Skip to content

Serving London & surrounding areas

  • Mon–Fri 08:00–18:00
  • Fully insured
  • Fixed written quotes
  • Workmanship guarantee
  • Email us
London Carpenters And Joiners
07760 499 014 Get a quote

Privacy Policy

Last updated: 6 August 2026

This Privacy Policy explains how London Carpenters And Joiners (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you visit our website at londoncarpentersandjoiners.co.uk, contact us, request a quote, use our online tools (such as calculators), or otherwise interact with our carpentry and joinery services in the United Kingdom.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

The data controller responsible for your personal data is:

If any of the above details are incomplete on this page, please contact us using the details on our website and we will confirm our full registered particulars.

2. Scope of this policy

This policy covers personal data processed in connection with:

  • Browsing our website and related pages (including service, resource, and contact pages)
  • Enquiries, quote requests, bookings, and follow-up communications (email, phone, SMS, WhatsApp, or similar)
  • Online tools such as cost calculators, estimators, downloadable guides, and forms
  • Cookies, pixels, tags, and similar tracking technologies used for analytics, advertising, and site performance
  • Supplier, subcontractor, and business-contact relationships where relevant to delivering our services

It does not cover third-party websites we link to. Those sites have their own privacy notices.

3. Personal data we collect

3.1 Information you provide

  • Identity and contact data — name, email address, phone number, WhatsApp number, postal address, and property details
  • Project data — descriptions of work required, measurements, photos or files you upload, preferred dates, budget ranges, and property access notes
  • Communication data — messages sent via forms, email, phone, messaging apps, and records of our replies
  • Contract and payment data — invoices, deposit records, payment references, and related correspondence (payment card details are typically handled by your bank or payment provider, not stored by us in full)
  • Marketing preferences — whether you have opted in or out of receiving updates

3.2 Information collected automatically

  • Device and technical data — IP address, browser type and version, device type, operating system, screen resolution, language, and referring URL
  • Usage data — pages viewed, time on page, clicks, scroll depth, navigation paths, form interactions, and approximate location derived from IP
  • Cookie and tracking identifiers — cookie IDs, advertising IDs, pixel IDs, session IDs, and similar online identifiers placed by us or our technology partners
  • Security and diagnostics — server logs, error reports, and anti-spam signals from form protection (for example CSRF tokens and honeypot fields)

3.3 Information from other sources

  • Public directories or maps listings (for example Google Business Profile) where you interact with our listing
  • Social platforms if you message us or engage with our content there
  • Referral partners or previous customers who introduce you (with an appropriate basis for sharing)

4. How we use your data

We use personal data to:

  • Respond to enquiries and provide quotes, site surveys, and scheduled works
  • Perform contracts for carpentry, joinery, fitted furniture, and related services
  • Operate, secure, and improve our website, forms, and calculators
  • Measure website performance and understand how visitors use our content (analytics)
  • Deliver and measure advertising, remarketing, and conversion tracking (where enabled and consented)
  • Send service messages (quotes, appointments, invoices) and, where permitted, marketing updates
  • Detect fraud, spam, and abuse, and protect our business, staff, and customers
  • Meet legal, tax, accounting, and regulatory obligations
  • Establish, exercise, or defend legal claims

Depending on the activity, we rely on one or more of the following UK GDPR bases:

  • Contract — to take steps at your request before a contract, and to perform a contract with you
  • Legitimate interests — for example running a local trade business, improving our website, keeping basic security logs, and following up on incomplete quote requests in a proportionate way. We balance these interests against your rights
  • Consent — for non-essential cookies, analytics, advertising pixels, and most electronic marketing. You can withdraw consent at any time
  • Legal obligation — where we must keep records for tax, health and safety, or other legal requirements

6. Cookies and similar technologies

Our website uses cookies, local storage, pixels, tags, and similar technologies (“cookies” for short). Some are essential; others help us understand usage or support advertising.

6.1 Categories we may use

  • Strictly necessary — security, load balancing, consent storage, form submission, and core site features. These do not require consent under PECR
  • Preferences — remembering choices such as cookie consent decisions
  • Analytics / performance — measuring visits, traffic sources, and content engagement (for example Google Analytics 4)
  • Advertising / marketing — measuring campaigns, building audiences, and showing relevant ads (for example Meta Pixel, Google Ads tags)
  • Functional / experience — chat widgets, heatmaps, session replay, A/B testing, or similar tools when enabled

6.2 Consent

Where required, we will ask for your consent before setting non-essential cookies or loading non-essential tracking scripts. You can accept, reject, or manage categories via our cookie controls (when displayed) and through your browser settings. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

Essential cookies may still be set. Blocking some cookies may affect parts of the site (for example forms or preference storage).

6.3 How long cookies last

Cookies may be session-based (deleted when you close your browser) or persistent (retained for a set period defined by us or the provider). Exact durations vary by tool and configuration and may change when we add or update technologies.

7. Analytics, advertising and tracking

We may use industry-standard measurement and advertising technologies on this website. Configuration is managed through our site integrations and may change over time as we enable, disable, or replace tools. The categories below describe technologies we use or may use.

7.1 Google Analytics 4 (GA4)

When enabled, Google Analytics 4 collects information about how visitors use our site (pages viewed, events, approximate location, device/browser data, and identifiers). Google may process this data as a processor on our instructions and, in some cases, for its own purposes as described in Google’s privacy documentation. We may use IP anonymisation / redaction features and consent mode where available. GA4 data helps us improve content, services, and marketing effectiveness.

