Privacy Policy

Last updated: June 2026

Who we are

Hush Acoustic Products Limited (“Hush Acoustics”, “we”, “us” or “our”) is committed to protecting your privacy and personal data. We are the data controller of any personal data that we collect from or about you.

Hush Acoustic Products Limited is part of the Galaxy Construction Solutions group of companies. Where appropriate, personal data may be shared within the group for legitimate business, compliance, legal, operational and administrative purposes.

This Privacy Policy explains what personal data we collect, how we use it, who we may share it with, how long we keep it, and what rights you have under UK data protection law, including the UK General Data Protection Regulation, the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

If you have any questions about this Privacy Policy or how we use your personal data, you can contact us using the details provided at the end of this policy.

What personal data we collect and why we collect it

We may collect personal data from you when you become a customer or supplier, make an enquiry, contact us in person, by telephone, by email, by post, by fax, through social media, through our website, or through any other communication channel.

We may also collect personal data when you voluntarily complete customer surveys, enter a competition or promotion, provide feedback, submit a website form, request a quotation, place an order, or interact with our website.

We may collect information about you from third-party sources, including credit reference agencies, public registers, building control websites, planning portals, mailing lists, online information platforms and lead generation services such as Barbour ABI.

We may record images of you on CCTV when you visit our premises. We may also record telephone calls for training, monitoring, equality, customer service and complaint-handling purposes.

Information may also be collected when you visit our website, including through cookies, analytics tools and similar technologies. This may include your IP address, browser type, device information, pages visited and other browser-generated information.

What information we may collect

We may collect and process the following categories of personal data:

• Your name, address, telephone number and email address.
• Contact details of your employees, representatives or authorised contacts.
• Business details, including company name, job title, trading address and billing details.
• Details of goods or services you ask us to supply, quote for, purchase from us, or sell to us.
• Payment, account and transaction information.
• Details of your credit history and records held by credit reference agencies, financial crime prevention agencies, the Electoral Register and utility providers.
• Information required for credit checks, identity checks, fraud prevention or anti-money laundering checks, where applicable.
• Your date of birth, nationality, country of birth, country of residence, employment status and tax identification information, where this is necessary for lawful business or compliance purposes.
• Passport details, driving licence details, utility bills or other identity documentation, where required.
• Details of your employment status, income or source of wealth, where required for credit, legal or compliance purposes.
• Your physical appearance and activities when you visit our premises, where captured by CCTV.
• Call recordings and notes of telephone conversations.
• Website usage data, including cookie identifiers, IP address, device information and analytics data.
• Any information you provide when making an enquiry, complaint, request or exercising your data protection rights.

Before we can contract with you for the purchase or sale of goods, or provide credit facilities, we may need to obtain certain information about you to verify your identity, assess credit risk, prevent fraud, comply with legal obligations and meet any applicable requirements under the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017 and other applicable legislation.

Where we are legally required to collect certain information and you do not provide it, we may be unable to contract with you, open an account, provide goods or services, or continue with the relevant transaction.

How we use your personal data

We may use your personal data for the following purposes:

• To respond to enquiries, provide quotations and communicate with you.
• To process orders, supply goods and services, manage deliveries and fulfil our contractual obligations.
• To manage customer and supplier accounts.
• To undertake credit checks, identity checks, fraud prevention checks and anti-money laundering checks.
• To assess and manage credit risk.
• To verify payments, trace debts and recover outstanding sums.
• To protect our business, systems, staff, customers, suppliers and premises.
• To deal with queries, complaints, disputes or problems reported by you.
• To keep appropriate business, accounting, tax and legal records.
• To comply with legal, regulatory and contractual obligations.
• To enable you to participate in promotions, competitions or surveys.
• To provide website functionality and interactive features.
• To ensure website content is presented effectively for your device.
• To monitor and improve our website, marketing, customer service and business operations.
• To generate statistics about website usage and customer enquiries.
• To provide information about goods or services that are similar to those you have purchased from us or enquired about.
• To notify you about changes to our terms, policies, products or services.
• To maintain the security and safety of our premises through CCTV and other security measures.

Our lawful basis for processing

We will only process your personal data where we have a lawful basis for doing so. Depending on the circumstances, our lawful basis may include:

• Contract: where processing is necessary to enter into or perform a contract with you.
• Legal obligation: where processing is necessary to comply with a legal or regulatory obligation.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests.
• Consent: where you have given us clear consent to process your personal data for a specific purpose.

