Privacy Policy

Last updated: 17 August 2026

1. About this privacy policy

This privacy policy explains how Affinity Security Limited, trading as Affinity Gates (referred to as “Affinity Gates”, “we”, “us” or “our”), collects and uses personal information when you visit https://affinitygates.corstotest.co.uk, contact us or ask us about our products and services.

Affinity Security Limited is the controller of the personal information described in this policy. This means that we decide why and how that information is used.

Controller contact details

Affinity Security Limited
Hylands Golf Complex
Main Road, Margaretting
CM4 0ET
United Kingdom

Email: info@affinitysecurity.co.uk
Telephone: 0115 778 1355

Please use “Data protection” as the subject of an email about this policy, your information rights or a data protection complaint.

2. The information we collect

Information you give us

When you submit an enquiry through one of our website forms, email us or contact us by telephone, we may collect:

Your name.
Your email address and telephone number.
Your postcode and the location at which services may be required.
The service you are interested in.
The content of your message and any other information you choose to provide.
Your communication preferences.
Records of our correspondence, quotations, appointments and services.
The date and time of your submission and the privacy wording shown to you.

Please do not submit special category information, criminal offence information or other highly sensitive information through our website forms unless we specifically ask you to provide it and explain why it is needed.

Information collected automatically

When you use https://affinitygates.corstotest.co.uk, our website, hosting services and security tools may automatically process technical information such as:

Your IP address and approximate location derived from it.
Your device, operating system and browser type.
Pages viewed, links selected and the dates and times of visits.
The website, search result or advertising campaign that referred you to us.
Cookie or similar online identifiers.
Your cookie and consent choices.
Diagnostic, error, security and anti-spam information.

If you consent to analytics or advertising technologies, Google Analytics and Google Ads may also process the information described below.

Information received from other sources

We may receive limited information from Google about an advertising interaction, such as the relevant campaign, ad group, keyword category, Google click identifier and whether a defined conversion took place.

We may also receive your information from a person who has asked us to contact you, a contractor or another business involved in a project. Where appropriate, we will tell you who supplied the information.

3. How and why we use personal information

We use personal information only when we have a lawful basis under UK data protection law.

Responding to enquiries and preparing quotations

We use your identity, contact details, postcode, service requirements and message to respond to your enquiry, arrange a survey, prepare a quotation and take other steps you request before entering into a contract.

Our lawful bases are taking steps at your request before entering into a contract and our legitimate interests in responding to prospective customers and operating our business.

Providing products and services

We use contact, property, project, appointment, correspondence and transaction information to provide, administer and support agreed products and services.

Our lawful bases are performance of a contract and our legitimate interests in delivering and managing our services.

Business, accounting and legal records

We may retain contact, contract and transaction records to meet accounting, tax, insurance and other legal requirements, and to establish, exercise or defend legal claims.

Our lawful bases are compliance with legal obligations and our legitimate interests in keeping appropriate business records and protecting our legal rights.

Website and information security

We use technical, log, submission and security information to protect the website, forms, systems, customers and business from spam, misuse, fraud and security incidents.

Our lawful bases are our legitimate interests in securing our services and business and, where applicable, compliance with legal obligations.

Website analytics

With your consent, we use device, cookie and website-interaction information through Google Analytics to understand how visitors use the website and improve its performance and content.

Advertising measurement

With your consent, we use advertising identifiers, campaign information and conversion events to measure Google Ads performance and understand whether advertising results in enquiries.

If advertising audiences, remarketing or personalised advertising are enabled, those features will also be used only after the required consent has been obtained.

Data protection requests and complaints

We use identity, contact, request, complaint and correspondence information to handle information-rights requests and data protection complaints.

Our lawful bases are compliance with legal obligations and our legitimate interests in demonstrating compliance and resolving concerns.

Where we rely on legitimate interests, those interests include running and improving our business, replying to people who contact us, keeping appropriate records and protecting our website and systems. We consider the effect on your rights before relying on this basis.

You do not have to provide information through a website form. However, without the requested contact and project information, we may not be able to respond, provide an accurate quotation or take the steps you have requested. You may contact us by telephone or email instead.

We do not use enquiry details to send unrelated electronic marketing unless we have a separate lawful basis and have given you an appropriate choice. We do not sell enquiry details or provide them to unrelated businesses for their own direct marketing.

