PRIVACY POLICY

This website is operated by [registered company name], [registered address], company number [number]. Data protection enquiries: [contact email].

When you use an enquiry form, the garden room finder or the consultation request form, we collect the name, email address, telephone number, postcode and project details you provide, along with your marketing consent choice and the date of submission.

We do not collect payment details through this website.

To respond to your enquiry, arrange and carry out consultations, prepare designs and proposals, and manage any project you go ahead with. Our lawful basis is generally the steps taken at your request prior to entering a contract, or our legitimate interest in responding to enquiries.

Marketing emails are sent only where you have given separate, optional consent. You can withdraw that consent at any time without affecting messages about your enquiry or project.

Enquiry data is stored in a private database that is not readable from the public website. Access is limited to authorised staff. Our hosting and database infrastructure is provided by our technology suppliers acting as processors under contract.

We do not sell your data or share it for third-party marketing.

Enquiry records are retained for [retention period] and project records for [retention period] to meet legal and accounting obligations, after which they are deleted or anonymised. Retention periods must be confirmed by the business.

You have the right to access, correct, erase, restrict or object to the processing of your personal data, and to data portability where applicable. To make a request, contact [contact email]; we will respond within one month.

You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) if you are unhappy with how we have handled your data.

Submissions are validated and stored server-side with access controls that prevent public access to customer records. Transport is encrypted. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

This policy will be updated when our processing changes. Last updated: [date].