Our legitimate interests may include running and managing our business, responding to enquiries, providing goods and services, managing accounts, preventing fraud, recovering debts, improving our services, maintaining security, protecting our legal position and communicating with customers and suppliers.

Marketing communications

We may use your contact details to provide you with information about goods or services that are similar to those you have purchased from us or enquired about.

You can opt out of receiving marketing communications when we collect your details or at any time by contacting us using the details at the end of this policy.

Disclosure of your information

We may disclose your personal data to:

• Businesses that are part of the same group of companies as us, including Galaxy Construction Solutions and its subsidiaries.
• Our IT, website, software, hosting, communications and support service providers.
• Shipping, delivery, logistics and fulfilment contractors.
• Payment processors and banking providers.
• Our accountants, lawyers, insurers, bankers and other professional advisers.
• Credit reference agencies and fraud prevention agencies.
• Debt collection agencies, tracing agents, courts or enforcement bodies.
• HMRC and other tax authorities where required by law.
• Law enforcement agencies, regulators or public authorities where required or permitted by law.
• Third parties involved in investigating or preventing fraud, crime or unlawful activity.
• A buyer, investor, funder or other relevant third party if our business, assets or group structure changes.

We will not sell your personal data. We will only share your personal data where there is a lawful reason to do so.

Credit and identity checks

As part of our account-opening, contracting, credit control and compliance processes, we may carry out automated checks using personal data such as your name, postal address, date of birth, telephone number, employment status and business details.

These checks may include credit checks and identity checks. They may involve obtaining information from credit reference agencies, the Electoral Register, fraud prevention agencies and utility providers.

We may need to carry out these checks to comply with legal obligations, meet anti-money laundering requirements, prevent fraud and assess credit risk.

Credit reference agencies may record details of our search and may record whether your application to contract with us or open an account is accepted. We may make periodic searches with credit reference agencies to manage your account.

If false or inaccurate information is provided and fraud is identified or reasonably suspected, details may be passed to fraud prevention agencies and law enforcement agencies. This information may be used by us and others to prevent fraud and money laundering, process applications for credit, manage credit and recover debts.

Storage and retention of your personal data

We will only keep your personal data for as long as we need it for the purpose for which it was collected, including to meet contractual, legal, accounting, tax, reporting, regulatory and legitimate business requirements.

We retain personal data collected in connection with the performance of our contractual obligations and information provided for identity checks, credit checks and anti-money laundering checks for up to 10 years after completion of our contract with you, unless we are required or permitted to retain it for a longer period by law.

You may ask us to delete personal data once the relevant retention period has expired, unless we are required or permitted to retain that personal data for a longer period.

Security of your personal data

We take appropriate technical, organisational, physical, electronic and procedural measures to help protect your personal data from unauthorised access, disclosure, alteration, loss or misuse.

Access to personal data is restricted to those who need it for legitimate business, legal, operational or compliance purposes.

International transfers

We may transfer, store or allow access to your personal data outside the United Kingdom where this is necessary for the performance of our contractual obligations, the operation of our systems, or the use of service providers.

Where personal data is transferred internationally, we will take steps to ensure that it is protected in accordance with applicable data protection laws.

Cookies and similar technologies

Our website may use cookies and similar technologies to support website functionality, improve user experience, remember preferences, analyse website performance and support marketing or enquiry tracking.

Cookies are small files placed on your device when you visit a website. Some cookies are necessary for the website to work properly. Other cookies may be used for analytics, performance, personalisation or marketing purposes.

If you leave a comment on our site, you may be able to opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when leaving another comment. These cookies may last for one year.

If you have an account and log in to the site, we may set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we may set cookies to save your login information and screen display choices. Login cookies may last for two days, and screen option cookies may last for a year. If you select “Remember Me”, your login may persist for two weeks. If you log out, login cookies will be removed.

If you edit or publish an article, an additional cookie may be saved in your browser. This cookie contains no personal data and simply indicates the post ID of the article edited. It expires after one day.

You can usually control cookies through your browser settings. Some website features may not work properly if cookies are disabled.

