1. Who we are
Wealden Wood Design is operated by Theo Jaques, sole trader, trading as Wealden Wood Design.
Website: https://wealdenwooddesign.com
Email: Contact us here
We are the data controller for the personal data we collect and use. We have not appointed a Data Protection Officer because we are not required to. If you have questions about this notice or your data, contact us by email.
We do not provide online services to children under 13. Please do not give us personal data for a child under 13.
2. The data we collect and why
“Personal data” means information that identifies you.
-
Communication data
What: messages you send us by email, website forms, social media, or post.
Why: to reply, keep records, and handle complaints or legal claims.
Lawful basis: legitimate interests. -
Customer and order data
What: name, billing and delivery addresses, email, phone, items ordered, purchase value, delivery preferences.
Why: to take and fulfill your order, provide customer service, and keep records.
Lawful basis: contract and legitimate interests. -
Payment data
What: payment method and transaction reference. Card details are processed by our payment provider and are not stored by us.
Why: to take payment, prevent fraud, and keep accounts.
Lawful basis: contract and legitimate interests, plus legal obligation for accounting and tax. -
Technical and usage data
What: IP address, device type, browser, pages viewed, time on site, and similar. Collected via cookies or similar technologies.
Why: to run and secure the website, fix issues, and understand site performance.
Lawful basis: legitimate interests. Where cookies are not strictly necessary, we rely on your consent. See our Cookie Policy. -
Marketing preferences
What: your choices about receiving updates or offers from us.
Why: to send you what you asked for and to respect your preferences.
Lawful basis: consent or legitimate interests using the PECR soft opt-in where allowed.
We do not collect special category data and we do not carry out automated decision making that produces legal or similar significant effects.
If we ask for data by law or to perform a contract and you do not provide it, we may be unable to supply the goods. We will tell you if this happens.
3. How we collect data
-
Directly from you when you order, contact us, or choose marketing.
-
Automatically through cookies or similar. See our Cookie Policy.
-
From service providers linked to your order, for example payment processors and couriers.
4. Marketing and PECR
We may email you about our products if you asked us to, or if you bought from us and we are contacting you about similar products, and you were given a clear chance to opt out at the time and in every message. This is the soft opt-in under PECR. You can opt out at any time by using the unsubscribe link or contacting us. We will not share your data with third parties for their own marketing without your express consent.
5. Sharing your data
We share personal data only when needed, with:
-
Website host and IT support
-
Payment processor
-
Email service provider
-
Couriers and delivery partners
-
Professional advisers and insurers
-
HMRC and other authorities where required by law
We require these providers to protect your data and use it only on our instructions.
6. International transfers
Some providers may process data outside the UK. Where this happens, we use safeguards that the UK law recognises, for example:
-
An adequacy decision by the UK government for the destination country, or
-
A UK International Data Transfer Agreement or UK addendum to the EU Standard Contractual Clauses with the recipient, or
-
Another mechanism approved by the UK regulator.
Details of current transfer safeguards are available on request.
7. Security
We use technical and organisational measures to keep your data secure, restrict access to those who need it, and train those who handle it. If we become aware of a personal data breach that requires us to tell you or the ICO, we will do so.
8. Retention
We keep personal data only as long as needed for the purpose collected. Order and accounting records are kept for six years after the end of the tax year in which the transaction took place. After that, we delete or anonymise the data.
9. Your rights
You have the right to:
-
Access your personal data
-
Correct inaccurate data
-
Ask us to delete or restrict it
-
Object to processing based on legitimate interests or to direct marketing
-
Ask for your data in a portable format
-
Withdraw consent where we rely on consent
To exercise any right, contact us. We respond within one month. We do not charge a fee unless a request is excessive or repetitive.
You can learn more about your rights at the ICO: https://ico.org.uk/your-data-matters
You also have the right to complain to the Information Commissioner’s Office. We ask that you contact us first so we can try to resolve your concern.
10. Third-party links
Our website may link to other sites that we do not control. Their privacy notices will apply to any data you share with them.
11. Cookies
Your browser can block or alert you to cookies. Blocking some cookies may affect site features. For details see our Cookie Policy: here.
12. Changes to this notice
We may update this notice from time to time. The latest version will always be on our website.
Effective date: 30th August 2025.