GDPR and Your Glazing Business
If you collect customer data (and you do), GDPR applies to you. This isn't just a large-company problem — every glazing business from a sole trader to a national chain needs to handle personal data responsibly.
What Data Do Glazing Companies Hold?
More than you might think:
- Customer names, addresses, phone numbers, email addresses
- Property details and survey measurements
- Financial information (order values, payment details)
- Photographs of properties
- Notes from conversations
- Promoter-collected lead data
Key GDPR Requirements for Home Improvement Companies
Lawful Basis
You need a valid reason to hold someone's data. For glazing companies, this is typically:
- Contract: you need their details to provide a quote and install their windows
- Legitimate interest: following up on an enquiry they made
- Consent: marketing communications to past customers
Data Minimisation
Only collect what you need. Your CRM should capture relevant information, not everything possible.
Right to Erasure
Customers can ask you to delete their data. Your CRM should make this easy — a single action that removes all personal data while retaining anonymised business records.
Data Security
Keep data safe:
- CRM systems should use encryption in transit and at rest
- User accounts should have appropriate permissions
- Don't share login credentials between staff
- Regularly review who has access to what
Practical Steps
- Audit your data — know what you hold and where
- Update your privacy policy — make it specific to your glazing business
- Use a proper CRM — spreadsheets and paper records are harder to secure and manage
- Train your team — everyone who handles data should understand the basics
- Have a data retention policy — how long do you keep lead data for non-customers?