Embedded content from other websites

Articles and pages on this website may include embedded content, such as videos, images, maps, forms or articles.

Embedded content from other websites behaves in the same way as if you had visited the other website directly. These websites may collect data about you, use cookies, embed third-party tracking and monitor your interaction with that embedded content, including where you have an account and are logged in to that website.

Your rights

Under data protection law, you have rights in relation to your personal data. These rights may include:

• The right to be informed about how your personal data is used.
• The right to access personal data held about you and obtain a copy of it.
• The right to have inaccurate personal data corrected.
• The right to have incomplete personal data completed.
• The right to request erasure of your personal data in certain circumstances.
• The right to restrict the processing of your personal data in certain circumstances.
• The right to object to the processing of your personal data in certain circumstances.
• The right to object to direct marketing.
• The right to data portability in certain circumstances.
• The right to be informed about automated decision-making and profiling, where applicable.
• The right to withdraw consent where we rely on consent as the lawful basis for processing.
• The right to lodge a complaint about how your personal data is used.

You can exercise your rights by contacting us using the details at the end of this policy.

Data protection complaints procedure

Hush Acoustics, as part of Galaxy Construction Solutions and its subsidiaries, is committed to complying with its obligations under the UK General Data Protection Regulation, the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

We take concerns about the handling of personal data seriously and aim to investigate and resolve complaints fairly, promptly and transparently.

What you can complain about

You may raise a complaint if you have concerns about how we have collected, used, stored, shared, retained or otherwise processed your personal data.

Examples of complaints may include:

• Concerns that your personal data has not been handled securely.
• Difficulties exercising your rights under data protection law.
• Concerns that your personal data has been retained for longer than necessary.
• Concerns that your personal data has been shared incorrectly.
• Concerns that your personal data is inaccurate or incomplete.

How to make a complaint

Complaints should be submitted in writing by email or post. To help us investigate your complaint, please include:

• Your full name and address.
• Your preferred contact details.
• The nature of your complaint.
• The date the issue occurred, where known.
• The outcome you are seeking.
• Copies of any evidence to support your complaint, where applicable.

Please mark your complaint clearly as a “Data Protection Complaint”.

Complaints process

Complaints should be submitted to the relevant Branch Director. Contact details can be found on the Galaxy Insulation and Dry Lining website under the “Our Branches” section. Your email or letter should be titled “FAO: Branch Director”.

Alternatively, you may submit a message through the website contact form, clearly marked “FAO: Branch Director”.

We will acknowledge your complaint within 30 days of receipt. We will investigate your complaint and respond without undue delay.

If your complaint is complex, requires further investigation, or involves information from multiple parties, we will keep you informed of progress and any revised timescales.

Escalation

If you are dissatisfied with the outcome of the initial investigation, or if you have not received a reply to your complaint, you may request a review by escalating the complaint to:

Email: [email protected]
For the attention of: Tracy Shepherd, CEO

Or by post to:

Galaxy Construction Solutions
FAO Tracy Shepherd, CEO
MBP4 Meadowhall Business Park
Carbrook Hall Road
Sheffield
S9 2EQ

Following completion of the investigation, you will receive a response explaining the outcome of the complaint, what has been done to resolve it and, where appropriate, any actions taken as a result.

Confidentiality

All complaints will be handled confidentially. Information relating to a complaint will only be shared with individuals who require access to investigate, manage or resolve the matter.

Personal data collected during the complaints process will be handled in accordance with this Privacy Policy and applicable data protection laws.

Recording and monitoring

Reports of any complaint will be recorded and monitored. Complaints may be escalated to the CEO of Galaxy Construction Solutions where appropriate.

Complaints to the Information Commissioner’s Office

If we cannot resolve your concerns, you have the right to report a concern to the Information Commissioner’s Office.

You can contact the Information Commissioner’s Office at:

Website: ico.org.uk/concerns
Telephone: 0303 123 1113

Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time. Any substantive changes may be notified to you in writing or by another appropriate method.

We recommend that you check our website regularly to ensure that you are familiar with the most up-to-date version of this Privacy Policy.

Contacting us

If you have any questions, comments or requests regarding this Privacy Policy, or if you would like to exercise any of your data protection rights, you can contact us at:

Email: [email protected]
Post: Hush Acoustics, 1 Shepcote Ln, Sheffield S9 1TH