Last updated: 4 June 2026
1. Who we are
Stairlift Costs (stairliftcosts.co.uk) is operated by Whito Ltd, a company registered in England and Wales.
- Company name: Whito Ltd
- Company number: 10918465
- Registered address: 20-22 Wenlock Road, London, N1 7GU
- ICO registration number: ZA297473
- Data protection contact: contact@stairliftcosts.co.uk
Whito Ltd is the data controller for any personal data collected through this website.
2. What personal data we collect
We collect the following categories of personal data:
- Quote request data: name, email address, telephone number, postcode, staircase type, mobility needs, and property details you provide when requesting a quote.
- Contact form data: name, email address, and message content when you contact us.
- Technical data: IP address, browser type and version, operating system, referring URL, pages visited, and time on site, collected automatically through cookies and server logs.
- Cookie data: analytics identifiers, session tokens, and consent preferences. See our Cookie Policy for full details.
3. How and why we use your data (lawful bases)
Under UK GDPR Article 6, we process your personal data on the following lawful bases:
| Processing activity | Lawful basis | Data used | Retention period |
|---|---|---|---|
| Passing your quote request to partner stairlift suppliers | Consent (Art. 6(1)(a)), you actively opt in via checkbox | Name, email, phone, postcode, staircase details | 24 months from submission, then deleted |
| Responding to contact form enquiries | Legitimate interest (Art. 6(1)(f)), to respond to your enquiry | Name, email, message | 12 months from last correspondence |
| Website analytics (understanding how visitors use the site) | Consent (Art. 6(1)(a)), granted via cookie banner | IP address, pages visited, device info | 26 months (Google Analytics default) |
| Tracking commission on sales to partner suppliers | Legitimate interest (Art. 6(1)(f)), to operate our referral business model | Quote reference number, supplier name, sale completion status | 36 months from sale date for accounting and tax purposes |
4. Who we share your data with
We share personal data with the following categories of recipients:
- Stairlift suppliers: When you submit a quote request and consent to data sharing, your details are passed to one or more of our partner stairlift companies (listed on our Affiliate Disclosure page) so they can contact you with a quote. The supplier becomes an independent data controller for the data they receive.
- Hosting provider: Our website is hosted by our web hosting provider, who processes data on our behalf as a data processor under a data processing agreement.
- Analytics: Google Analytics (Google LLC) processes anonymised website usage data. Google acts as a data processor.
- Email service: We use an email service provider to manage contact form submissions and correspondence.
We do not sell your personal data to any third party.
5. International data transfers
Some of our data processors are based outside the UK. Where personal data is transferred outside the UK, we ensure it is protected by one of the following safeguards:
- The receiving country has been granted an adequacy decision by the UK Secretary of State under UK GDPR Article 45.
- We have entered into the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses with the recipient.
Google LLC transfers data to the United States under its data processing terms, which incorporate the UK IDTA.
6. Data retention
We retain personal data only for as long as necessary for the purpose it was collected. Specific retention periods are stated in the table in Section 3 above. When the retention period expires, data is securely deleted or anonymised.
7. Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access (Art. 15), to request a copy of the personal data we hold about you.
- Right to rectification (Art. 16), to have inaccurate data corrected.
- Right to erasure (Art. 17), to request deletion of your data where there is no compelling reason for continued processing.
- Right to restrict processing (Art. 18), to request that we limit how we use your data.
- Right to data portability (Art. 20), to receive your data in a structured, machine-readable format.
- Right to object (Art. 21), to object to processing based on legitimate interest.
- Right to withdraw consent, where processing is based on consent, you may withdraw it at any time by contacting us at contact@stairliftcosts.co.uk. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Rights related to automated decision-making (Art. 22), we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, email contact@stairliftcosts.co.uk. We will respond within one month.
8. Complaints
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Phone: 0303 123 1113
- Website: https://ico.org.uk/make-a-complaint/
9. Children’s privacy
This website is not directed at individuals under 18. We do not knowingly collect personal data from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. The “last updated” date at the top of this page will be revised accordingly. We encourage you to review this policy periodically.
See also: How Stairlift Costs UK Makes Money, our full affiliate disclosure explaining how we earn commission on completed sales through partner suppliers.