This Privacy Policy explains how PK TimberCraft collects, uses, stores and shares personal information when you visit our website, contact us, create an account, subscribe to email updates or buy products and services from us.
1. Who We Are
PK TimberCraft is the data controller responsible for the personal information described in this policy.
PK TimberCraftUnit 4, Thurnscoe Business Centre, Princess Dr, Thurnscoe, Rotherham S63 0BL
Email: hello@pktimbercraft.co.uk
Phone: 07557 673638
2. Personal Information We Collect
Depending on how you use the website, we may collect:
- your name, email address, telephone number, billing address, delivery address and account details;
- order details, products purchased, custom measurements, project requirements, correspondence and collection or delivery arrangements;
- information you provide through contact forms, email, telephone, WhatsApp or social media;
- your email address, signup date, signup source and IP address when you join our email list;
- technical information such as your IP address, browser, device information and essential cookie or session identifiers;
- payment status and transaction references supplied by a payment provider. We do not store full payment-card details on this website.
3. How We Use Personal Information
We use personal information to:
- respond to enquiries, prepare quotes and discuss projects;
- process payments, fulfil orders and arrange collection, delivery, returns or refunds;
- create and manage customer accounts and order history;
- provide customer service and deal with problems, disputes or warranty matters;
- send email updates when you have actively subscribed;
- protect the website, prevent fraud and abuse, troubleshoot problems and maintain reliable service;
- maintain financial, tax and business records and comply with legal obligations.
4. Our Lawful Bases
- Contract: to take steps you request before an order and to process and fulfil purchases or services.
- Legal obligation: to keep records and meet tax, accounting, consumer-law and other legal requirements.
- Consent: to send newsletter and marketing emails when you have opted in. You can withdraw consent at any time.
- Legitimate interests: to respond to general enquiries, operate and secure the website, prevent misuse, manage our business and establish or defend legal claims, where those interests are not overridden by your rights.
5. Email Updates and Marketing
We send email updates only where you have chosen to join our list, including through the newsletter form or an optional checkout choice. You can unsubscribe at any time by using an unsubscribe option in an email or by contacting us. Withdrawing consent does not affect processing that took place before withdrawal.
6. Cookies and Similar Technologies
The website uses essential WordPress and WooCommerce cookies or browser storage to provide the shopping basket, checkout, customer login, account security, session continuity and other services you request. These technologies are necessary for the website to work and cannot be switched off through a consent preference.
PK Tracking produces aggregate statistics to help us improve this website: daily visitor estimates, pageviews, popular public pages, referring sources, device categories and active time on pages. It does not use analytics cookies, local storage, session storage, advertising identifiers or cross-site tracking.
Our server briefly processes your IP address and browser user agent to calculate a site-specific daily identifier. We do not store the raw IP address or user agent in analytics. These temporary identifiers are treated as pseudonymous data, used only for counting, and expire at the end of the reporting day. Temporary page timing records expire after 30 minutes. Aggregate statistics are retained for 13 months. Collection is separate from customer accounts, purchases and security logs.
When enabled, this processing is solely for website improvement under the statistical-purpose exception to PECR. Our proposed UK GDPR basis for the brief processing of personal data is legitimate interests in understanding and improving the website, subject to our documented assessment of your rights. We do not use these statistics for advertising or decisions about individuals.
You can object free of charge using “Stop website statistics” at the bottom of any page. This adds pk_no_tracking=1 to the address and carries it through internal links and forms. Bookmark that address to return with statistics disabled. As we do not store your preference, a clean URL on a later visit cannot remember your choice. We also respect Do Not Track and Global Privacy Control signals. Requests already included in aggregate totals cannot be separated back out by person.
7. Who We Share Information With
We share personal information only where necessary with service providers that help us run the business, such as website hosting and email providers, WooCommerce and related website services, payment providers, delivery or shipping providers, IT and security support, accountants or professional advisers. We may also disclose information where required by law or to establish, exercise or defend legal claims.
These organisations may act as processors or as independent controllers for their own services. Payment providers process payment information under their own privacy terms.
8. External Services and Links
The website contains links to services such as WhatsApp, Google Maps, Facebook and Instagram. These services do not receive information from us merely because a link is displayed, but they may collect information when you choose to follow a link or communicate through their platform. Their own privacy policies apply.
9. International Transfers
Some technology, payment, communications or social-media providers may process information outside the United Kingdom. Where we are responsible for a restricted transfer, we use a lawful transfer mechanism and appropriate safeguards as required by UK data-protection law.
10. How Long We Keep Information
- Order, payment and accounting records are generally kept for up to six years after the relevant transaction or business relationship, where needed for tax, legal and record-keeping purposes.
- Enquiries and unsuccessful quotes are generally kept for up to 24 months after the last contact unless there is a continuing reason to retain them.
- Newsletter records are kept until you unsubscribe, withdraw consent or ask us to delete them, subject to a minimal suppression record where needed to respect your opt-out.
- Customer account information is kept while the account remains active and afterwards only where needed for orders, legal obligations, security or dispute handling.
- Technical and security records are retained according to the operational and security needs of the website and its hosting providers.
11. Security
We use reasonable technical and organisational measures to protect personal information. No internet transmission or storage system is completely secure, but access is limited to those who need the information for the purposes described in this policy.
12. Your Data-Protection Rights
You have the right to object at any time to the use of your personal information for direct marketing.
Depending on the circumstances, you may also have rights to access your personal information, correct inaccurate information, request deletion or restriction, object to processing based on legitimate interests, receive certain information in a portable format, and withdraw consent. Some rights are subject to legal conditions and exemptions.
To exercise a right, contact us using the details above. We may need to verify your identity before completing a request.
13. Complaints
Please contact us first if you have concerns so that we can try to resolve them. You also have the right to complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint/.
14. Changes to This Policy
We may update this Privacy Policy when our services, website or legal obligations change. The latest version will be published on this page with an updated date.