Privacy policy

Who we are

Carpenter & Co is a trading name of Carpenter's Empire LTD, registered in England and Wales, company number [COMPANY NUMBER]. Registered office: [REGISTERED OFFICE ADDRESS]. We are the controller of the personal data described here. ICO registration number: [ICO REGISTRATION NUMBER].

Questions about your data? Email [email protected].

What we collect

• Enquiries: your name, email address, phone number (if given), what you need and your budget, when you use our form or email us.
• Customers: details needed to deliver your order, such as delivery address, photos or files you send us, and payment records.
• Technical data: our hosting provider may keep basic server logs (such as IP address and browser type) to keep the site secure.

Why we use it, and our lawful basis

• To reply to your enquiry and give you a quote: legitimate interests and steps taken at your request before a contract.
• To deliver work you have ordered and take payment: performance of a contract.
• To keep accounting records: legal obligation.

We do not sell your data, and we will not add you to a mailing list without your consent.

Who we share it with

We only share data with services that help us run the business, such as our website host, form provider, email provider, CRM and payment provider. They process data on our behalf and under contract. Some of these providers may store data outside the UK; where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement.

How long we keep it

Enquiries that do not lead to work are deleted within 12 months. Customer and financial records are kept for 6 years, as required for tax purposes.

Cookies and third-party content

This website does not use tracking or advertising cookies. Fonts are loaded from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google. If we add analytics in future, we will update this policy and ask for consent where required.

Your rights

Under UK GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to how we use it, and to data portability. To use any of these rights, email us. We will respond within one month.

Complaints

If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.