4. Website enquiry forms and Fluent Forms

Our website enquiry forms are provided through Fluent Forms, a WordPress plugin. A submission may be stored in the website’s WordPress database and sent to authorised members of our team by email.

Depending on the website configuration, a form may also record submission information such as an IP address, browser information, source page, date, time and a record of the privacy wording or acknowledgement shown to you.

We use this information to respond to your enquiry, assess the requested work, arrange a survey or appointment, prepare a quotation, keep appropriate business records and protect our forms from misuse.

We do not intentionally send names, email addresses, telephone numbers, postcodes or free-text form content to Google Analytics or Google Ads. Our normal advertising measurement is intended to send only a conversion event, such as “enquiry submitted”, after advertising consent has been given.

The website may use optional form integrations or anti-spam services. Where an integration sends personal information to another provider, we will ensure that the use has an appropriate lawful basis and is covered by this policy or an additional notice shown when the information is collected.

5. Cookies and similar technologies

Cookies are small text files stored on a device. Similar technologies include pixels, tags, local storage and online identifiers. They may be used to operate the website, remember choices, understand website use and measure advertising.

We may use the following categories:

Strictly necessary technologies: required for functions such as security, form operation and remembering privacy choices.
Analytics technologies: including Google Analytics, used to measure visits and understand how people use the website.
Advertising technologies: including Google Ads tags, used to attribute visits and enquiries to advertising and, where separately enabled and consented to, support advertising audiences or personalised advertising.

Analytics and advertising technologies are not loaded until you have made the relevant choice through our cookie controls. Rejecting non-essential technologies will not prevent you from using the website or submitting an enquiry.

You can accept, reject or customise non-essential technologies through the cookie banner. You can change your decision at any time using the Cookie Settings control available on https://affinitygates.corstotest.co.uk.

You can also delete cookies through your browser settings, although doing so may remove a previously saved privacy choice.

Our separate Cookie Policy identifies the cookies and similar technologies in use, including their providers, purposes and durations.

6. Google Analytics and Google Ads

Google Analytics

We use Google Analytics to understand, in aggregate, how visitors find and use the website.

Depending on your consent choices and our configuration, Google Analytics may process an IP address transiently, device and browser information, approximate location, page addresses, referrer information, interaction events, timestamps and first-party cookie or online identifiers.

We use Google Analytics reports to measure website performance, identify popular content, understand user journeys and improve the website. We must not deliberately send names, email addresses, telephone numbers or form-message content to Google Analytics.

Google Ads

We use Google Ads to advertise our services and measure whether advertising leads to actions such as visiting a service page, selecting a call link or submitting an enquiry.

This may involve Google advertising cookies or other identifiers, Google click identifiers such as GCLID, GBRAID or WBRAID, device and browser information, IP-derived information, campaign details, consent signals and conversion events.

If Google Analytics is linked to Google Ads or Google Analytics Advertising Features are enabled, our first-party Google Analytics cookies or identifiers may be used together with Google advertising cookies or other Google identifiers.

Advertising audiences, remarketing and personalised advertising will be used only if those features are enabled, the required consent has been obtained and the relevant Google account is configured to respect that choice.

Google may process information as our service provider and, for some Google advertising functions, for its own purposes under its terms and privacy policy. Google’s European establishment is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Further information is available from:

Your choices in our Cookie Settings control apply to the tags used on this website. Google account and browser controls are additional controls and do not replace the website consent choice.

We do not use Google Ads enhanced conversions or send hashed contact information to Google unless this policy and the website’s consent information are updated before that feature is enabled.

7. Who receives personal information

Where necessary and appropriate, personal information may be disclosed to:

Authorised staff and contractors who handle enquiries and deliver services.
Website hosting, backup, security, IT support and email providers acting on our instructions.
Google in connection with consented analytics and advertising services.
Suppliers or subcontractors involved in a quotation or service.
Accountants, insurers, auditors, legal advisers and other professional advisers.
Courts, regulators, tax authorities, law-enforcement bodies or other authorities where required or permitted by law.
A buyer, seller or adviser in connection with a proposed or completed sale, reorganisation or transfer of all or part of our business, subject to appropriate confidentiality and data protection measures.

Our service providers may use personal information only for the agreed service and must protect it appropriately. We do not allow them to use enquiry information for their own unrelated marketing.

8. International transfers

Some technology providers, including Google and providers supporting website hosting, email or backups, may process information outside the United Kingdom.

