Andy Russell Bespoke Carpentry

Data controller

Andy Russell.

Andy Russell Bespoke Carpentry

If you have any questions, concerns or would like more information about anything mentioned in this privacy notice, please get in touch.

Personal information I process via my website

• Information you provide when you make an enquiry by email, online form or telephone
• Photographs of completed work which may include customers in the background
• Website usage data

Purposes and lawful bases for processing personal information

Answering your enquiries by email...

Where you provide an email address when making an enquiry via this website, in person or by telephone, I process your personal information on the lawful basis of consent only to answer your enquiry. I do not retain your personal information after your enquiry has been dealt with. I do not share your personal information with anyone else. If a third-party needs to be involved in answering an enquiry you will be asked to contact them directly yourself.

Photographs of completed work which may include customers in the background...

I take photographs of the completed work, which may sometimes include customers in the background. My lawful basis for doing this is legitimate interests. If, rarely, I wish to take photogrphs which include customers in the foreground, I will ask before using the photohgraphs on my website.

Website usage data...

I use google analytics to monitor and understand better how visitors use my website. I anonymise visitors' IP addresses and do not identify any visitor peronally. I retain website useage data for the minimum period possible. I use this information to help me improve the way my website serves people. my lawful basis for doing this is legitimate interests.

External websites

I may provide links to other websites. The privacy policy of each external website you visit will then apply. Please note that I have no control over the content of external websites.

Security

I have appropriate security measures in-place in order to protect your information while it is stored on my systems.

Retention and destruction of information

I retain your personal information only as long as reasonably necessary.

Information retention:

• Your email address and email is retained only until I've answered your enquiry
• Photographs on my website are removed and refreshed regularly
• Google analytics website useage data is retained for 14 months

Your rights

The right to be informed

This privacy statement aims to provide you with clear and concise information about what I do with your personal data.

The right of access

You have the right to access any personal information I hold about you.

Please contact me

I may ask for information to prove your identity before any personal information is released to you.

I don't charge a fee for providing you with information I hold about you.

I am required to provide you with the information within one month from the date of receipt of your request.

The right to rectification

You have the right to request rectification of any inaccurate or incomplete personal information which I hold. Please contact me. I am required to rectify the information within one month.

The right to erasure (to be forgotten)

I have rigorous arrangements for retention and destruction of information in place. You also have the right to request deletion of personal information

Please contact me

I may be required to retain some information to comply with a legal obligation or if the information will be required for the purposes of resolving a complaint.

The right to restrict processing

You have the right to request the restriction or suppression of your personal data. This is not an absolute right and only applies in certain circumstances.

When processing is restricted, I am permitted to store the personal data, but not use it.

You can make a request for restriction by contacting me.

I have one month to respond to a request.

The right to object

You have the right to object to my processing of your personal information at any time.

If you object I will stop processing your personal information as soon as I receive your written objection. Please contact me

The right to complain to the data protection regulator

I would appreciate the opportunity to resolve any complaints you have, however you also have the right to complain to the UK data protection regulator (the "ICO") about how I've used your personal data.

The ICO website also contains useful information about your privacy rights.