Last updated: 28/08/2026
This Privacy, Cookies & Data Protection Notice explains how AG JOINERY CONTRACTORS LTD ("we", "us", "our" or the "Company") collects, uses, stores, protects and otherwise processes personal information when you visit joinerycontractors.uk, contact us, request a quotation, submit information through our website, upload documents or files, communicate with our team, become a customer, supplier or business contact, or otherwise interact with our services.
We are committed to handling personal information responsibly and in accordance with applicable United Kingdom data protection and privacy legislation. This Notice is intended to provide a clear description of the information we may process, the reasons for doing so, the circumstances in which information may be retained or disclosed, and the rights available to individuals.
For the purposes of applicable United Kingdom data protection legislation, the organisation responsible for deciding how and why personal information is processed through this website and in connection with our services is:
AG JOINERY CONTRACTORS LTDIn most circumstances described in this Notice, AG JOINERY CONTRACTORS LTD acts as the data controller. This means that we determine the purposes and means by which relevant personal information is processed.
There may be limited circumstances in which another organisation acts as an independent controller or where information is processed by a third-party supplier acting on our instructions. Where appropriate, such arrangements are governed by applicable data protection requirements.
This Notice applies to personal information processed in connection with joinerycontractors.uk and communications, enquiries, quotations, projects and other business activities associated with our website and services.
It may apply to prospective customers, existing customers, individuals acting for business customers, suppliers, subcontractors, professional advisers, website visitors and other persons who communicate or deal with us.
References to "personal information", "personal data", "processing", "controller" and similar terms are intended to have the meanings given to them under applicable United Kingdom data protection law.
This Notice relates to information from which an individual is identified or can reasonably be identified. Information that has been irreversibly anonymised so that no individual can reasonably be identified is not personal information for these purposes.
The type and amount of information we process depends on how you interact with us. We seek to collect information that is relevant to the particular enquiry, service, project or other legitimate business purpose.
Information that we may collect includes, where appropriate:
We do not require every category listed above in every case. The information actually processed will depend on your relationship with us and the purpose for which the information is required.
We may obtain personal information directly from you when you enter information into a form, request a quotation, contact us by telephone or email, send us a message, upload a document, provide project information or otherwise communicate with us.
We may also receive information from a person acting on your behalf, from a company or organisation that you represent, from another participant in a project, or from a professional, contractor or supplier where there is a legitimate reason for that information to be provided to us.
Certain technical information is generated automatically when a browser or device communicates with our systems. This may include IP addresses, request timestamps, browser information, server logs, session identifiers, security events and information necessary to transmit and display website content.
Where permitted by law, we may also obtain information from publicly available sources where this is relevant to a genuine business, legal, security or project-related purpose.
We process personal information only where we have a lawful reason to do so. Depending on the circumstances, information may be processed for one or more of the following purposes:
Where we wish to use personal information for a materially different purpose that is not compatible with the original purpose, we will identify an appropriate lawful basis and, where required by law, provide additional information about that new processing.
We may use aggregated or anonymised information for internal statistics, service development, capacity planning, security, analysis and business improvement where the information no longer identifies an individual.
The lawful basis used for processing depends on the particular activity. More than one lawful basis may potentially be relevant to different processing activities.
We may process information where this is necessary to perform a contract with you or to take steps at your request before entering into a contract. For example, we may need your contact details, project address and project requirements in order to prepare a quotation or perform agreed work.
We may process information where necessary for legitimate interests pursued by us or, where appropriate, by another party, provided those interests are not overridden by the rights and interests of the individual concerned.
Our legitimate interests may include operating and improving our business, communicating with customers and business contacts, managing enquiries and projects, protecting our systems, preventing fraud and misuse, maintaining appropriate records, resolving disputes, recovering debts, securing professional advice, protecting our legal rights and ensuring the efficient administration of the Company.
We may process information where this is necessary for compliance with an obligation imposed on us by applicable law. This may include accounting, taxation, regulatory, court or other lawful requirements.
In circumstances where consent is the appropriate lawful basis, we may process information on the basis of consent provided by the individual. Where processing depends on consent, that consent may generally be withdrawn at any time in relation to future processing. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
In exceptional circumstances, another lawful ground available under applicable United Kingdom data protection legislation may apply. We will only rely on such a ground where its legal requirements are satisfied.
When you submit an enquiry or request a quotation, we may ask for information such as your name, email address, telephone number, project location, requested service and project details.
This information is used primarily to understand your request, contact you about it, assess whether we can provide the requested work, obtain additional information where necessary and prepare or discuss a quotation.
