Privacy Policy

1. Who controls your data

The data controller is WoodArt Joinery, Unit 4 Park Royal, London NW10 7LW, United Kingdom. For anything related to your personal data, contact contact@woodartjoinery.com.

2. What we collect

We only collect data needed to run the service:

• Account data — name, email address, phone number and a securely hashed password when you register.
• Order data — your cutting lists, chosen materials, prices, delivery or collection details, and (for trade customers) company name and VAT number.
• Correspondence — emails and call notes when you contact us about an order.

We do not collect data from third-party sources and we do not use advertising trackers.

3. Why we use it (lawful basis)

• To fulfil your orders — pricing, cutting, delivery, payment and order updates. Lawful basis: performance of a contract.
• To meet legal obligations — invoicing, tax and accounting records. Lawful basis: legal obligation.
• To run and improve the service — account management, order history, preventing fraud and abuse. Lawful basis: legitimate interests.

We do not send marketing emails without your consent, and we never sell your data.

4. How long we keep it

• Order and invoice records — 6 years from the end of the relevant financial year, as required by UK tax law.
• Account data — for as long as your account is active. You can ask us to delete your account at any time.
• Quotes that never became orders — up to 12 months, then deleted.

5. Who we share it with

Only where necessary to provide the service: delivery partners (name, address, phone for your delivery), payment providers (to process your payment), and our hosting provider (which stores the site’s database). Each acts under contract and may not use your data for anything else. We do not transfer your data outside the UK/EEA without appropriate safeguards.

6. Your rights

Under UK GDPR you have the right to:

• access a copy of the data we hold about you;
• have inaccurate data corrected;
• have your data erased (where we have no legal duty to keep it);
• restrict or object to processing based on legitimate interests;
• receive your data in a portable format.

To exercise any of these, email contact@woodartjoinery.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

7. Cookies

We use only strictly necessary cookies: a session cookie that keeps you logged in to your account. It is essential for the service and expires when the session ends. Your theme preference (light/dark) is stored locally in your browser and never sent to us. We use no analytics, advertising or third-party cookies, so no cookie consent banner is required.