Legal

Privacy
policy.

How Kingsley Woodwork collects, uses, and protects your personal data. We keep this straightforward because our data practices are straightforward.

Business Kingsley Woodwork
Location Rugeley, Staffordshire, UK
Legislation UK GDPR & Data Protection Act 2018
Last updated January 2025
Plain English summary

We only collect data you give us directly. We don't sell it, share it with third parties for marketing, or use it for anything other than responding to your enquiry and understanding how people use our website. That's it.

01

Who we are

Kingsley Woodwork is a sole trader bespoke furniture business based in Rugeley, Staffordshire, UK. We design and make solid hardwood furniture to order for private customers and interior designers across the UK.

For the purposes of UK data protection law, Kingsley Woodwork is the data controller for personal data collected through this website and our enquiry process.

Contact: hello@kingsleywoodwork.co.uk

02

What we collect

We collect the information you give us when you enquire or commission a piece. The enquiry form also uses browser draft storage and a third-party spam check, as described below.

Data How collected Why
Name Enquiry form To address you personally when we respond
Email address Enquiry form To reply to your enquiry
Phone number Enquiry form (optional) To contact you by phone if you prefer
Project details Enquiry form To understand your brief and respond appropriately

We do not collect payment card details. All payments are handled offline via bank transfer — no financial data passes through this website.

We do not collect any special category data (health, ethnicity, political views, etc.) and have no reason to do so.

03

How we use your data

We use your personal data only for the purpose it was collected:

  • To respond to your enquiry and discuss your project
  • To prepare and send a quote or proposal if requested
  • To communicate about an active order — confirming details, timeline updates, delivery arrangements
  • To keep records of completed commissions for warranty and legal purposes
We do not: send marketing emails, share your data with third parties for marketing, sell your data, use your data for any automated decision-making, or contact you for any purpose unrelated to your enquiry or order.
05

Third parties

Your enquiry data passes through the following third-party services to reach us:

Service Purpose Data shared
ShopFlow (hosted on Supabase) Receives enquiries for the workshop Contact details, project information and CAPTCHA response
Google reCAPTCHA Helps protect the enquiry form from automated submissions Browser and interaction information used by the CAPTCHA service
EmailJS Delivers your enquiry form submission to our inbox Name, email, phone, project details

EmailJS processes data as a data processor on our behalf. They do not use your data for their own purposes. Their privacy policy is available at emailjs.com.

Google's privacy policy is available at policies.google.com. This build does not include Google Analytics tracking code.

We do not share your personal data with any other third parties. We do not use advertising networks, social media pixels, affiliate tracking, or any other data-sharing services.
06

Analytics & cookies

The enquiry form saves a draft on your browser using local storage. This includes the contact details and project information you enter. Drafts expire 24 hours after the last saved change and are removed when the form next opens after expiry. You can remove a draft immediately using “Clear details and start again” on the first step. A confirmed submission also removes the draft. On a shared device, clear your details before leaving.

The enquiry form loads Google reCAPTCHA to help prevent spam. Third-party services may use browser storage or cookies as part of their operation. You can manage browser storage through your browser settings; blocking it may affect third-party features, but you can still contact us by email.

07

How long we keep your data

Data Retention period Reason
Enquiry data (no order placed) 12 months In case you return to discuss the project further
Order and correspondence records 7 years HMRC requirement for business financial records
Enquiry draft on your browser 24 hours after the last saved change Removed when the form next opens after expiry, when you clear it, or after confirmed submission

After the applicable retention period, personal data is deleted from our inbox and any other records we hold. We do not archive data beyond what is required for legal and business purposes.

08

Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access

You can request a copy of any personal data we hold about you.

Right to rectification

You can ask us to correct inaccurate or incomplete data.

Right to erasure

You can ask us to delete your data, subject to any legal retention obligations.

Right to restriction

You can ask us to limit how we use your data while a complaint is being resolved.

Right to object

You can object to processing based on legitimate interests.

Right to portability

You can request your data in a portable, machine-readable format.

To exercise any of these rights, email us at hello@kingsleywoodwork.co.uk. We will respond within one calendar month. There is no charge for making a request.

We will never make exercising your rights difficult or bureaucratic. If you want us to delete your data or stop contacting you, just ask — we'll do it.
09

Contact & complaints

If you have any questions about this privacy policy or how we handle your data, please get in touch:

If you are unhappy with how we have handled your personal data and we have not been able to resolve your concern, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

We would always prefer to resolve any concerns directly before a formal complaint is made — please contact us first and we will do our best to help.

This policy was last reviewed in January 2025. We will update it if our data practices change and will note the revision date at the top of this page.