Privacy Policy

Last updated: 20 October 2026

1. Introduction

G.S Chandler Joinery (“we”, “us” or “our”) operates https://gschandlerjoinery.co.uk. We provide bespoke joinery services and operate an online shop selling hardware, fittings, wood-care products and related accessories.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, place an order, contact us about a product or service, or enquire about a bespoke joinery commission.

We handle personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Depending on how you interact with us, we may collect the following information:

Contact information

• Name

• Email address

• Telephone number

• Billing and delivery address

Order and payment information

• Products purchased, order details and transaction records

• Billing information required to process your order

• Payment status and transaction references provided by our payment providers

Payment card details are processed by the relevant payment provider or checkout service. We do not intentionally store full payment card details on our own servers.

Bespoke joinery enquiries

• Information you provide about your project, measurements, requirements and preferred specifications

• Correspondence, quotations and agreements relating to your commission

Website and technical information

• IP address, browser and device information, pages visited and interactions with our website, where collected

• Cookie and similar technology data, subject to your cookie preferences and applicable requirements

We may receive additional information when you voluntarily provide it through a contact form, email or other communication.

3. How We Use Your Information

We use personal information for purposes including:

• Processing, confirming and delivering online orders

• Responding to product questions, customer enquiries and requests for support

• Preparing quotations and managing bespoke joinery commissions

• Arranging deliveries, returns and refunds

• Maintaining order, accounting and transaction records

• Operating, protecting and improving our website and services

• Detecting and preventing fraud, misuse and security issues

• Meeting applicable legal and regulatory obligations

• Sending marketing communications where we have the required consent or another lawful basis

You can unsubscribe from marketing emails using the unsubscribe link provided or by contacting us.

4. Our Lawful Bases for Processing

Under UK data protection law, we rely on one or more of the following lawful bases, depending on the purpose:

Contract: To process orders, provide requested services, prepare or administer relevant agreements, and communicate with you about purchases or commissions.

Legal obligation: To maintain records and comply with applicable tax, accounting and other legal requirements.

Legitimate interests: To manage and improve our business, respond to enquiries, maintain website security and protect against fraud, where our interests do not override your rights and freedoms.

Consent: Where required, including for certain marketing communications and non-essential cookies or similar technologies. You can withdraw consent at any time, without affecting processing already carried out lawfully.

5. How We Share Information

We share personal information only where necessary for the purposes described in this policy, including with:

• Shopify: Our ecommerce platform and checkout services, where applicable, to operate the online shop and process orders.

• Payment providers: Such as Shopify Payments and PayPal, where enabled and used, to process transactions.

• Delivery providers: Such as Royal Mail, DPD or FedEx, where used for an order, to arrange delivery.

• Professional advisers and service providers: Where necessary for accounting, technical support, website operations or other legitimate business functions.

• Public authorities or other parties: Where disclosure is required by law or reasonably necessary to establish, exercise or defend legal claims.

These providers may process information under their own privacy terms and applicable data protection obligations.

We do not sell personal information to third parties.

The providers listed above should be understood as examples of the services we may use. We will retain or name specific providers only where they reflect our actual business arrangements.

6. International Data Transfers

Some service providers may process personal information outside the United Kingdom. Where personal information is transferred internationally, we will take steps required by applicable data protection law, which may include relying on an adequacy regulation or decision, appropriate safeguards or another lawful transfer mechanism.

For information about a particular provider's international data practices, please refer to that provider's privacy documentation.

7. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing services, meeting legal obligations and resolving disputes.

Retention periods depend on the type of information and the reason it is held. For example:

• Order and accounting records: Retained for the period required by applicable tax, accounting and other legal requirements.

• Customer enquiries and correspondence: Retained for as long as reasonably necessary to respond, maintain relevant business records and resolve any follow-up issues.

• Bespoke commission records: Retained as necessary to manage the project, document agreed specifications and handle relevant contractual, warranty or dispute matters.

• Marketing preferences: Retained as needed to manage subscriptions and respect requests to stop marketing communications.

• Technical and cookie data: Retained according to the relevant system settings, cookie lifetimes and applicable requirements.

When information is no longer needed, we will take appropriate steps to delete it or anonymise it, subject to any legal requirement to retain it.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential website functions, remember preferences, process shopping-cart activity and understand website usage.

Where required by law, we will request your consent before placing non-essential cookies or using similar technologies. You should be able to manage your preferences through the cookie controls provided on the website, where available.

You can also manage cookies through your browser settings. Blocking certain cookies may affect some website functions.

The cookies and technologies used depend on our website configuration and any analytics, advertising or other services enabled. Please consult the website's cookie controls for the choices currently available.

9. Your Data Protection Rights

Subject to applicable law and certain exceptions, you may have the right to:

• Request access to the personal information we hold about you

• Ask us to correct inaccurate or incomplete information

• Request deletion of your personal information

• Request restriction of certain processing

• Object to processing carried out on the basis of legitimate interests

• Request a copy of certain information in a portable format

• Withdraw consent where processing relies on consent

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you believe your personal information has been handled unlawfully.

To exercise your rights, contact us using the details in the Contact section below. We may need to verify your identity before responding.

More information is available at https://ico.org.uk/.

10. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

However, no method of transmitting or storing information can be guaranteed to be completely secure.

11. Children's Privacy

Our website and online shop are not intended to collect personal information directly from children. If you believe a child has provided personal information to us inappropriately, please contact us so we can review the situation and take appropriate action.

12. Changes to This Privacy Policy

We may update this Privacy Policy when our business practices, website services or legal obligations change. The latest version will be published on this page with an updated revision date.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact:

G.S Chandler Joinery

Email: info@gschandlerjoinery.co.uk

Address:

Unit 3, Crawfold Business Park
Balls Cross, Petworth
GU28 9JT
United Kingdom