Legal
Privacy Policy
Last updated: 22 August 2026
1. About this Privacy Policy
This Privacy Policy explains how Exton Group Ltd collects, uses, stores and shares personal information when you:
visit https://extongroupltd.co.uk/ (the Website);
contact us by email, telephone, contact form, live chat or social media;
ask us for information or a quotation;
work with us as a customer, prospective customer, supplier, contractor or business contact; or
otherwise provide personal information to us in connection with our signage, retail, digital, surveying, design, manufacturing, installation, project management or related services.
We are committed to handling personal information fairly, lawfully and transparently in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who we are
Exton Group Ltd is the controller of the personal information described in this Privacy Policy. This means we decide why and how that information is used.
Exton Group Ltd
Company number: 16197342
Registered office: 71-75 Shelton Street, London, England, WC2H 9JQ
VAT registration number: GB 508 5383 81
You can contact us about privacy or data protection using:
Email: sales@extongroupltd.co.uk
Telephone: 01246 903886
3. Personal information we collect
The information we collect depends on how you interact with us and may include:
Contact and identity information
your name;
job title and employer or organisation;
business or personal email address;
telephone number;
postal or site address; and
social media username or profile information where you contact us through social media.
Enquiry and project information
details of your enquiry, requirements or proposed project;
correspondence, meeting notes and call records;
quotations, purchase orders, contracts and order information;
surveys, plans, drawings, photographs, videos, measurements and site information;
artwork, branding assets, logos, specifications and proofs;
access, delivery, installation and project contact details;
approvals, instructions, feedback and support requests; and
information relating to suppliers, contractors and other parties involved in a project.
Project information may sometimes include identifiable individuals, vehicle registration numbers, workplace details or images of people captured incidentally in site or installation photographs.
Financial and transaction information
billing and accounts contact details;
invoice, payment and transaction records;
bank account details where needed for payments or refunds; and
relevant tax and accounting information.
We do not normally receive or retain full payment-card details. Where an online payment provider is used, card information is handled directly by that provider under its own privacy terms and security arrangements.
Website and technical information
internet protocol address;
device, browser and operating-system information;
pages visited and interactions with the Website;
referral source, approximate location and access times;
cookie preferences and consent records;
technical logs, error information and security events; and
information submitted through forms or live chat.
Marketing and communication preferences
whether you wish to receive marketing communications;
your communication preferences; and
records of consent, objections, unsubscribes or other preferences.
4. How we collect personal information
We collect personal information:
directly from you when you contact us, submit a form, use live chat, request a quotation, place an order or work with us;
from your employer, colleague, client, project partner or another person involved in a project;
from suppliers, contractors, installation partners and professional advisers;
through our Website, cookies, server logs and related technologies;
through publicly available business sources such as company websites, Companies House, professional directories and social media profiles; and
from referrals, tenders, procurement platforms or existing business relationships.
If you provide personal information about another person, you should ensure that you are authorised to do so and, where appropriate, that they understand how their information will be used.
5. How and why we use personal information
We only use personal information where we have a lawful basis. The purposes and lawful bases we commonly rely on are set out below.
