This privacy policy explains what information Manx Under Stairs("we", "us") collects when you use our website and request a quote, why we collect it, how we use it and what your rights are. We act as the data controller of any personal information you give us. We are based in the Isle of Man and comply with the Isle of Man Data Protection Act 2018 and the GDPR as it applies on the Island.
Information we collect
When you submit our online estimate form (or our contact form) we ask for and store:
- your name, email address and phone number;
- your address and postcode (so we can plan a home visit);
- the configurator selections you make (layout, measurements, finish);
- any photographs of your staircase or inspiration images you choose to upload;
- your IP address and browser user-agent (for spam protection); and
- the timestamp of submission.
We do not use third-party advertising trackers, social media pixels or analytics scripts that profile you across other websites.
Why we use it
- To respond to your enquiry. The lawful basis is your consent, given when you tick the box on the estimate form, plus our legitimate interest in running our business.
- To prepare for and carry out a home visit and quotation. Lawful basis: necessary for the steps you ask us to take before entering a contract.
- To prevent abuse of the form. Lawful basis: legitimate interest in protecting our service from spam and bots.
Photographs and uploads
Any images you upload — of your existing staircase, or of finishes you'd like to replicate — are sent only to the team member preparing your quote. We do not publish any uploaded image without your separate written permission. If we'd ever like to use a finished installation in our gallery or marketing, we will ask you first.
Who we share it with
- Our email provider (Resend, Inc.). Used to deliver the enquiry to our inbox and to send you a confirmation.
- Our manufacturing partner, only when you become a customer and only the technical specification needed to build your unit. Personal details are not shared at the enquiry stage.
We never sell or rent your personal information to third parties. We do not transfer your data outside the UK / EEA except via standard contractual clauses with Resend (USA).
How long we keep it
- Unsuccessful enquiries: 12 months, then deleted.
- Customer records: 7 years from the end of the project, to meet HMRC retention rules.
- Server logs: 30 days.
Your rights
You have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct or delete it;
- withdraw your consent at any time;
- object to our processing on legitimate-interest grounds;
- complain to the Isle of Man Information Commissioner.
To exercise any of these rights, send a data request through our enquiry form — add "Data request" to the message and we'll respond within 30 days.
Cookies
This website uses no third-party tracking cookies. The only browser storage we set is a session cookie used by Next.js for routing — no personal data is held in it.
Security
Form submissions are sent over HTTPS. Uploaded images are stored on our server with restricted access and are deleted in line with the retention periods above.
Contact
Data controller: Manx Under Stairs Ltd, Douglas, Isle of Man.
Reach us through our online enquiry form. We respond to all enquiries — including data-protection requests — through the same inbox within one working day.
If you're not satisfied with how we handle your data you can complain to the Isle of Man Information Commissioner.
See also our terms of service and our accessibility statement.