Privacy Policy

Who We Are

This website is operated by LTI Group Ltd, trading as LTI Transformations, a company registered in Scotland (company number SC674317).

Website address: https://lti-transformations.co.uk

Contact email: info@lti-transformations.co.uk

Contact phone: 0808 169 5745

Data protection contact: Head of Communications

Address: Unit 3B, Inchmuir Road, Whitehill Industrial Estate, Bathgate, EH48 2EP

LTI Group Ltd is the data controller for personal data collected through this website.

What Personal Data We Collect and Why

Enquiry and Contact Forms

When you submit our contact form, we collect what you enter — name, email, phone number, property address, and your enquiry details. This goes into our HubSpot CRM so we can respond, arrange a survey or quote, and deliver our services if you go ahead. Legal basis: your consent, our legitimate interest in responding, and — once you engage us — performance of a contract.

Advertising and Social Media Forms

If you respond to a Facebook or Instagram advert using a lead form, Meta shares your details automatically with our website, which passes them into our HubSpot CRM so we can follow up.

Cookies

We use cookies, including Google Analytics and Meta (Facebook) cookies — see our Cookie Policy below for details.

Phone Calls

We use JustCall and CallRail for phone communications. Calls may be recorded for training and quality purposes, and CallRail's call tracking may show different numbers depending on how you found us, so we can see which marketing led to your call. Callers hear a recorded announcement at the start of the call confirming this.

Other Ways We Collect Your Data

As well as our website and Meta lead forms, we also collect personal data through door-to-door canvassing and surveyor visits, WhatsApp messages, and Google Ads lead forms. All of this data is stored in the same HubSpot CRM described in this policy.

Marketing

We may contact you about our services by phone, email, text or WhatsApp, based on your enquiry or consent.

You may request to opt out of marketing using the unsubscribe link in emails, replying STOP to texts, or simply contacting us.

Analytics

We use Google Analytics to see how visitors use our site — which pages are visited, how long for, and general location/device — so we can improve it. Google processes this data on our behalf; see Google's privacy policy for details.

Who We Share Your Data With

• HubSpot — our CRM, used to store and manage enquiries and customer records.

• Meta (Facebook/Instagram) — where you engage with our adverts or the site's Meta Pixel/social plugins.

• Google — for website analytics (Google Analytics).

• JDR, our marketing agency, who manage advertising on our behalf.

• Universal Computing — our IT support and cyber security provider, who manage our Microsoft 365 environment. They can access data in our Outlook email and SharePoint, but not our HubSpot CRM.

• Other service providers who support our operations and may process customer data on our behalf, including JustCall and CallRail (telephony and call tracking), Oneflow (contracts and e-signatures), and KerbVu (property visualisation).

We never sell your personal data.

How Long We Retain Your Data

Data in our Microsoft 365 environment (Outlook email and SharePoint) isn't currently on an automatic deletion schedule — it's kept until no longer needed, with periodic reviews to remove personal data we no longer require.

Guarantee and property records

If you become a customer, we keep your property and contact details for the length of your guarantee — up to 15 years (wall coatings), 10 years (roof coatings), or 25 years (Andura product guarantee). This is because our guarantee terms require us to be told if the property changes hands, so we need to retain this information to keep the guarantee valid and confirm who's covered.

Suppression / do-not-contact records

If you ask us not to contact you, we keep a minimal record — just your name and contact details — on a suppression list, so we don't contact you again by mistake. This is kept only to prevent unwanted contact, not for marketing.

General enquiry and customer records

We keep general enquiry and customer records until they're no longer needed, so we can check whether someone has enquired with us before and avoid duplicating contact or effort.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
•  

• Request correction of inaccurate or incomplete data

• Request erasure of your data, subject to any legal, contractual or accounting obligations we have to retain it — including the guarantee and suppression-list retention described above

• Restrict or object to certain processing

• Request that your data be provided to you in a portable format
•  

• Withdraw consent at any time, where processing is based on consent

• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at info@lti-transformations.co.uk. Note that we may not be able to fully erase data tied to an active guarantee or our suppression list, as this could affect your cover or risk unwanted contact — we'll explain if this applies to your request.

Where We Send Your Data

Some suppliers we use (HubSpot, Meta, Google) may process data outside the UK, including the US. Where this happens, appropriate safeguards apply, such as Standard Contractual Clauses or a UK adequacy arrangement.

How We Protect Your Data

We take appropriate technical and organisational measures to protect your data, including:

Our Microsoft 365 environment (Outlook and SharePoint) is managed, monitored and secured by our IT support provider, Universal Computing.

Access to personal data is limited to those who need it for their role.

Staff receive ongoing IT security training, including simulated phishing exercises.

Data is stored on Microsoft 365 and HubSpot, both of which apply industry-standard security, including encryption in transit and at rest.

What Data Breach Procedures We Have in Place

If we suspect or discover a personal data breach, we will:

• Contact Universal Computing immediately for help containing the incident and securing affected accounts (e.g. resetting credentials, revoking access, reviewing activity).

• Assess the nature of the breach, the data involved, and the risk to those affected.
•  

• Keep an internal record of the breach, our assessment, and the action taken.
•  

• Report to the ICO within 72 hours where there's a likely risk to individuals' rights and freedoms.
•  

• Notify affected individuals without undue delay where there's a likely high risk to them.

• Review the incident afterwards to prevent recurrence.

What Third Parties We Receive Data From

Meta (Facebook/Instagram), where you have submitted a lead form via our advertising

Automated Decision-Making and Profiling

We do not use your personal data for any automated decision-making that produces legal or similarly significant effects on you.

Regulatory Disclosure Requirements

LTI is not a member of a specific trade body or regulator. Customers are covered by standard statutory cancellation rights under the Consumer Contracts Regulations.

ICO registration number ZB475302

Additional Information / Contact Us

If you have any questions about this policy or how we handle your data, please contact us at info@lti-transformations.co.uk or 0808 169 5745.

Complaints

If you have a complaint about how we've handled your personal data, contact us at info@lti-
transformations.co.uk. We aim to acknowledge and investigate complaints promptly.