Privacy Policy

Last updated: March 2026

Who We Are

Kensington Gilders ("we", "us", "our") is the data controller for personal data collected via this website. We are gold and silver leaf gilders based in London, UK.

What Data We Collect

We collect personal data when you:

  • Submit a contact or survey form: name, email address, phone number, project details, uploaded photos/documents, and service preferences
  • Call or email us: the information you provide during communication
  • Browse our website: anonymised session recordings and heatmaps (via Microsoft Clarity), page views, and standard web server logs (IP address, browser type, pages visited)
  • Click contact links: we track clicks on phone, email, and WhatsApp links to measure enquiry volume (no personal data is collected, only the action type and page)

How We Use Your Data

We use your personal data to:

  • Respond to your enquiry and arrange surveys/estimates
  • Provide our gilding, sign writing, and artwork services
  • Communicate with you about your project
  • Improve our website and services

We process your data on the basis of legitimate interest (responding to enquiries) and contract performance (delivering services you have requested).

Third-Party Services

Service Purpose Data Shared
Cloudflare CDN, security, bot protection (Turnstile), file storage (R2) IP addresses, request logs, uploaded files
Microsoft Clarity Anonymised session recordings and heatmaps to improve user experience Anonymised browsing behaviour (no personal data)
Resend Email delivery for form submissions and confirmations Name, email, phone, message

File Uploads

When you upload photos or documents via our survey request form, these files are stored securely on Cloudflare R2 (cloud storage). Files are retained for the duration of your project enquiry and deleted upon request.

Cookies

This website uses minimal cookies:

  • Cloudflare: essential security cookies for CDN and bot protection
  • Microsoft Clarity: anonymised session recording cookies to help us understand how visitors use the site (no personal data is collected)

We do not use cookies for advertising or marketing purposes.

Data Retention

Contact form submissions are retained for the duration of our business relationship and up to 6 years afterwards for legal and accounting purposes. Uploaded files are retained for the duration of the project enquiry. Web server logs are retained for up to 12 months. Microsoft Clarity data is retained for up to 13 months.

Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate personal data
  • Request erasure of your personal data
  • Object to processing of your personal data
  • Request data portability
  • Withdraw consent at any time

To exercise any of these rights, please contact us via our contact form.

Complaints

If you are not satisfied with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.