Legal
Privacy Policy
How we collect, use and protect your personal information, and the choices and rights you have.
Last updated: 24 September 2026
This policy explains what personal information Woodcraft Shutters Limited collects through this website, why we collect it, who we share it with and the rights you have over it. It describes what this site actually does, so if anything is unclear, please ask us using the contact details at the end.
Who we are
The data controller is Woodcraft Shutters Limited ("we", "us"), Belfry House, Bell Lane, Hertford, SG14 1BP. We supply and fit made-to-measure shutters across Essex, Hertfordshire and London. You can contact us about anything in this policy at sales@woodcraftshutters.co.uk or on 020 7101 4698.
What information we collect
When you send an enquiry
Our enquiry form asks which shutter styles you are interested in, which rooms they are for, your timing, your name, email address and telephone number, your postcode or area, and any notes you choose to add. We use this only to reply to you, arrange a free home visit and prepare a quotation. If you contact us by phone, email or WhatsApp instead, we keep the details you give us for the same purpose.
When you leave a review
Our review form asks for a star rating, your written review, your name and, optionally, your role. We check every review before anything is published, and we only show the name you gave us.
Information collected automatically
When a page is requested, our hosting provider records technical information such as your IP address, browser type, the page requested and the time. We use it to keep the site working and secure. We also keep your IP address for a short time to limit repeated form submissions and prevent spam. If you accept analytics cookies, Google Analytics also collects information about how you use the site (see "Cookies" below).
What we do not collect
We do not take payments on this website and there are no visitor accounts, so we never collect card details or passwords from visitors. This website is not aimed at children and we do not knowingly collect information from anyone under 18.
How we use your information, and why
Under UK data protection law we must have a lawful reason (a "legal basis") for using your information. Ours are:
- To reply to your enquiry, arrange a home visit and prepare a quotation. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries.
- To supply and fit your shutters, keep records of your order and provide after-sales support. Legal basis: performing our contract with you.
- To keep accounts and meet tax and legal obligations. Legal basis: legal obligation.
- To publish a review you have chosen to send us. Legal basis: your consent.
- To keep the website secure and prevent spam and abuse. Legal basis: our legitimate interests.
- To understand how the website is used so we can improve it. Legal basis: your consent. Analytics cookies are off unless you accept them.
When you send an enquiry we email you a confirmation. That is a service message about your request, not marketing. We do not send marketing emails or texts unless you have separately asked us to, and if that ever changes we will ask for your consent first and include an easy way to unsubscribe in every message.
We do not sell your personal information, and we do not use it for automated decision-making or profiling.
Cookies and similar technologies
When you first visit, a banner lets you accept or decline analytics cookies, or choose your preferences. Declining is as easy as accepting and the site works fully either way. You can change your choice at any time using the "Cookie preferences" link at the very bottom of every page.
- Strictly necessary: we store your cookie choice in your browser's local storage (under the name cookie-consent) so we do not keep asking. This is needed for the site to remember your preference and does not need consent.
- Analytics (only if you accept): Google Analytics 4 sets the cookies _ga and _ga_ followed by our measurement ID, which last up to two years, to count visits and show which pages are popular. We use the results in aggregate and do not use them to identify you.
We do not use advertising or tracking cookies and we do not use social media tracking pixels. If you decline, or later withdraw your consent, analytics stops straight away and we delete the Google Analytics cookies from your browser. The website's fonts are hosted on our own servers, so your browser does not contact Google Fonts. You can also block or delete cookies in your browser settings without affecting how the site works.
Who we share your information with
We use a small number of trusted service providers to run this website and our business. They handle personal information only on our instructions and for the purposes described here:
- Supabase: stores the website's database (including enquiries and reviews) and images.
- Vercel: hosts and delivers the website, and its servers process technical request data such as IP addresses.
- Resend: sends the confirmation email you receive and the notification we receive when you send an enquiry, from servers in Ireland (EU).
- Google Analytics: aggregated visitor statistics, only if you accept analytics cookies.
- Our email hosting and email security providers: our business mailboxes are hosted with them, so emails you send us are stored there.
- Our accountants and professional advisers, and public authorities where the law requires us to share information.
Some of these providers may process information outside the UK and the European Economic Area, for example in the United States. Where that happens it is under safeguards recognised by UK data protection law, such as the UK International Data Transfer Addendum, Standard Contractual Clauses or the UK-US data bridge. Links from this website to Facebook, Instagram and WhatsApp take you to services with their own privacy policies.
How long we keep your information
- Enquiries that do not lead to an order: 12 months after our last contact with you, then deleted. That is long enough to follow up a quotation, and no longer than we need.
- Customer and order records: 6 years after the order is completed. Accounting and tax law requires us to keep financial records for at least this long, and it is also the period in which a customer can bring a legal claim, so we keep records of what was agreed and fitted.
- Published reviews: for as long as they appear on the site. You can ask us to remove yours at any time.
- Copies of emails sent by the website (such as your enquiry confirmation): 12 months.
- Website server logs and spam-prevention records: a short period only, normally no more than 30 days.
- Analytics data: Google Analytics keeps aggregated data for no more than 14 months.
When a retention period ends we delete the information or anonymise it so it can no longer identify you, unless the law requires us to keep it longer (for example because of a legal claim or a request from a public authority).
How we keep your information secure
The website is served over HTTPS. Personal information is held in access-controlled systems, and the administration area is protected by multi-factor authentication so only authorised people can see enquiries. No system is perfectly secure, but we take reasonable steps to protect your information. If a breach ever puts your rights at risk we will tell you and the Information Commissioner's Office as the law requires.
Your rights
You have the right to:
- Ask for a copy of the personal information we hold about you.
- Have inaccurate or incomplete information corrected.
- Have your information erased, in some circumstances.
- Ask us to restrict how we use your information, in some circumstances.
- Object to us using your information for our legitimate interests.
- Receive the information you gave us in a portable format, where it applies.
- Withdraw your consent at any time where we rely on it. You can do this with the "Cookie preferences" link or by emailing us, and it does not affect anything done before you withdrew it.
- Not be subject to a decision made solely by automated means. We do not make any such decisions.
To use any of these rights, email sales@woodcraftshutters.co.uk or write to us at the address above. We may need to confirm your identity first. We will reply within one month, and there is no charge unless a request is clearly unfounded or excessive.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time, for example if we add a new service. The date at the top shows when it was last changed, and we will highlight significant changes on this page.
Contact us
Woodcraft Shutters Limited, Belfry House, Bell Lane, Hertford, SG14 1BP. Email sales@woodcraftshutters.co.uk. Phone 020 7101 4698.
