Privacy Policy

About this notice

M&S Carpentry is the public business name used on this website. Privacy questions can be sent to [email protected].

This is a draft UK GDPR-oriented notice. The controller details, lawful bases, retention period, service providers and any international-transfer arrangements still need to be confirmed by the owner or legal adviser.

Information the enquiry form is designed to request

The current enquiry form interface asks for a name, telephone number, email address, an optional postcode and a project message. Please do not include sensitive personal information.

Live submission and mailbox processing remain disabled pending owner approval. Preview environments may use test-only handling; no live delivery or production processing is claimed by this draft. If the workflow is enabled, the submitted details will be used to understand and respond to the enquiry, subject to the final confirmed notice.

How information may be used

• To respond to a project enquiry or request for information.
• To protect the website and enquiry service from misuse, spam and security incidents.
• To maintain records needed to operate and support the website, where this is confirmed as necessary.

The final lawful basis for each purpose is a review item. This draft does not assert a definitive lawful basis before that review is complete.

Analytics and consent

Google Analytics 4 is prepared for consent-first measurement through Google Tag Manager. The approved public configuration identifiers are held in the deployment configuration rather than this notice. They are not secrets. Analytics is intended to start only after an affirmative analytics choice; rejecting or withdrawing that choice prevents subsequent analytics dispatch in this website implementation.

Google Tag Manager is a delivery mechanism for the approved analytics configuration. Advertising tags, Meta Pixel and Google Ads conversion tracking are outside this approved scope and remain disabled. Visitors can reopen cookie preferences using the Cookie preferences control.

This draft does not assert a final lawful basis, controller wording, Google processing terms, international-transfer mechanism, retention setting or processor arrangement. The owner or legal adviser must confirm those facts before any production activation.

Recipients, storage and transfers

No final list of email, hosting, storage or other processing providers has been confirmed for the enquiry workflow. The owner must verify those details, retention arrangements and any international transfers before this notice is approved.

Facebook and Instagram API connections are under development and are not active. No live provider account connection or provider-data import is claimed by this draft.

Retention

No fixed retention period is stated here because the operational mailbox, storage and record-keeping process still require owner confirmation. The final notice should explain how long enquiry information is kept and the criteria used to decide that period.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to request access, correction, deletion, restriction of processing, objection or data portability. You can contact [email protected] to ask a question or make a request. We may need to verify your identity before responding.

You can also complain to the UK Information Commissioner's Office if you believe your information has been handled unlawfully. The final contact and controller details should be confirmed during legal review.