Purpose
Types of information
Lawful basis
Responding to enquiries and preparing quotations or proposals
Contact, identity, enquiry and project information
Taking steps at your request before entering into a contract; legitimate interests in responding to business enquiries and developing our business
Providing and managing services and projects
Contact, project, transaction and correspondence information
Performance of a contract; legitimate interests in delivering and administering projects effectively
Coordinating customers, sites, suppliers, contractors and project partners
Contact, site, project and access information
Performance of a contract; legitimate interests in safe and efficient project delivery
Creating surveys, designs, artwork, proofs and project records
Contact, project, image and technical information
Performance of a contract; legitimate interests in producing accurate work, maintaining quality and evidencing instructions and approvals
Invoicing, payments, bookkeeping and taxation
Contact, transaction, payment and accounting information
Performance of a contract; compliance with legal obligations; legitimate interests in financial administration and debt recovery
Customer service, complaints and dispute handling
Contact, correspondence, project and transaction information
Performance of a contract; legal obligations; legitimate interests in resolving issues and protecting legal rights
Operating, maintaining and securing the Website and business systems
Website, technical, security and account information
Legitimate interests in providing a secure, reliable Website and protecting our business, systems and users
Understanding Website use and improving our content and services
Website usage, device and cookie information
Consent where required for non-essential cookies; legitimate interests where processing is lawful without consent
Sending relevant business updates or marketing
Contact information and marketing preferences
Consent where required; legitimate interests in communicating with relevant business contacts where permitted by law
Managing suppliers, contractors and professional relationships
Contact, project, payment and due-diligence information
Performance of a contract; legitimate interests in managing our supply chain and business relationships
Preventing fraud, misuse and unlawful activity
Contact, transaction, technical and security information
Legal obligations; legitimate interests in protecting our business and others
Establishing, exercising or defending legal claims
Any information relevant to the matter
Legal obligations; legitimate interests in protecting and enforcing legal rights
Where we rely on legitimate interests, we consider whether our interests are necessary and balanced against the rights and expectations of the people concerned.
6. Marketing communications
We may send relevant service information, company news or project updates to business contacts where permitted by law. We will rely on consent where consent is required.
You can stop marketing communications at any time by:
using the unsubscribe option in a marketing email, where provided; or
emailing sales@extongroupltd.co.uk.
Opting out of marketing will not prevent us from sending necessary communications about an enquiry, quotation, order, project, invoice or existing business relationship.
7. Live chat and AI-assisted communications
The Website may offer live chat or an AI-assisted chat service to answer common questions, collect enquiry details and help direct visitors to the appropriate person.
Messages submitted through chat may be processed by our chat-service and technology providers on our behalf. Please do not enter unnecessary confidential, sensitive or special-category information into the chat.
AI-assisted responses are provided for general guidance and may not always be complete or accurate. They do not constitute a quotation, technical instruction, contractual commitment or final decision by Exton Group.
We do not use solely automated decision-making that produces legal or similarly significant effects on individuals. Important commercial, project and customer decisions involve human review.
8. Cookies and similar technologies
The Website may use cookies and similar technologies to operate securely, remember preferences, provide chat functions, understand Website performance and, where enabled, measure visitor activity.
Cookies may fall into the following categories:
Strictly necessary cookies: required for security, network management, forms, consent settings and essential Website functions. These cannot normally be disabled through our Website.
Functional cookies: support optional features such as live chat or remembered preferences.
Analytics cookies: help us understand how visitors use the Website and improve its content and performance.
Marketing cookies: may be used to measure campaigns or provide relevant advertising, but only if we choose to enable those services.
Non-essential cookies and similar technologies will only be used after you have provided the required consent. You can accept, reject or change your preferences through the Website's cookie controls.
Browser settings can also be used to block or delete cookies, although blocking strictly necessary cookies may affect how the Website operates.
The exact cookies in use, their providers, purposes and durations should be shown through the Website's cookie settings or cookie notice.
9. Who we share personal information with
We may share personal information where reasonably necessary with:
employees and authorised representatives of Exton Group;
surveyors, designers, manufacturers, installers, electricians, contractors, subcontractors, logistics providers and other project partners;
customers, principal contractors, site operators, landlords or other parties involved in the relevant project;
website hosting, content-management, email, communications, live-chat and cloud-storage providers;
customer-relationship management, project-management, quotation, invoicing, accounting and payment providers;
IT support, cyber-security, backup and business-continuity providers;
insurers, accountants, auditors, solicitors and other professional advisers;
banks, payment providers and debt-recovery services;
regulators, courts, law-enforcement bodies, tax authorities and other public authorities where required or permitted by law; and
a purchaser, investor or adviser in connection with a proposed sale, restructuring, financing or transfer of all or part of our business.