Information supplied through a quotation form does not itself oblige us to accept a project, provide a particular service or enter into a contract. We may retain reasonable records of enquiries and quotations for administrative, evidential, security and legitimate business purposes.
Where an enquiry develops into a contractual relationship, the information supplied during the enquiry stage may become part of the relevant customer or project record.
Website forms may use temporary technical identifiers, session data, validation mechanisms and security controls in order to transmit information reliably, prevent duplicate submissions, protect against automated abuse and maintain the correct state of a form during a browsing session.
Certain website forms or communications may allow you to send photographs, drawings, plans, specifications, documents or other files to us.
Files submitted to us may be stored for the purpose of reviewing your request, preparing a quotation, planning or performing work, maintaining project documentation, responding to subsequent questions, resolving disputes and maintaining records where this is reasonably necessary.
You should only provide information that is relevant to your enquiry or project. Where a document contains information about another person, you should ensure that you are entitled to provide that information to us.
Please avoid including unnecessary confidential, highly sensitive or special category personal information in uploaded documents. If such information is genuinely required, contact us first where appropriate so that an appropriate method of transmission can be considered.
We may remove files that are corrupt, malicious, technically incompatible, irrelevant, duplicative, unsafe or no longer reasonably required.
Uploaded files may also be retained where reasonably necessary for the establishment, exercise or defence of legal claims, compliance with legal requirements, investigation of misuse, protection of our systems or preservation of evidence.
Our website and ordinary quotation process are not designed to request special category personal data such as health information, biometric information used for identification, information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, sex life or sexual orientation.
Please do not provide such information unless it is genuinely relevant and necessary in the circumstances.
If we receive special category information, including information contained incidentally within a document supplied to us, we will process it only where an appropriate lawful basis and an additional condition required by applicable law are available.
Where no valid reason exists to retain unnecessary sensitive information, we may delete or redact it.
Like most websites, our systems may create technical records when a device connects to the website. Such records may include an IP address, date and time of a request, requested URL, browser type, device or operating system information, response status, referring information and technical error or diagnostic details.
This information may be necessary for delivering website content, maintaining network and information security, identifying faults, preventing abuse, investigating suspicious activity, maintaining server integrity and establishing how an incident occurred.
Security records may be reviewed where reasonably necessary to investigate suspected attacks, malicious requests, attempts to interfere with the website, fraudulent submissions or other activity that could compromise our systems, our users or the Company.
We reserve the right to implement reasonable technical security mechanisms and to retain security-related records for an appropriate period where necessary for the protection of our systems and legitimate interests.
Cookies are small pieces of information that may be stored on or accessed from your device when you use a website. Similar technologies may perform related functions.
We may use cookies and session technologies that are necessary for the technical operation, security and functionality of our website. For example, a temporary session identifier may allow a server to associate consecutive requests with the same browsing session or preserve the state of a form.
Strictly necessary technologies may be used where required to provide a website function requested by the user, maintain security, process a form or otherwise make the website operate correctly.
Where we use a technology that is not strictly necessary and applicable law requires consent, we will seek the relevant choice before activating that technology, except where another legal exemption applies.
The specific technologies used by the website may change over time as we maintain, secure and develop the service. We may therefore update this section or our cookie controls to reflect technical changes.
| Category | Purpose | Typical duration |
|---|---|---|
| Essential / session | Used to maintain website sessions, process forms, preserve temporary state and provide functionality specifically requested by the user. | Usually until the browser session ends or for a limited period necessary for the function. |
| Security | Used where necessary to protect forms, detect misuse, mitigate automated abuse and maintain website security. | Session or limited period depending on the security mechanism. |
| Preferences | May remember choices made by a user, including privacy or cookie preferences. | May remain for a reasonable period so that the preference can be remembered. |
| Analytics | If introduced, analytics technologies may help us understand general website performance and usage. Where consent is legally required, they will not be activated before the relevant consent is given. | Depends on the analytics technology used. |
| Marketing / advertising | If such technologies are introduced in the future, their purpose and applicable controls will be disclosed and any consent required by law will be obtained before use. | Depends on the relevant technology and user preference. |
A cookie may technically remain on a device for a different period depending on browser configuration, deletion by the user, technical updates or changes to the website.
We may replace or modify technical identifiers where reasonably necessary for maintenance, security or development of the website.
Where our website provides cookie preference controls, you may use those controls to accept or reject optional categories.
You can also use the settings available in your browser to view, remove or block cookies. The precise procedure depends on the browser and device you use.
Blocking all cookies or storage mechanisms may prevent certain website functions from operating correctly. For example, a form or security mechanism that depends on a strictly necessary session may be unable to operate if the relevant technical storage is completely disabled.
