Legal template

Privacy Policy

Example only: replace every bracketed field, confirm the actual suppliers and retention periods, and have the final policy reviewed for the client before launch.

Last updated: [DATE]

1. Who we are

Thornbury Joinery Ltd (“we”, “us”) is the controller of personal information collected through this website. Contact: hello@thornburyjoinery.co.uk, 0121 000 0000, [REGISTERED ADDRESS]. Company number: 00000000.

2. Information we collect

When you request a quote, we may collect your name, telephone number, email address, postcode, selected service, project details, contact preference and any image you choose to provide. Technical anti-spam services may also process limited request data.

3. Why we use it

We use enquiry information to respond, assess the work, arrange visits, prepare quotations and keep appropriate business records. The usual lawful bases are taking steps at your request before entering a contract, performing a contract and our legitimate interests in running and protecting the business.

4. Who receives it

Information may be processed by providers used to host the website, store enquiries, send email, prevent spam and manage customer relationships. In this template those may include Cloudflare, Resend and any configured CRM or automation provider. Replace this paragraph with the client’s actual supplier list.

5. International transfers

Some suppliers may process information outside the UK. Where that occurs, confirm and describe the safeguard relied on, such as UK adequacy regulations or approved contractual protections.

6. Retention

Website enquiries are retained for [INSERT PERIOD]. The example Cloudflare configuration stores lead records for up to 12 months unless changed. Images stored in optional R2 storage should have a documented deletion schedule.

7. Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict your information, object to certain use, or receive a portable copy. You may also withdraw consent where consent is the lawful basis.

8. Complaints

Contact us first so we can try to resolve a concern. You may also complain to the UK Information Commissioner’s Office.

9. Cookies and analytics

The unmodified template does not enable optional analytics. See our cookie information. Update both pages before enabling analytics, advertising tags, chat or embedded third-party tools.

10. Changes

We may update this policy to reflect changes to the website or how information is handled. The date above should show the latest version.