We care about your privacy

What we collect and why

Each item below lists the information involved, how we use it, our lawful basis for using it, and who else may see it.

Your name

What it is: Your first and last name.

How we use it: To reply to your enquiry, prepare your quote and arrange and carry out the work.

Lawful basis: Steps you ask us to take before a contract, and the contract itself once you go ahead (Article 6(1)(b) UK GDPR).

Who may see it: Our email provider, SMTP2GO (which sends the emails from our quote form) and, where your job needs it, the suppliers and trades who help us complete it.

Contact details

What it is: Your email address and phone number.

How we use it: To reply to you, send your quote and a confirmation of your request, and keep in touch about your job.

Lawful basis: Steps you ask us to take before a contract, and the contract itself (Article 6(1)(b)).

Who may see it: Our email provider and SMTP2GO. If you contact us on WhatsApp, Facebook or Instagram, Meta also processes your messages under its own privacy policy.

Your address and job details

What it is: Your postcode or address, what you would like done, and any photos or measurements you send us.

How we use it: To check we cover your area, price the work accurately, and plan and carry out the job.

Lawful basis: Steps you ask us to take before a contract, and the contract itself (Article 6(1)(b)).

Who may see it: Our email provider, SMTP2GO and, where your job needs it, the suppliers and trades who help us complete it.

Messages and calls

What it is: What you tell us in emails, calls, texts and WhatsApp, Facebook or Instagram messages, and when.

How we use it: To answer your questions and keep a record of what we have agreed.

Lawful basis: Our legitimate interests in answering and following up enquiries (Article 6(1)(f)), and the contract once you go ahead (Article 6(1)(b)).

Who may see it: Our email provider and, for messages sent through WhatsApp, Facebook or Instagram, Meta.

Invoices and payments

What it is: If you go ahead with a job: your billing name and address, and a record of what you have paid.

How we use it: To invoice you and keep the records the law requires.

Lawful basis: The contract (Article 6(1)(b)) and our legal obligation to keep financial records (Article 6(1)(c)).

Who may see it: Our accountant, and HMRC where the law requires it.

Technical information

What it is: Your IP address and basic details of your browser and device, recorded when you visit the site or send the quote form.

How we use it: To keep the website and the quote form running, secure and free of spam.

Lawful basis: Our legitimate interests in keeping the website secure (Article 6(1)(f)).

Who may see it: Cloudflare, which hosts the website and the quote form and runs Cloudflare Turnstile.

How you use the website

What it is: The pages you view, how long you stay, how you arrived and your device type, measured with cookies.

How we use it: To see which pages help people and improve the website.

Lawful basis: Your consent (Article 6(1)(a)). It is only collected if you accept analytics cookies, and you can change your mind at any time.

Who may see it: Google, which runs Google Analytics and Google Tag Manager for us.

Who we share it with

We do not sell personal information, and we never share it with anyone for their own marketing. We share it only with the people and services below, and each gets only what it needs:

• Cloudflare, which hosts this website and the service that receives the quote form, protects them against attacks, and checks the form for spam with Cloudflare Turnstile
• Google, for Google Analytics and Google Tag Manager, only if you accept analytics cookies
• SMTP2GO, which delivers the emails our quote form sends: your request to us, and the confirmation to you
• Our email provider, which holds the contact@nothjoinery.co.uk mailbox
• Suppliers and trades we work with, such as plasterers and electricians, when your job needs them, and only the details they need to do their part
• Meta, when you message us on WhatsApp, Facebook or Instagram
• Our accountant and, where the law requires it, HMRC

The quote form

When you send the quote form, what you type (your name, email, phone number, postcode, message and your consent) goes to a small service we run on Cloudflare. It emails your request to us, and a copy to you as confirmation, through SMTP2GO. The form does not keep its own copy: your request lives only in our email, as we do not use a separate customer database. Cloudflare keeps short technical logs of each request, which are deleted automatically.

The form is also protected by Cloudflare Turnstile, which checks that a real person, not an automated script, is sending it. To do this, Cloudflare looks at signals such as your IP address and browser, acting on our behalf. You can read more in the Cloudflare privacy policy.

Cookies

This website uses a few cookies that it needs to work and stay secure. With your consent, it also uses Google Analytics cookies to measure how the site is used. Analytics only runs if you accept it in the cookie banner, and you can change your choice at any time. For the full list, see the cookie policy.

Analytics

We use Google Analytics, loaded through Google Tag Manager, to understand how visitors use this website, such as which pages are visited and for how long. It only runs if you accept analytics cookies, and Google acts as our processor. You can opt out of Google Analytics on every website with Google's opt-out browser add-on, or by declining analytics cookies here.

How long we keep it

We keep enquiry details for as long as we need them to deal with your enquiry, and delete them within 12 months if the job does not go ahead. If you go ahead, we keep records of the job, invoices and related correspondence for up to six years after the end of the tax year they relate to, in line with our legal and accounting obligations. Analytics data is kept according to our Google Analytics settings and is never linked to your enquiry. Your cookie choice is kept for six months, then we ask again.

Keeping it safe

All traffic between your browser and this website is encrypted. The site sits behind Cloudflare, which filters malicious traffic, and only the people who need your information can see it. No method of sending or storing information is completely secure, but we take reasonable steps to protect yours.

Children

Our services are for adults, and we do not knowingly collect personal information from anyone under 18. If you think a child has sent us their details, please contact us and we will delete them.

Automated decision-making

We do not use your information for automated decision-making or profiling. A person reads every enquiry and makes every decision about your job.

Your rights

Under the UK GDPR you have the right to:

• Be told how your information is used, which this policy does
• Ask for a copy of the information we hold about you
• Ask us to correct information that is wrong or incomplete
• Ask us to delete your information in certain circumstances
• Ask us to limit how we use your information
• Receive your information in a commonly used format
• Object to us using your information on the basis of our legitimate interests
• Withdraw your consent at any time, where we rely on it

To use any of these rights, contact us using the details below. We may need to check your identity first. We will reply within one month, and there is normally no fee.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk or on 0303 123 1113.

Where your information is processed

We are based in Scotland, and your information is mainly processed in the United Kingdom. Some of the services we use, such as Cloudflare, Google, SMTP2GO and Meta, may process it in other countries. Where that happens, the transfer is protected by UK adequacy regulations, the UK International Data Transfer Agreement or equivalent safeguards.

Other websites

This website links to other sites, such as WhatsApp, Facebook, Instagram and Google. We are not responsible for how those sites handle your information, and this policy does not apply to them.

Contact us

If you have any questions about this policy or how we handle your information, email contact@nothjoinery.co.uk or call 07435 801379.