Rejecting optional cookies should not prevent access to ordinary content merely because those optional cookies have been refused, except where a third-party feature genuinely cannot function without a technology for which you have chosen not to provide consent.
We do not sell personal information as a commodity and do not provide customer information to unrelated organisations for their independent advertising merely because an individual has contacted us.
Nevertheless, operating a modern business and website can require information to be accessible to carefully selected third parties in limited circumstances.
We may disclose or make relevant information available where reasonably necessary to:
Where a third party processes personal information solely on our behalf, we expect the information to be handled in accordance with appropriate contractual and data protection requirements.
We may use third-party suppliers to provide technical or administrative functions that we do not perform entirely ourselves. Examples can include hosting, server infrastructure, cloud storage, backup services, email delivery, security, maintenance and professional support.
The use of a service provider does not mean that personal information is transferred to that provider for its own unrelated purposes. Where a supplier acts as our processor, it is expected to process relevant information on our instructions and subject to appropriate obligations concerning confidentiality, security and data protection.
We may change technical providers where reasonably necessary for cost, security, reliability, functionality, availability, business continuity or other legitimate operational reasons.
We seek to limit the information made available to a supplier to what is reasonably appropriate for the service being provided.
If the Company or part of its business is sold, acquired, reorganised, financed, merged, transferred or otherwise becomes the subject of a genuine corporate transaction, relevant business records may need to be disclosed to prospective or actual purchasers, investors, lenders, professional advisers or other parties participating in the transaction.
Any such disclosure will be limited to what is reasonably necessary and appropriate in the circumstances and may be subject to confidentiality arrangements.
Personal information forming part of legitimate business records may be transferred to a successor organisation where permitted by applicable law. The successor would then be responsible for processing the information in accordance with applicable data protection requirements.
Our business is based in the United Kingdom. However, some technical suppliers or infrastructure services used by businesses may operate systems, personnel or facilities in more than one country.
If processing involves a restricted transfer of personal information from the United Kingdom to a separate organisation outside the United Kingdom, we will take steps required by applicable data protection legislation.
Depending on the destination and circumstances, those steps may include reliance on applicable UK adequacy regulations, appropriate contractual safeguards or another legally recognised transfer mechanism or exception.
The technical location of backup or infrastructure systems may change where a supplier lawfully changes its data centre or service architecture, subject to applicable data protection requirements.
We do not intend to retain identifiable personal information indefinitely without a reason. Retention depends on the type of record, the purpose for which it is held, our relationship with the individual, applicable legal requirements and whether the information may reasonably be required for security, evidential or legal purposes.
Our usual retention approach may include the following:
| Information | General retention approach |
|---|---|
| General enquiries | Normally retained for a reasonable period after the last meaningful contact and may be retained for up to approximately 24 months where useful for follow-up, administration or evidential purposes. |
| Unsuccessful quotations | Normally retained for a reasonable period, potentially up to approximately 24 months, depending on the nature of the proposed project and subsequent communications. |
| Customer and project records | May be retained for the life of the project and afterwards for a period reasonably required for contractual, warranty, accounting, dispute and legal purposes. Certain records may commonly be retained for up to six years or longer where a lawful reason requires it. |
| Financial and accounting records | Retained for the period required by applicable accounting, tax and company-law requirements. |
| Uploaded project documents | Retained while relevant to the enquiry or project. Where they become part of a project record, they may be retained with that record. |
| Server and security logs | Retained for a reasonable operational and security period, which may vary depending on the nature of the log, security risk or incident. |
| Session information | Usually expires at or shortly after the end of the relevant session unless a longer period is technically or legally necessary. |
| Legal claims and disputes | Relevant information may be retained for as long as reasonably necessary to establish, exercise, investigate or defend the relevant claim and to comply with resulting legal obligations. |
These periods are general guidelines rather than guarantees that every record will be retained for precisely the same duration. Information may be deleted earlier where it is no longer needed.
Conversely, information may need to be retained longer where there is an ongoing project, dispute, complaint, investigation, unpaid account, warranty matter, legal hold, security incident, statutory requirement or other legitimate reason for continued retention.
When information is no longer required, we may delete it, anonymise it, securely destroy it or otherwise place it beyond ordinary operational use.
Information contained in backups may remain until the relevant backup is replaced or expires as part of the normal backup rotation process. Where appropriate, deleted information in backups may be placed beyond ordinary use pending eventual deletion or overwriting.
We take reasonable technical and organisational measures intended to protect personal information against unauthorised access, loss, destruction, alteration, misuse or inappropriate disclosure.
The measures considered appropriate depend on the nature of the information, the systems used and the risks associated with the processing.
