Privacy Policy
Privacy Policy
O.F Carpentry and Building — Last updated: May 2026
1. Who we are
O.F Carpentry and Building ("we", "our", "us") is a carpentry and building business operating in Warwickshire, Worcestershire, and the Cotswolds. We are the data controller for any personal information you provide to us.
Business name: O.F Carpentry and Building
Email: of.carpentryandbuilding@gmail.com
Phone: 07495 962094
Website: www.ofcarpentryandbuilding.co.uk
2. What information we collect
We collect only the information you choose to provide when contacting us through our website, phone, or email:
- Your full name
- Your email address
- Your phone number
- Your project address and details (when requesting a quote or discussing work)
- Your IP address (automatically logged when you submit our contact form, used only for rate limiting and anti-spam protection)
3. How we collect your information
We collect information through:
- Contact form: When you fill in our website contact form, your data is sent directly to us via email. The form submission is processed server-side and is protected by anti-spam measures including time-gated tokens, honeypot fields, and IP-based rate limiting (maximum 2 submissions per IP address per hour, and 2 per email address per 24 hours).
- Phone calls and emails: When you contact us directly, we keep basic records of our communications for project management purposes.
- Social media: If you contact us via Instagram or TikTok direct message, we retain those communications within those platforms.
4. How we use your information
We use your personal information solely for the following purposes:
- To respond to your enquiries and provide quotes for building work
- To communicate with you about ongoing or potential projects
- To maintain accurate business and accounting records (e.g. invoices, receipts, warranties)
- To protect our website against spam and abuse (IP logging for rate limiting)
We do not use your information for marketing, advertising, or profiling purposes. We do not sell, rent, trade, or share your personal information with any third parties for their own marketing purposes.
5. Legal basis for processing
Under UK GDPR, we process your personal data on the following bases:
- Consent (Article 6(1)(a)): When you submit our contact form, you explicitly consent to us processing your name, email address, phone number, and project details for the purpose of responding to your enquiry.
- Legitimate interests (Article 6(1)(f)): We retain records of quotes provided and projects completed for warranty purposes, legal obligations (e.g. building regulations compliance), and tax record-keeping.
- Legal obligation (Article 6(1)(c)): We are required by UK law to retain financial records (invoices, receipts) for a minimum of 6 years for HMRC purposes.
6. Data retention
We retain your personal data only for as long as necessary:
- Enquiry data (no project): 12 months after your last contact
- Project records (quotes, contracts, communications): 6 years after project completion, as required by UK tax law
- Invoicing and financial records: 6 years after the end of the relevant tax year (HMRC requirement)
- IP rate-limiting logs: 1 hour (automatically deleted)
- Email rate-limiting logs: 24 hours (automatically deleted)
7. Your rights under UK GDPR
You have the following rights regarding your personal data:
- Right of access: You can request a copy of the personal data we hold about you
- Right to rectification: You can ask us to correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten"): You can request deletion of your personal data, subject to our legal retention obligations (e.g. tax records)
- Right to restriction of processing: You can ask us to limit how we use your data
- Right to data portability: You can request a copy of your data in a machine-readable format
- Right to object: You can object to our processing of your data where we rely on legitimate interests
To exercise any of these rights, contact us at of.carpentryandbuilding@gmail.com. We will respond within 30 days as required by UK law. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.
8. Cookies and tracking
This website does not use tracking cookies. We do not use Google Analytics, Facebook Pixel, or any analytics or advertising services that set cookies or track your browsing behaviour.
Third-party embeds: Our website embeds content from the following third-party services, which may set their own cookies when you interact with them:
We do not control what cookies these third-party services set. If you do not wish to be tracked by these services, you should not interact with the embedded content (e.g. do not click play on videos).
9. Third-party data sharing
We do not sell, give away, or lend your personal information to anyone. The only circumstances in which your data may be shared are:
- Email delivery: When you submit our contact form, your message is sent to us via standard email transmission. Emails are processed through our hosting provider's (Fasthosts) mail servers.
- Legal requirement: If required by law or a regulatory authority (e.g. HMRC, law enforcement), we may be obliged to share relevant records.
10. Data security
We take appropriate technical and organisational measures to protect your personal data:
- Our website uses HTTPS encryption for all data transmission
- Contact form submissions are validated server-side and protected by rate limiting, honeypot fields, and time-gated tokens to prevent automated abuse
- Email communications are stored in password-protected accounts with two-factor authentication enabled where supported
- Physical records (invoices, contracts) are stored securely and accessed only by the business owner
11. Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
12. Contact
If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please contact us:
Email: of.carpentryandbuilding@gmail.com
Phone: 07495 962094
Post: O.F Carpentry and Building, Warwickshire
You also have the right to contact the Information Commissioner's Office:
Web: ico.org.uk
Phone: 0303 123 1113