Where personal information is transferred to a country that is not covered by UK adequacy regulations, we use an applicable safeguard or another lawful transfer mechanism.

This may include the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, binding contractual protections or another mechanism permitted by UK law. We also consider the circumstances and risks of a transfer and apply supplementary measures where appropriate.

You may contact us for more information about the safeguard relevant to your information.

9. How long we keep information

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements.

Our normal retention schedule is:

General enquiries that do not become customer work: up to 24 months after the last meaningful contact.
Quotations, customer files, project correspondence and transaction records: generally six years after completion, the last transaction or the end of the relationship, unless a longer period is required for a legal claim or obligation.
WordPress, form, anti-spam and security logs: generally up to 12 months, unless needed to investigate an incident.
Google Analytics user-level and event-level data available in detailed reporting: up to 14 months, after which it is deleted or retained only in aggregated reports.
Google Ads campaign, billing and conversion records: for as long as the Google Ads account remains active and the records are needed for campaign management, measurement, billing, fraud prevention or legal claims. We review the need at least annually.
Separate advertising event-level exports: no more than 24 months, unless a documented legal or dispute-related reason applies.
Cookie-choice and consent records: for as long as needed to respect the choice and demonstrate compliance, generally up to six years.
Data protection requests and complaints: generally six years after the matter is closed.

Google and other independent recipients may retain information under their own policies. When information is no longer required, we delete it, securely destroy it or anonymise it so that it no longer identifies anyone.

10. Security

We use appropriate technical and organisational measures designed to protect personal information from accidental loss, destruction, alteration, unauthorised access or disclosure.

These measures may include access controls, restricted administrative access, protected hosting and backups, software updates and security monitoring.

No website or electronic transmission can be guaranteed to be completely secure. If we become aware of a personal-data breach, we will assess it and notify affected people and the Information Commissioner where the law requires us to do so.

11. Your information rights

Depending on the circumstances, you may have the right to:

Ask for access to your personal information and a copy of it.
Ask us to correct inaccurate or incomplete information.
Ask us to erase information.
Ask us to restrict how information is used.
Object to processing based on legitimate interests or to direct marketing.
Receive information you provided in a portable format, where the right applies.
Withdraw consent at any time, without affecting processing carried out before withdrawal.
Complain about how we use your information.

These rights are subject to legal conditions and exemptions. We may ask for enough information to verify your identity and locate the relevant records.

We normally respond without undue delay and within the applicable statutory period. We do not normally charge a fee, although the law may allow a reasonable fee or refusal in limited circumstances.

To exercise a right, email info@affinitysecurity.co.uk or write to the address at the beginning of this policy.

12. Data protection complaints

If you believe that we have infringed your data protection rights, you may make a complaint by emailing info@affinitysecurity.co.uk with the subject “Data protection complaint”, or by writing to the address at the beginning of this policy.

Please explain what happened, when it happened, which information or interaction is involved and what outcome you are seeking.

We will facilitate your complaint, acknowledge it within 30 days, take appropriate steps to investigate and respond without undue delay, keep you informed where appropriate and tell you the outcome.

You may also complain to the Information Commissioner’s Office, the UK supervisory authority:

Make a data protection complaint to the ICO

We would appreciate the opportunity to address your concern directly, but your right to approach the ICO is not affected.

13. Automated decisions and advertising personalisation

Affinity Security Limited does not use information collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects for you.

If you consent and the relevant Google advertising features are enabled, Google may use identifiers and interaction information to select or personalise advertising under its own policies.

This does not determine whether you can access our website or services. You can withdraw the relevant website consent through Cookie Settings and manage Google advertising preferences through Google My Ad Centre.

14. Children

Our website and services are intended for property owners, businesses and adults seeking gate products or services. They are not directed at children.

If you believe that a child has submitted personal information to us without appropriate involvement from a parent or guardian, please contact us so that we can review and, where appropriate, delete it.

15. External websites and social media

The website may link to Google, Facebook, Instagram or other external services. When you follow an external link, that provider controls its own website and may collect information under its privacy policy.

This privacy policy does not govern third-party websites.

16. Changes to this policy

We may update this policy when our website, services, suppliers or legal obligations change.

The latest version will be available on https://affinitygates.corstotest.co.uk, and the “Last updated” date will show when it was revised. If a change materially affects how we use information already collected, we will provide any additional notice or choice required by law.