Technology and business-service providers used by Exton Group may include Webflow, Microsoft 365, Social Intents, Pipedrive, Bonsai and Xero, together with their approved infrastructure and subprocessors. The providers used may change as our systems develop.
We require service providers acting on our behalf to use personal information only for authorised purposes and to protect it appropriately.
We do not sell personal information.
10. International transfers
Some technology providers and their subprocessors may store or process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to ensure an appropriate safeguard is in place. Depending on the destination and provider, this may include:
a UK adequacy regulation;
the UK International Data Transfer Agreement;
the UK Addendum to the European Commission's Standard Contractual Clauses; or
another lawful safeguard permitted by UK data protection law.
You can contact us if you would like more information about the safeguards relevant to your information.
11. How long we keep personal information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, insurance and reporting requirements.
Our normal retention approach is:
Enquiries that do not become projects: usually up to 24 months after the last meaningful contact, unless a longer period is reasonably required.
Customer, supplier and project records: usually six years after completion of the project or the end of the relationship.
Quotations, contracts, approvals, surveys, proofs and key project correspondence: usually six years after project completion, or longer where necessary for warranties, safety, regulatory compliance, disputes or legal claims.
Accounting and tax records: for the period required by applicable law, normally at least six years.
Marketing records: until consent is withdrawn, an objection is made or the information is no longer reasonably needed. Suppression records may be retained so that we can respect an opt-out.
Website logs, analytics, cookies and chat records: according to their purpose, our configured settings and the relevant provider's retention controls, and no longer than reasonably necessary.
We may retain information for longer where required by law, an insurer, a regulator, a contractual obligation or an actual or anticipated legal claim. Information may be securely deleted or anonymised when it is no longer required.
12. Security
We use reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure, destruction or unauthorised access.
These measures may include access controls, authentication, encryption, device security, backups, staff controls, security software and appropriate contractual requirements for service providers.
No internet transmission or information-storage system can be guaranteed completely secure. Please contact us promptly if you believe personal information connected with Exton Group may have been compromised.
13. Your data protection rights
Depending on the circumstances, you may have the right to:
access personal information we hold about you;
correct inaccurate or incomplete information;
request deletion of your information;
restrict how your information is used;
object to processing based on legitimate interests or for direct marketing;
receive or transfer certain information in a portable format;
withdraw consent at any time where processing is based on consent; and
complain to a supervisory authority.
These rights are not absolute and may depend on the lawful basis, the type of information and any applicable exemptions.
Your right to object
You have the right to object at any time to the use of your personal information for direct marketing. You may also object to processing based on legitimate interests where your particular circumstances justify it.
To exercise a right, contact sales@extongroupltd.co.uk. We may need to confirm your identity before completing a request. We normally respond within one month, although the law permits additional time for particularly complex or numerous requests.
You will not normally have to pay a fee. A reasonable fee may be charged, or a request may be refused, where a request is manifestly unfounded or excessive, as permitted by law.
14. Complaints
Please contact us first if you have a concern about how we have handled personal information so that we have an opportunity to investigate and respond.
You also have the right to complain to the Information Commissioner's Office (ICO), the United Kingdom's data protection regulator:
Information Commissioner's Office
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
15. Children's information
The Website and our services are intended for businesses and adult users. They are not directed at children, and we do not knowingly collect personal information from children through the Website.
If you believe a child has provided personal information to us without appropriate authority, please contact us so that we can review and, where appropriate, delete it.
16. Third-party websites and social media
The Website may link to third-party websites or social media platforms. Those organisations control their own use of personal information and have their own privacy policies.
We are not responsible for the privacy practices of third-party websites. Please review their privacy information before providing personal information.
17. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to our Website, services, systems or legal obligations.
The latest version will be published on this page with an updated revision date. Where a change is significant, we may also provide an additional notice where appropriate.
