Privacy Policy

Last updated: 5 January 2026

This privacy policy explains how Cutwood Joinery (“we”, “us”, “our”) collects, uses, stores and protects personal data when you use our website, interact with our landing pages and forms, request a quote, book an appointment/call-back, or otherwise contact us.

We aim to be clear and practical. If anything here feels unclear, get in touch and we’ll explain it in plain English.

1) Who We Are (Data Controller) and How to Contact Us

For UK data protection law, Cutwood Joinery is the “data controller” for the personal data described in this policy (meaning we decide how and why it’s processed).

2) The Personal Data We Collect

Depending on how you interact with us, we may collect:

Identity & contact details

  • Name, email address, phone number, postcode/area and preferred contact method.

Project/enquiry details

  • What service you’re interested in (e.g., garage conversion, kitchen, renovation), property type, timescales, budget ranges (if provided), and any notes you submit.

Appointment and communication data

  • Call-back requests, appointment preferences, messages you send, and our replies.

  • If you call or message us, we may keep a record of that conversation (including call notes).

Website and device data

  • IP address, approximate location (e.g., city/region), device type, browser type, pages visited, time on site, clicks and form interactions.

Marketing and tracking data

  • Whether you came to us via an advert (e.g., Meta/Facebook/Instagram, Google) and how you interacted with it.

  • Cookie identifiers and similar online tracking data (see Cookies below).

Images or documents

  • If you send photos, plans or documents for quoting/survey purposes, we’ll process them.

3) How We Collect Your Data

We collect data when you:

  • Fill in a website/landing page form (e.g., survey forms, quote forms, call-back requests).

  • Book an appointment or request a call-back.

  • Contact us by phone, email, messaging apps, or social media.

  • Visit our website (through cookies and analytics tools).

  • Engage with our adverts (where platforms share aggregated or limited data with advertisers).

We may also receive data from:

  • Advertising and analytics providers (e.g., Meta, Google) in the form of reporting/attribution insights.

  • Referral partners (only where you’ve asked them to pass details to us).

4) Why We Use Your Data (Purposes)

We use personal data to:

Provide quotes and services

  • Assess your enquiry, arrange site visits, prepare designs/scopes, and provide quotes.

  • Manage projects, scheduling and customer communication.

Respond to questions and provide customer support

  • Reply to enquiries, handle issues, manage aftercare and warranties (where applicable).

Appointments and follow-up

  • Confirm appointments/call-backs, send reminders, and follow up on an enquiry you started.

Improve our website and marketing

  • Understand how people use our website and forms.

  • Measure advertising performance and improve targeting (where permitted).

Business operations and compliance

  • Keep records for accounting, tax, dispute handling, and legal obligations.

  • Protect our business from fraud, misuse, or security issues.

5) Our Legal Bases for Processing (UK GDPR)

We rely on the following lawful bases:

  • Contract (or steps before entering a contract): to provide quotes, surveys, and carry out work you request.

  • Legitimate interests: to run and grow our business, respond to enquiries, improve services, keep basic records, and prevent fraud—balanced against your privacy rights.

  • Consent: where required for certain cookies/tracking, and for some types of direct marketing (depending on the channel and circumstances).

  • Legal obligation: where we must keep records or comply with law (e.g., tax/accounting).

Where we rely on consent, you can withdraw it at any time (see Your Rights).

6) Direct Marketing (Calls, Emails, SMS)

We may contact you about your enquiry and relevant services.

  • If you request a quote, call-back, or appointment, we’ll use your details to respond and follow up.

  • For ongoing marketing (e.g., newsletters or promotional updates), we will only send these where permitted by law and you can opt out at any time.

Opt out anytime: use the unsubscribe option (where provided) or contact us via the links in Section 1.

7) Cookies, Analytics and Advertising Tools

We use cookies and similar technologies to make our site work, understand performance, and help with advertising.

Cookies may include:

  • Strictly necessary cookies (to make core site functions work).

  • Analytics cookies (to understand usage and improve).

  • Marketing cookies (to measure adverts and improve targeting).

We may use tools such as:

  • Google Analytics or similar site analytics.

  • Meta Pixel / Conversions API and similar advertising measurement tools.

  • Google Ads conversion tracking and similar tools.

These tools can collect information about your device and activity (like pages visited, form events, and approximate location). Where required, we will ask for your consent via a cookie banner/manager before setting non-essential cookies.

Managing cookies: You can control cookies through our cookie banner (where available) and your browser settings. Blocking some cookies may impact site functionality.

8) Who We Share Data With

We only share personal data where necessary for the purposes above, for example with:

  • Website/hosting providers (to keep the site and landing pages running).

  • CRM and form/automation providers (to capture enquiries, manage follow-up, appointments and reminders).

  • Email and communications providers (to send messages and notifications).

  • Analytics and advertising platforms (for measurement and reporting).

  • Professional advisers (e.g., accountants, insurers, legal advisers) where necessary.

  • Subcontractors/suppliers only when needed to deliver work (e.g., arranging specialist visits) and only with relevant details.

We require service providers to protect your data and only use it for the services they provide to us.

We do not share or sell your personal data.

9) International Transfers

Some of our service providers may store or process data outside the UK. When that happens, we ensure appropriate safeguards are used (such as UK adequacy regulations, International Data Transfer Agreements, or equivalent contractual protections).

10) How Long We Keep Your Data (Retention)

We keep personal data only for as long as necessary for the purpose it was collected, including legal, accounting, or reporting requirements.

Typical retention may include:

  • Enquiries with no work agreed: kept for a reasonable period to manage follow-ups and records.

  • Customers/projects: kept for the life of the project and for a period afterwards for aftercare, warranties, dispute handling and tax/accounting.

  • Marketing preferences: kept until you opt out or we no longer have a lawful basis to keep them.

  • Analytics data: kept according to the settings of the relevant analytics tool.

If you want our specific retention periods, contact us and we’ll explain what we apply in practice.

11) Data Security

We use appropriate technical and organisational measures to protect data, including access controls and secure systems. No system is 100% secure, but we take reasonable steps to prevent loss, misuse, unauthorised access, alteration or disclosure.

12) Your Rights

Under UK data protection law, you may have the right to:

  • Access your personal data (a “subject access request”).

  • Correct inaccurate or incomplete data.

  • Delete your data in certain situations.

  • Restrict processing in certain situations.

  • Object to processing based on legitimate interests or direct marketing.

  • Data portability (in certain situations).

  • Withdraw consent at any time where consent is the legal basis.

To exercise your rights, contact us using the links in Section 1. We may need to verify your identity before actioning requests.

13) Complaints

If you’re unhappy with how we handle your data, please contact us first so we can try to resolve it.

You also have the right to complain to the UK regulator:

  • Information Commissioner’s Office (ICO)

14) Third-Party Links

Our website may include links to third-party websites or social platforms. We’re not responsible for their privacy practices. Please review their policies before sharing personal data with them.

15) Children’s Data

Our services are not directed to children and we do not knowingly collect data from children.

16) Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top shows when changes were last made. If changes are significant, we’ll take reasonable steps to highlight them on the site.