7.2 Google Tag Manager (GTM)

Google Tag Manager is a tag management system. It does not itself analyse your data in the same way as Analytics, but it can load other tags (analytics, ads, pixels, custom scripts) according to rules we configure — including consent rules. Tags deployed via GTM are covered by this policy and by the relevant provider’s terms.

7.3 Google Ads and conversion tracking

We may use Google Ads tags to measure when visitors take actions (for example submitting a quote form) after seeing or clicking our ads, and to create remarketing audiences. This may involve cookies and identifiers shared with Google.

7.4 Meta (Facebook / Instagram) Pixel

When enabled, the Meta Pixel may collect information about your visits and actions on our site to measure ad performance, optimise delivery, and build custom or lookalike audiences. Meta may combine this with other information it holds about you, subject to Meta’s policies and your platform settings.

7.5 Hotjar and similar behaviour tools

Tools such as Hotjar (when enabled) may record usage patterns, heatmaps, and sometimes session replays. We configure such tools to avoid capturing sensitive form fields where possible. These tools help us improve usability.

7.6 WhatsApp and messaging widgets

If a WhatsApp chat button is enabled on this site, it is a link that opens WhatsApp (or WhatsApp Web) with a pre-filled message. Interacting with it may share limited device/browser data with WhatsApp / Meta and starts a conversation on that platform, which is then also subject to that platform’s privacy policy.

7.7 Anti-spam and security tools

Quote and contact forms use CSRF tokens and a honeypot field to reduce automated spam. These checks run on our own site and do not load a third-party CAPTCHA service.

7.8 Custom scripts and future tracking

We may add further analytics, advertising, affiliate, CRM, call-tracking, email-marketing, or experience tools — including custom scripts in the site header or body — as our marketing and operations evolve. Where those tools set non-essential cookies or process personal data for analytics/advertising, we will treat them consistently with this policy: obtain consent where required, disclose them in cookie controls where practical, and use appropriate contracts with providers.

Examples of technologies we may introduce later include (without limitation): additional ad platform pixels, server-side tagging, conversion APIs, CRM tracking, call tracking, email platform pixels, and A/B testing frameworks.

7.9 Your controls

  • Use our on-site cookie / consent controls when available
  • Browser settings to block or delete cookies
  • Google ad settings and Analytics opt-out browser add-ons where offered by Google
  • Meta ad preference / privacy settings on your Meta accounts
  • Industry opt-out tools such as Your Online Choices (EU/UK) where applicable
  • Device-level controls for advertising personalisation

Note that opting out of advertising cookies does not stop ads entirely; it makes them less relevant. Strictly necessary processing may continue.

8. Who we share data with

We may share personal data with:

  • Service providers (processors) — website hosting, email/SMTP delivery, IT support, analytics, advertising platforms, tag managers, form and security providers, backup, and similar vendors who process data on our instructions
  • Trade partners — trusted subcontractors or specialists needed to deliver your project, limited to what they need to know
  • Professional advisers — accountants, insurers, or legal advisers where necessary
  • Authorities — where required by law, court order, or to protect rights and safety
  • Business transfers — if we restructure, sell, or merge the business, data may transfer under appropriate safeguards

We do not sell your personal data.

9. International transfers

Some providers (including Google, Meta, and other technology companies) may process data outside the United Kingdom. Where we transfer personal data internationally, we take steps required by UK law, such as relying on adequacy regulations or standard contractual clauses / the UK International Data Transfer Agreement (or Addendum), together with supplementary measures where appropriate.

10. How long we keep data

We keep personal data only as long as needed for the purposes above, including:

  • Enquiry data — typically up to 24 months after last meaningful contact, unless you become a customer or a longer period is justified
  • Customer / contract records — usually for the life of the relationship plus up to 6 years (or longer if required for tax, guarantee, or legal claims)
  • Analytics and advertising logs — according to the retention settings of each tool and our configuration (often measured in months)
  • Server and security logs — for a short operational period unless needed to investigate incidents

We may anonymise data and keep non-identifying statistics indefinitely.

11. Security

We use appropriate technical and organisational measures to protect personal data, such as access controls, encrypted connections (HTTPS) where supported by hosting, password protections for administrative systems, and limiting staff access to a need-to-know basis. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

12. Your rights

Under UK data protection law, you may have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure in certain circumstances
  • Restrict processing in certain circumstances
  • Object to processing based on legitimate interests, and to direct marketing
  • Data portability where processing is based on consent or contract and is automated
  • Withdraw consent where we rely on consent
  • Not be subject to solely automated decisions producing legal or similarly significant effects (we do not currently carry out such decision-making)

To exercise these rights, contact us using the details in section 15. We may need to verify your identity. You also have the right to complain to the Information Commissioner’s Office (ICO) — see section 15.

13. Children

Our website and services are aimed at adults arranging property works. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps.

14. Changes to this policy

We may update this Privacy Policy from time to time — for example when we add new tracking tools, change providers, or the law changes. The “Last updated” date at the top will change when we do. Continued use of the website after an update constitutes awareness of the revised policy; where changes are material and consent is required, we will seek fresh consent as needed.

15. Contact and complaints

For privacy questions or requests, contact:

You can also complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk/, telephone 0303 123 1113. We would appreciate the chance to resolve your concerns first.

Related: Terms & Conditions.