Here at Carpenter Oak Ltd we pride ourselves on our honesty and integrity. We do not share data outside of our organisation for marketing or any other commercial purpose.
Any data collected by Carpenter Oak Ltd will stay within the Carpenter Oak Group.
In this privacy policy we’ve provided lots of information about how we collect and use data.
Data collection
To provide our services, we collect and process personal data which could be used to identify you as an individual. We only request the minimum amount to fulfill our services to you. This data includes:
- Name
- Telephone number
- Email address
- Postal address
- Job title
- Email correspondence
- Job/Project information
Lawful basis for processing
We lawfully process your data on the following basis:
- Consent: you have given clear consent for us to process their personal data for a specific purpose.
- Contract: the processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract.
- Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
- Vital interests: the processing is necessary to protect someone’s life.
- Public task: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.
- Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
We do not collect or process special category data including:
- personal data revealing racial or ethnic origin
- personal data revealing political opinions
- personal data revealing religious or philosophical beliefs
- personal data revealing trade union membership
- genetic data
- biometric data (where used for identification purposes)
- data concerning health
- data concerning a person’s sex life
- data concerning a person’s sexual orientation
How we process your personal data
Provide services to you
We use your personal information to provide and deliver our services and process transactions related to our service, including registrations, subscriptions, purchases, and payments.
Communicate with you
We use your personal information to communicate with you in relation to our services via different channels (e.g., by phone, email, chat) and to respond to your requests.
Marketing to you
We use your personal information to market and promote our services to you.
Our website
Our website uses personal data to the extent it is required to fulfil our service to you and no more. We regularly cleanse our data through anonymization or deletion in the following circumstances:
- The data is more than 7 years old
- We have not done any kind of business with you for 5 years
- You instruct us through exercising your GDPR rights
We may from time to time ask you to reconfirm your personal information. We will ever only email you to do this. This helps us understand that you still wish to be engaged with us for legitimate business reasons and offers and opportunity to change or correct the personal data we hold.
Website Cookies
Our websites use cookies to collect information that will help them work more efficiently. We record browsing behaviour and information about pages that are viewed in order to provide a smoother, user-friendly, interactive website. Read our cookie policy.
Mailing Data
We offer regular email communication to those who wish to learn about our products, services, special offers, competitions and latest project news. We do this to stay in contact with those who are interested in our brand and products.
This is an opt-in service where we only send email newsletters to those who are self-subscribed. We operate a one-click, unsubscribe service to those who no longer wish to receive this service. Alternatively, you can contact us on hello@carpenteroak.com with your request.
Third Party Information
We do not sell or buy any data for marketing purposes, data-swaps or for commercial gain.
We may, however, share anonymised data with our digital advertising agency who use browsing data and search terms to make our marketing efforts more efficient.
3rd party data processors we use which can hold your personal data
| Name | Role | Data location | Business address | |
|---|---|---|---|---|
| Amazon Web Services | Web Hosting | EU-U.S. Privacy Shield Framework | E.U. | Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109-5210 |
| Google analytics | Website analysis | Data Protection Act 2018 (GDPR) | U.K. | Saint Giles, 1-13 St Giles High St, London WC2H 8AG, UK. |
| MailChimp | SMTP mailing service | EU-U.S. Privacy Shield Framework | U.S. | 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA |
| VU Online | Digital services | Data Protection Act 2018 (GDPR) | U.K. | Kings wharf, Quay House The Gallery, Exeter EX2 4AN |
| Insightly CRM | CRM | EU-U.S. Privacy Shield Framework | U.S. | Insightly, Inc. 58 West Portal Ave PMB 716 San Francisco, CA 94127 |
Your rights
We will uphold your rights. Your rights are more fully explained at the ICO website but can be simply stated as:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling
- Contact us
- You are entitled to view, amend, or delete the personal information that we hold.
Please contact us directly in writing for questions relating to GDPR and we’ll be happy to help.
If you are making a Data Subject Access Request we will ask you for proof of identity in the form of photo ID. We will fulfil our obligations within 30 days.
Our Data Protection Officer is: Laura Butlin
Email your request to privacy@carpenteroak.com
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO).
Changes to this Privacy Notice
This notice was revised in May 2022.
This notice was drafted in May 2018 in line with original GDPR legisla
