1. Introduction

Welcome to Alzate Carpentry. We are a London-based company specializing in bespoke carpentry and joinery, dedicated to “building dreams — one piece at a time.” We value the trust you place in us, not only with your home and design ideas but also with your personal information. This privacy policy outlines our commitment to protecting your data and explains how we collect, use, and safeguard it when you use our services or interact with our website (alzatecarpentry.co.uk).
We handle all personal data in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 [1].

2. Who We Are (Data Controller)

For the purpose of UK data protection law, the data controller is Alzate Carpentry.
Our primary contact for any data protection inquiries is:
•Email: (recommended)
•Phone: 07578 875 078 (Carmen)
 

3. The Information We Collect

We collect information that is essential for designing and creating bespoke carpentry projects and providing a seamless client experience. The data we collect includes personal details, project specifications, and technical information necessary for our craftsmanship.
How We Collect Data
Types of Data Collected
When you contact us
Name, email address, phone number, and details about your project ideas.
During a site visit or consultation
Your site address, project specifications, measurements, design preferences, and architectural plans.
During project execution
Property access details, payment information (billing address, transaction history), and photographs of the work in progress.
For our Gallery and Testimonials
High-resolution photographs of completed projects and your name/feedback (only with your explicit, separate consent).
When you use our website
Technical data such as your IP address and browsing behaviour, collected via our cookie consent banner.

4. How We Use Your Information

Your personal data is used for specific and transparent purposes that directly relate to our bespoke carpentry services. We provide estimates and develop custom designs based on your requirements, order materials tailored to your project, and carry out the commissioned carpentry and joinery work. Communication with you includes responding to inquiries, discussing project details, providing progress updates, and sending invoices.
For our portfolio, we showcase our craftsmanship in our website gallery and on social media, but we will only use images of your project with your explicit, written consent. We maintain accurate records of transactions for tax and accounting purposes as required by UK law [2]. Additionally, we analyze the types of projects we undertake to understand client needs better, helping us refine our craft and business operations.

5. Our Lawful Basis for Processing Your Data

We process your data based on several lawful grounds under UK GDPR [3]. Performance of a Contract is our primary basis for processing data related to the carpentry work you have hired us to do, from the initial design to the final installation and payment. We rely on your explicit Consent for specific actions, such as sending marketing communications or using images of your completed project in our public gallery, and you can withdraw this consent at any time.
We have a Legal Obligation to process and retain certain information, particularly financial records for HMRC tax purposes. We also rely on Legitimate Interests to manage our business effectively, such as responding to your inquiries and analyzing our business performance, always ensuring our interests do not override your rights.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations [4]. Project files including designs, plans, and photos are retained for up to 7 years after project completion to address any future queries or warranty claims. Financial records such as invoices are kept for a minimum of 6 years plus the current financial year, as required by UK tax law. If you contact us but do not proceed with a service, we will securely delete your personal data after 12 months.

7. Data Sharing and Third Parties

We do not sell your personal data. We only share it with trusted third parties when essential for our services. This includes accounting services to manage our financial records, material suppliers if materials need to be delivered directly to your site, and our website hosting provider who may have incidental access to data but is bound by strict confidentiality. If a specialist trade is required for a portion of the project, we ensure any sub-contractors adhere to our data protection standards.

8. Cookies

Our website uses different types of cookies including Necessary, Functional, Analytics, Performance, and Advertisement cookies to enhance your experience. You have full control to accept or reject non-essential cookies via the detailed consent banner that appears when you visit our site.

9. Your Data Protection Rights

Under UK GDPR, you have comprehensive rights regarding your personal data [5]. These include the right to be informed about how we use your data, the right of access to request a copy of the data we hold about you, and the right to rectification to have any inaccurate data corrected. You also have the right to erasure to ask us to delete your data (subject to our legal obligations), the right to restrict processing to limit how we use your data, and the right to data portability to receive your data in a common format.
Additionally, you have the right to object to us processing your data based on our legitimate interests, and rights in relation to automated decision making and profiling. To exercise any of these rights, please contact us at .

10. Data Security

We are committed to ensuring your data is secure. We have implemented appropriate technical and organizational measures to protect your personal information from unauthorized access, loss, or disclosure. This includes secure digital storage for project files and client communications, reflecting our professional approach to both craftsmanship and data protection.

11. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on our website. For significant changes, we will notify our clients directly where appropriate.

12. How to Complain

If you have any concerns about how we handle your data, please contact us first so we can try to resolve the issue. If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO).
•Information Commissioner’s Office (ICO)
•Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
•Helpline: 0303 123 1113
•Website: