Privacy Policy

Who we are

Live Joinery (“we”, “us”, “our”) is a family-run joinery business based at 54 Damask Crescent, London, Greater London E16 4PQ. For data-protection enquiries, contact us at [email protected] or +44 7877 959138.

We are the data controller for personal information you provide to us through this website, by email or by phone.

What we collect

When you submit the enquiry form on this site we collect:

• Your name
• A contact method — either a phone number or an email address (whichever you give us)
• Your postcode — so we can confirm we cover your area
• Your rough project budget — if you choose to share one, so we can suggest realistic materials and scope
• The message you wrote, including any project details you share
• Technical metadata — your IP address and user-agent (browser fingerprint), captured by our hosting provider for spam-prevention purposes, and the time of submission

We do not store credit-card details. We do not ask for date of birth, address (beyond postcode), or any sensitive personal data (health, financial, political, religious, etc.). If you volunteer such information in the message field we will delete it from our records and ask you to resend without it.

When you visit the site we use Cloudflare Web Analytics, which is cookieless and does not track individual visitors across sites. We see aggregate visitor counts and which pages are popular, not who you are.

If Google Analytics is enabled on the site, we only load it after you choose to allow analytics. It records aggregate behaviour such as page visits, link clicks, button clicks, contact-form attempts and contact-form outcomes. We do not send enquiry form field values to Google Analytics, and we do not use Google Analytics for advertising or retargeting.

What we do with it

We use your enquiry information only to:

1. Reply to your enquiry
2. Book and run any subsequent site survey, quote, install or follow-up
3. Send a one-off “did everything go well?” check-in after install completes

We do not add you to a marketing list, sell or share your data with third parties, or use it for retargeting. There is no Live Joinery newsletter.

The lawful basis for processing under UK GDPR is legitimate interest (responding to an enquiry you initiated) and, where you’ve accepted a quote, contract performance.

How long we keep it

• Enquiries that don’t proceed: deleted from our inbox within 12 months.
• Active projects: retained for the duration of the project plus the 12-month workmanship guarantee.
• Completed projects: name, postcode, install date and project description retained indefinitely as a portfolio record (we may show photos of the work — never your name, address or contact details — on our site, social media or Houzz profile, but only if you’ve explicitly agreed at handover).

Third parties we share with

We use these external services to process your enquiry and run the website:

• Cloudflare (hosting, edge security, web analytics) — based in the US with UK/EU regional data residency. Cloudflare processes the form submission and stores the metadata above for up to one year for spam-prevention. Cloudflare’s privacy policy.
• Resend (transactional email) — based in the US. We use Resend to deliver your enquiry to our inbox. The email content (your name, contact, postcode, rough budget if supplied, and message) passes through Resend’s mail servers. Resend’s privacy notice.
• GitHub (content management) — we don’t share enquiry data with GitHub; the website’s text content is stored there but enquiries never reach the repository.
• Google Analytics (optional website analytics) — used only if you allow analytics. Google receives page and interaction events but not your enquiry form field values.

Your rights

Under UK GDPR you have the right to:

• Request a copy of any personal data we hold about you
• Ask us to correct anything that’s wrong
• Ask us to delete your data (where there’s no contractual obligation to keep it)
• Object to how we’re using it
• Lodge a complaint with the Information Commissioner’s Office — though we’d rather you contact us first so we can fix whatever’s wrong.

Email [email protected] for any of the above. We reply within 30 days, as required by law.

Cookies

We do not use advertising or retargeting cookies. The cookies and local browser storage used by the site are:

• Cloudflare’s security cookies (anti-bot, anti-DDoS) — strictly necessary, no consent required
• A local analytics preference, so the site remembers whether you allowed or declined Google Analytics
• Google Analytics cookies, only if Google Analytics is enabled and you choose to allow analytics
• The CMS at /admin sets an authentication session cookie if someone is signed in as an editor — this is not relevant to public visitors

If you visit /admin (the CMS), additional cookies are set by GitHub for the OAuth handshake — but /admin is for the site owner and editors only.

Changes to this policy

If we change anything material about how we handle enquiry data we’ll update this page and note the change date at the top. Last updated: 6 June 2026.