Depending on how you interact with us, we may collect and process the following categories of personal data:

Information you give us. When you contact us, request a quote, discuss a project, or engage our services, we may collect your name, postal address, email address, telephone number, property or project details, and any other information you choose to share with us.

Information about transactions and projects. Where you become a client, we may hold records relating to our work for you, including contracts, correspondence, design plans, project specifications and payment details.

Information we collect automatically. When you visit our website, we may automatically collect technical information such as your IP address, browser type, device information, and details of your visit, including through cookies and similar technologies (see section 8).

We do not intentionally collect "special category" data (such as health or ethnicity) unless it is necessary and you have provided it to us with your consent.

We use your personal data for the following purposes:

• To respond to your enquiries and provide you with information you have requested.

• To prepare quotes and proposals and to discuss potential projects with you.

• To provide our carpentry, construction, interior design and related services, and to manage our contract with you.

• To process payments and maintain financial and business records.

• To communicate with you about your project or our services.

• To improve our website, services and customer experience.

• To comply with our legal, regulatory and accounting obligations.

Under the UK GDPR, we rely on the following legal bases to process your personal data:

• Contract – where processing is necessary to enter into or perform a contract with you.

• Legitimate interests – where processing is necessary for our legitimate business interests, such as responding to enquiries, managing our relationship with you, and promoting our services, provided these interests are not overridden by your rights.

• Legal obligation – where we are required to process your data to comply with the law (for example, retaining records for tax purposes).

• Consent – where you have given us clear consent to process your data for a specific purpose, such as marketing communications. You may withdraw your consent at any time.

We do not sell your personal data. We may share your information with trusted third parties where necessary to deliver our services or meet our obligations, including:

• Sub-contractors, tradespeople, suppliers and professional partners engaged to carry out or support your project.

• Professional advisers such as accountants, insurers and legal advisers.

• IT, payment and business service providers who process data on our behalf.

• Regulatory authorities, law enforcement or other bodies where we are required to do so by law.

Where we share your data with third parties who process it on our behalf, we put appropriate agreements in place to ensure your data is protected and only used for specified purposes.

We primarily store and process your personal data within the United Kingdom. Where any data is transferred outside the UK (for example, by a cloud service provider), we will ensure that appropriate safeguards are in place in accordance with UK data protection law.

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. Financial and project records are typically retained for a minimum of six years in line with legal and tax obligations. When your data is no longer required, we will securely delete or anonymise it.

Our website may use cookies and similar technologies to help the site function correctly and to understand how visitors use it. You can control or disable cookies through your browser settings. For more information, please see our Cookie Policy, or contact us using the details above.

Under the UK GDPR, you have the following rights in relation to your personal data:

• The right to be informed about how we use your data.

• The right of access to the personal data we hold about you.

• The right to rectification of inaccurate or incomplete data.

• The right to erasure of your data in certain circumstances.

• The right to restrict processing in certain circumstances.

• The right to data portability.

• The right to object to processing based on our legitimate interests or for direct marketing.

• Rights in relation to automated decision-making and profiling (we do not currently carry out such processing).

To exercise any of these rights, please contact us using the details in section 1. We will respond within one month. There is usually no charge for exercising your rights.

We take the security of your personal data seriously and have appropriate technical and organisational measures in place to protect it against unauthorised access, loss, misuse or alteration. While no method of transmission or storage is completely secure, we continually review our practices to keep your information safe.

Our website may contain links to third-party websites. This Privacy Policy does not apply to those sites, and we are not responsible for their content or privacy practices. We encourage you to read the privacy policy of any website you visit.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

If you have any concerns about how we handle your personal data, please contact us first so we can address them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Telephone: 0303 123 1113 Website: ico.org.uk