Privacy Policy

Introduction

Paul Turner Signwriters Ltd (“we”, “us”, “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website (www.paul-turner.co.uk) or interact with our services.

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Data Controller

The data controller responsible for your personal data is:

Paul Turner Signwriters Ltd
Unit 3 Willow Court
Lotherton Way, Garforth
Leeds, West Yorkshire, LS25 2GB
United Kingdom

Email: info@paul-turner.co.uk
Phone: 0113 287 1386

For data protection enquiries, please contact us via our Contact page.

What Personal Data We Collect

Information You Provide Directly

• Name, email address, phone number, and company name (via quote request and contact forms)
• Details about your vehicle(s) or signage requirements submitted as part of a quote request
• Any additional information you include in form messages
• CV, covering letter, and employment history (via job applications through our Careers page)

Information Collected Automatically

• IP address (anonymised where possible)
• Browser type and version, device type, operating system
• Pages visited, time spent on pages, referring website
• Cookie preferences and consent records

Information From Third-Party Sources

• Google Reviews (publicly available business reviews displayed on our website)

How We Use Your Data

We use your personal data for the following purposes:

• Responding to quote requests and general enquiries (Lawful basis: Legitimate interest / Consent)
• Providing quotes, design proofs, and information about our vehicle wrapping and signage services (Lawful basis: Pre-contractual measures)
• Sending emails and making calls related to your enquiry or project (Lawful basis: Legitimate interest)
• Processing and managing job applications (Lawful basis: Pre-contractual measures / Legitimate interest)
• Website analytics to understand visitor behaviour and improve our site (Lawful basis: Consent via cookie banner)
• Visitor attribution and lead source tracking (Lawful basis: Consent via cookie banner)
• Protecting our website against spam and abuse via reCAPTCHA (Lawful basis: Legitimate interest)
• Complying with legal obligations (Lawful basis: Legal obligation)

We will never sell your personal data to third parties.

Cookies

Our website uses cookies to function properly and to analyse how visitors use the site. When you first visit, you will see a cookie consent banner where you can choose which types of cookies to allow.

Necessary Cookies

Required for the website to function. These cannot be disabled. They include session management and security cookies.

Analytics Cookies

Help us understand how visitors use our website by collecting anonymous usage data. We use Google Analytics 4 and Google Tag Manager. These cookies are only loaded after you give consent.

Marketing Cookies

Used to track visitors across websites for advertising purposes, including visitor attribution tracking (WhoShouldISee). These are only loaded after you give consent.

Functional Cookies

Enable enhanced features such as embedded videos and personalised content. These are only loaded after you give consent.

You can change your cookie preferences at any time by clicking the cookie settings button on our website. No tracking scripts run until you accept the relevant cookies via the cookie banner.

Third-Party Services

We use the following third-party services that may process your data:

Vercel (San Francisco, US) — Website hosting and delivery. Processes IP address and request logs. Privacy policy: vercel.com/legal/privacy-policy

Amazon CloudFront (AWS) — Content delivery network used to serve images and media files. Processes IP address and request logs. Privacy policy: aws.amazon.com/privacy

Google Analytics 4 — Website analytics (with consent only). Processes anonymised IP and browsing behaviour. Privacy policy: policies.google.com/privacy

Google Tag Manager — Tag management (with consent only). Processes browsing behaviour. Privacy policy: policies.google.com/privacy

Google reCAPTCHA — Spam and bot protection on forms. Processes IP address and browser behaviour. Privacy policy: policies.google.com/privacy

Google Maps — Interactive maps. Processes IP address. Privacy policy: policies.google.com/privacy

Google Reviews / Google Places — Display of publicly available business reviews. Privacy policy: policies.google.com/privacy

WhoShouldISee — Visitor attribution and lead source tracking (with consent only). Processes IP address and referral data to help identify how visitors found our website. Privacy policy: whoshouldisee.co.uk

Embedded content such as videos may set their own cookies when loaded. These are only loaded with your consent via functional cookies.

Website Development and Management

This website is developed and managed by Web & Roll (www.webandroll.co.uk) on behalf of Paul Turner Signwriters Ltd. Web & Roll may access personal data solely for the purposes of website maintenance, security, and technical support. They do not use your data for any other purpose.

International Data Transfers

Some of our third-party service providers (Vercel, AWS, Google) process data outside the United Kingdom. Where data is transferred internationally, it is protected by:

• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office
• The service provider’s participation in recognised data protection frameworks
• The UK’s adequacy decisions for relevant countries

Data Retention

We retain personal data only for as long as necessary:

• Quote requests and contact form submissions — 2 years from submission
• Job applications (unsuccessful) — 6 months from the end of the recruitment process
• Job applications (successful) — retained as part of your employment record
• Cookie consent records — 12 months (then consent is re-requested)
• Analytics data — As per Google Analytics retention settings (default 14 months)
• Server/access logs — 30 days (managed by Vercel)

Your Rights

Under UK GDPR, you have the following rights:

• Right of access — Request a copy of the personal data we hold about you
• Right to rectification — Request correction of inaccurate or incomplete data
• Right to erasure — Request deletion of your personal data (where there is no compelling reason to continue processing)
• Right to restrict processing — Request that we limit how we use your data
• Right to data portability — Request your data in a structured, machine-readable format
• Right to object — Object to processing based on legitimate interests
• Right to withdraw consent — Withdraw consent at any time (e.g. via the cookie settings button or by contacting us)

To exercise any of these rights, please contact us at info@paul-turner.co.uk or via our Contact page. We will respond within one month of receiving your request.

Data Security

We take the security of your personal data seriously. Our website uses encrypted connections (HTTPS/TLS) and access controls are in place to limit who can access personal data. We regularly review our technical and organisational security measures.

Children’s Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last reviewed” date. We encourage you to review this policy periodically.

Last reviewed: March 2026

Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113