [your] interests, rights and freedoms” or we need this for the establishment, exercise or defence of legal claims.

  • Rights in relation to automated decision making and profiling

You have the right not to be subject to a decision based solely on automated processing (including profiling), which significantly affects you, subject to some exceptions. Where this is the case, you have the right to obtain human intervention, voice your concerns and to have the decision reviewed.


Under GDPR, clients have the right to access and amend any of their personal data that we hold. Making it easy for them by including a name and contact email.

If you’re curious about what personal data we hold about you or you have a question or feedback for us on this notice, our websites or services, please get in touch. Email your request to Natalie Slatter at natalie.slatter@wandsworthsashwindows.com


Sanford Group Limited compliances with the below under Article 6 of the GDPR


The individual has given clear consent for you to process their personal data for a specific purpose.


The processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.


The processing is necessary for you to comply with the law (not including contractual obligations).


The processing is necessary to protect someone’s life.


This Privacy Notice will be reviewed every 6 months and changed if necessary.


You can contact us with your requests via phone or email.