18. Contact us
Questions, requests or concerns about this Privacy Policy or our use of personal information can be sent to:
Exton Group Ltd
Email: sales@extongroupltd.co.uk
Telephone: 01246 903886
Registered office: 71-75 Shelton Street, London, England, WC2H 9JQ
1. About this Privacy Policy
This Privacy Policy explains how Exton Group Ltd collects, uses, stores and shares personal information when you:
visit https://extongroupltd.co.uk/ (the Website);
contact us by email, telephone, contact form, live chat or social media;
ask us for information or a quotation;
work with us as a customer, prospective customer, supplier, contractor or business contact; or
otherwise provide personal information to us in connection with our signage, retail, digital, surveying, design, manufacturing, installation, project management or related services.
We are committed to handling personal information fairly, lawfully and transparently in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who we are
Exton Group Ltd is the controller of the personal information described in this Privacy Policy. This means we decide why and how that information is used.
Exton Group Ltd
Company number: 16197342
Registered office: 71-75 Shelton Street, London, England, WC2H 9JQ
VAT registration number: GB 508 5383 81
You can contact us about privacy or data protection using:
Email: sales@extongroupltd.co.uk
Telephone: 01246 903886
3. Personal information we collect
The information we collect depends on how you interact with us and may include:
Contact and identity information
your name;
job title and employer or organisation;
business or personal email address;
telephone number;
postal or site address; and
social media username or profile information where you contact us through social media.
Enquiry and project information
details of your enquiry, requirements or proposed project;
correspondence, meeting notes and call records;
quotations, purchase orders, contracts and order information;
surveys, plans, drawings, photographs, videos, measurements and site information;
artwork, branding assets, logos, specifications and proofs;
access, delivery, installation and project contact details;
approvals, instructions, feedback and support requests; and
information relating to suppliers, contractors and other parties involved in a project.
Project information may sometimes include identifiable individuals, vehicle registration numbers, workplace details or images of people captured incidentally in site or installation photographs.
Financial and transaction information
billing and accounts contact details;
invoice, payment and transaction records;
bank account details where needed for payments or refunds; and
relevant tax and accounting information.
We do not normally receive or retain full payment-card details. Where an online payment provider is used, card information is handled directly by that provider under its own privacy terms and security arrangements.
Website and technical information
internet protocol address;
device, browser and operating-system information;
pages visited and interactions with the Website;
referral source, approximate location and access times;
cookie preferences and consent records;
technical logs, error information and security events; and
information submitted through forms or live chat.
Marketing and communication preferences
whether you wish to receive marketing communications;
your communication preferences; and
records of consent, objections, unsubscribes or other preferences.
4. How we collect personal information
We collect personal information:
directly from you when you contact us, submit a form, use live chat, request a quotation, place an order or work with us;
from your employer, colleague, client, project partner or another person involved in a project;
from suppliers, contractors, installation partners and professional advisers;
through our Website, cookies, server logs and related technologies;
through publicly available business sources such as company websites, Companies House, professional directories and social media profiles; and
from referrals, tenders, procurement platforms or existing business relationships.
If you provide personal information about another person, you should ensure that you are authorised to do so and, where appropriate, that they understand how their information will be used.
5. How and why we use personal information
We only use personal information where we have a lawful basis. The purposes and lawful bases we commonly rely on are set out below.
