Introduction

We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This policy outlines how we collect, process, store, and share your information, and explains your rights regarding your data. We maintain robust data protection practices to ensure confidentiality, integrity, and availability of all personal information.

Information We Collect
We collect personal data that is necessary for our operations, including contact details (name, address, email, phone), and payment details. We may also collect limited technical data (e.g., IP address, browser type) when you visit our website or interact with our online services.

How We Collect Information

Information is obtained directly from you when you inquire about our services, complete forms (online or paper), submit applications or quotes, and during meetings or site visits. We also gather certain technical data automatically through your browser or device when you access our website.

How We Store Information
All personal data is stored is stored on local drives that are protected by strong passwords. Electronic records are protected by password‐protected systems with role‐based access controls, and paper records are kept in locked cabinets within our office. We conduct regular reviews to ensure data accuracy and to remove outdated or irrelevant information.

Cookies and Tracking Tools
Our website uses cookies and similar tracking technologies to improve user experience, analyse site traffic, and support marketing activities. You can control or disable cookies via your browser settings; however, this may affect site functionality. We do not use tracking tools to profile users for decision-making without your explicit consent.

How We Use Your Information
We process your personal data for legitimate business purposes: to respond to enquiries, provide quotations, deliver services, manage health and safety compliance, process payments, and fulfil contractual obligations.

Consent and Withdrawal
By providing your information, you consent to its use as described in this policy. You have the right to withdraw consent at any time by contacting us (see “Contact Us” below). Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Data Subject Access and Rights
Under the General Data Protection Regulations, you have rights including access to your personal data, correction of inaccuracies, restriction of processing, data portability, objection to processing, and the right to erasure (“right to be forgotten”). To exercise any of these rights, please submit a written request to our office.
Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected, or to comply with legal and regulatory requirements. Retention periods vary depending on the type of data and legal obligations but generally do not exceed seven years for financial records and personnel files.

Data Security
We employ technical and organisational measures to safeguard your data against unauthorised access, alteration, disclosure, or destruction. Measures include passwords, encryption, firewalls, anti-virus software, secure backups, access controls, staff training, and regular security audits.

Third-Party Sharing
We do not sell or rent your personal data. We may share information with third-party service providers (e.g., payroll processors, IT support, marketing platforms) strictly under contract and only to the extent necessary to deliver our services. All third parties are required to maintain data confidentiality and comply with GDPR.

Contact Us
If you have any questions or wish to exercise your data protection rights, please contact: Steve Miller Joinery in Cornwall Unit 4, Retanna, Edgcumbe. Cornwall. TR10 9EH
Phone: 07749 893618