Purpose
Types of information
Lawful basis
Responding to enquiries and preparing quotations or proposals
Contact, identity, enquiry and project information
Taking steps at your request before entering into a contract; legitimate interests in responding to business enquiries and developing our business
Providing and managing services and projects
Contact, project, transaction and correspondence information
Performance of a contract; legitimate interests in delivering and administering projects effectively
Coordinating customers, sites, suppliers, contractors and project partners
Contact, site, project and access information
Performance of a contract; legitimate interests in safe and efficient project delivery
Creating surveys, designs, artwork, proofs and project records
Contact, project, image and technical information
Performance of a contract; legitimate interests in producing accurate work, maintaining quality and evidencing instructions and approvals
Invoicing, payments, bookkeeping and taxation
Contact, transaction, payment and accounting information
Performance of a contract; compliance with legal obligations; legitimate interests in financial administration and debt recovery
Customer service, complaints and dispute handling
Contact, correspondence, project and transaction information
Performance of a contract; legal obligations; legitimate interests in resolving issues and protecting legal rights
Operating, maintaining and securing the Website and business systems
Website, technical, security and account information
Legitimate interests in providing a secure, reliable Website and protecting our business, systems and users
Understanding Website use and improving our content and services
Website usage, device and cookie information
Consent where required for non-essential cookies; legitimate interests where processing is lawful without consent
Sending relevant business updates or marketing
Contact information and marketing preferences
Consent where required; legitimate interests in communicating with relevant business contacts where permitted by law
Managing suppliers, contractors and professional relationships
Contact, project, payment and due-diligence information
Performance of a contract; legitimate interests in managing our supply chain and business relationships
Preventing fraud, misuse and unlawful activity
Contact, transaction, technical and security information
Legal obligations; legitimate interests in protecting our business and others
Establishing, exercising or defending legal claims
Any information relevant to the matter
Legal obligations; legitimate interests in protecting and enforcing legal rights
Where we rely on legitimate interests, we consider whether our interests are necessary and balanced against the rights and expectations of the people concerned.
6. Marketing communications
We may send relevant service information, company news or project updates to business contacts where permitted by law. We will rely on consent where consent is required.
You can stop marketing communications at any time by:
using the unsubscribe option in a marketing email, where provided; or
emailing sales@extongroupltd.co.uk.
Opting out of marketing will not prevent us from sending necessary communications about an enquiry, quotation, order, project, invoice or existing business relationship.
7. Live chat and AI-assisted communications
The Website may offer live chat or an AI-assisted chat service to answer common questions, collect enquiry details and help direct visitors to the appropriate person.
Messages submitted through chat may be processed by our chat-service and technology providers on our behalf. Please do not enter unnecessary confidential, sensitive or special-category information into the chat.
AI-assisted responses are provided for general guidance and may not always be complete or accurate. They do not constitute a quotation, technical instruction, contractual commitment or final decision by Exton Group.
We do not use solely automated decision-making that produces legal or similarly significant effects on individuals. Important commercial, project and customer decisions involve human review.
8. Cookies and similar technologies
The Website may use cookies and similar technologies to operate securely, remember preferences, provide chat functions, understand Website performance and, where enabled, measure visitor activity.
Cookies may fall into the following categories:
Strictly necessary cookies: required for security, network management, forms, consent settings and essential Website functions. These cannot normally be disabled through our Website.
Functional cookies: support optional features such as live chat or remembered preferences.
Analytics cookies: help us understand how visitors use the Website and improve its content and performance.
Marketing cookies: may be used to measure campaigns or provide relevant advertising, but only if we choose to enable those services.
Non-essential cookies and similar technologies will only be used after you have provided the required consent. You can accept, reject or change your preferences through the Website's cookie controls.
Browser settings can also be used to block or delete cookies, although blocking strictly necessary cookies may affect how the Website operates.
The exact cookies in use, their providers, purposes and durations should be shown through the Website's cookie settings or cookie notice.
9. Who we share personal information with
We may share personal information where reasonably necessary with:
employees and authorised representatives of Exton Group;
surveyors, designers, manufacturers, installers, electricians, contractors, subcontractors, logistics providers and other project partners;
customers, principal contractors, site operators, landlords or other parties involved in the relevant project;
website hosting, content-management, email, communications, live-chat and cloud-storage providers;
customer-relationship management, project-management, quotation, invoicing, accounting and payment providers;
IT support, cyber-security, backup and business-continuity providers;
insurers, accountants, auditors, solicitors and other professional advisers;
banks, payment providers and debt-recovery services;
regulators, courts, law-enforcement bodies, tax authorities and other public authorities where required or permitted by law; and
a purchaser, investor or adviser in connection with a proposed sale, restructuring, financing or transfer of all or part of our business.
Technology and business-service providers used by Exton Group may include Webflow, Microsoft 365, Social Intents, Pipedrive, Bonsai and Xero, together with their approved infrastructure and subprocessors. The providers used may change as our systems develop.
We require service providers acting on our behalf to use personal information only for authorised purposes and to protect it appropriately.
We do not sell personal information.
10. International transfers
Some technology providers and their subprocessors may store or process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to ensure an appropriate safeguard is in place. Depending on the destination and provider, this may include:
a UK adequacy regulation;
the UK International Data Transfer Agreement;
the UK Addendum to the European Commission's Standard Contractual Clauses; or
another lawful safeguard permitted by UK data protection law.
You can contact us if you would like more information about the safeguards relevant to your information.
11. How long we keep personal information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, insurance and reporting requirements.
Our normal retention approach is:
Enquiries that do not become projects: usually up to 24 months after the last meaningful contact, unless a longer period is reasonably required.
Customer, supplier and project records: usually six years after completion of the project or the end of the relationship.
Quotations, contracts, approvals, surveys, proofs and key project correspondence: usually six years after project completion, or longer where necessary for warranties, safety, regulatory compliance, disputes or legal claims.
Accounting and tax records: for the period required by applicable law, normally at least six years.
Marketing records: until consent is withdrawn, an objection is made or the information is no longer reasonably needed. Suppression records may be retained so that we can respect an opt-out.
Website logs, analytics, cookies and chat records: according to their purpose, our configured settings and the relevant provider's retention controls, and no longer than reasonably necessary.
We may retain information for longer where required by law, an insurer, a regulator, a contractual obligation or an actual or anticipated legal claim. Information may be securely deleted or anonymised when it is no longer required.
12. Security
We use reasonable technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure, destruction or unauthorised access.
These measures may include access controls, authentication, encryption, device security, backups, staff controls, security software and appropriate contractual requirements for service providers.
No internet transmission or information-storage system can be guaranteed completely secure. Please contact us promptly if you believe personal information connected with Exton Group may have been compromised.
13. Your data protection rights
Depending on the circumstances, you may have the right to:
access personal information we hold about you;
correct inaccurate or incomplete information;
request deletion of your information;
restrict how your information is used;
object to processing based on legitimate interests or for direct marketing;
receive or transfer certain information in a portable format;
withdraw consent at any time where processing is based on consent; and
complain to a supervisory authority.
These rights are not absolute and may depend on the lawful basis, the type of information and any applicable exemptions.
Your right to object
You have the right to object at any time to the use of your personal information for direct marketing. You may also object to processing based on legitimate interests where your particular circumstances justify it.
To exercise a right, contact sales@extongroupltd.co.uk. We may need to confirm your identity before completing a request. We normally respond within one month, although the law permits additional time for particularly complex or numerous requests.
You will not normally have to pay a fee. A reasonable fee may be charged, or a request may be refused, where a request is manifestly unfounded or excessive, as permitted by law.
14. Complaints
Please contact us first if you have a concern about how we have handled personal information so that we have an opportunity to investigate and respond.
You also have the right to complain to the Information Commissioner's Office (ICO), the United Kingdom's data protection regulator:
Information Commissioner's Office
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
15. Children's information
The Website and our services are intended for businesses and adult users. They are not directed at children, and we do not knowingly collect personal information from children through the Website.
If you believe a child has provided personal information to us without appropriate authority, please contact us so that we can review and, where appropriate, delete it.
16. Third-party websites and social media
The Website may link to third-party websites or social media platforms. Those organisations control their own use of personal information and have their own privacy policies.
We are not responsible for the privacy practices of third-party websites. Please review their privacy information before providing personal information.
17. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to our Website, services, systems or legal obligations.
The latest version will be published on this page with an updated revision date. Where a change is significant, we may also provide an additional notice where appropriate.
18. Contact us
Questions, requests or concerns about this Privacy Policy or our use of personal information can be sent to:
Exton Group Ltd
Email: sales@extongroupltd.co.uk
Telephone: 01246 903886
Registered office: 71-75 Shelton Street, London, England, WC2H 9JQ