Measures may include, where appropriate, access controls, passwords, software updates, server and network security, encrypted connections, backup arrangements, malware protection, logging, restricted administrative access and procedures intended to limit unnecessary access to information.
Personnel and service providers who require access to personal information are expected to handle it appropriately and only for authorised purposes.
However, no Internet transmission, electronic storage system or security measure can provide an absolute guarantee that a security incident will never occur. We therefore do not represent that electronic systems are completely immune from all possible threats.
If we become aware of a personal data breach, we will assess the circumstances and take the actions required under applicable law, including notification to the relevant authority or affected individuals where legally required.
Nothing in this Notice requires us to delete information that we are lawfully entitled or required to retain in connection with an actual or reasonably anticipated legal claim, dispute, investigation, contractual issue, unpaid account, insurance matter or regulatory requirement.
Where a dispute arises, we may preserve relevant correspondence, documents, project records, photographs, technical records, payment information and other information that may reasonably constitute evidence.
Such information may be supplied where appropriate to lawyers, insurers, courts, competent authorities, professional advisers or other persons legitimately involved in resolving the matter.
Information retained for a legal hold or similar purpose may be excluded from ordinary deletion processes until the reason for the hold has ended.
Submitting a quotation request or ordinary contact form does not, by itself, mean that you have agreed to receive unrelated electronic marketing indefinitely.
Where we send electronic direct marketing, we will do so only where an appropriate legal basis and the requirements of applicable electronic communications legislation are satisfied.
Where consent is relied upon, you may withdraw that consent. Where applicable, marketing communications may also contain a mechanism allowing you to opt out of further communications of that type.
We may retain a limited suppression record after an opt-out where this is necessary to ensure that the preference continues to be respected.
Service, project, contractual, security or administrative communications are not necessarily marketing and may still be sent where required for the relevant relationship or another lawful purpose.
We do not ordinarily use personal information submitted through our quotation and contact forms to make solely automated decisions that produce legal or similarly significant effects on an individual.
We may use automated technical measures for ordinary purposes such as spam detection, security filtering, form validation, malware detection, rate limiting or identification of suspicious technical activity. Such measures are primarily intended to protect the operation and security of the website.
If our use of automated decision-making changes materially in a manner that triggers additional legal requirements, this Notice may be updated accordingly.
Our website may contain links to websites, social media services, mapping services or other resources operated by third parties.
Following an external link may cause you to leave our website. The destination website may collect information under its own terms, cookie practices and privacy policy.
We do not control the independent privacy practices of third-party websites merely because a link to such a website is available from our pages.
You should review the privacy information provided by the relevant third-party service where appropriate.
Our construction and joinery services are directed primarily at adults, property owners, businesses and professional customers. Our website is not intended to invite children to enter into construction contracts or submit unnecessary personal information.
A child should not upload identity documents, financial information or other sensitive information through our website without appropriate involvement from a parent, guardian or other responsible adult where required.
If we become aware that information has been submitted by a child in circumstances where it should not reasonably be retained, we may take appropriate steps to delete, restrict or otherwise appropriately handle that information.
Depending on the circumstances and the lawful basis on which information is processed, United Kingdom data protection legislation provides individuals with a number of rights.
You may have the right to ask whether we process personal information about you and to request access to relevant personal information, together with other information required by law.
You may ask us to correct inaccurate personal information or complete information that is incomplete.
In certain circumstances, you may ask for personal information to be erased. The right to erasure is not absolute and information may lawfully be retained where an applicable exception or lawful ground for continued processing exists.
In certain circumstances, you may ask us to restrict the processing of personal information. Restriction may mean that information is retained but not otherwise actively used except where permitted by law.
Where processing is based on legitimate interests, you may have the right to object on grounds relating to your particular situation. We may in some circumstances continue processing where compelling legitimate grounds or another applicable legal reason permits us to do so.
Where personal information is used for direct marketing, the applicable right to object to that direct marketing will be respected.
In the circumstances in which the statutory right applies, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format or ask for it to be transmitted to another controller where technically feasible.
Where processing is based specifically on your consent, you may withdraw that consent in relation to future processing. This does not retrospectively make processing carried out before withdrawal unlawful.
We may request reasonable information to verify the identity of a person making a privacy request where this is necessary to avoid disclosing or deleting another person's information inappropriately.
We will not request excessive identity information where a request can reasonably be verified using less intrusive means.
Rights under data protection legislation are subject to their statutory conditions, restrictions and exemptions. The existence of a right in general therefore does not necessarily mean that every request must result in all information being disclosed, transferred or deleted.
You may request deletion of personal information that we hold about you.
When we receive a valid request, we will assess the information, the purposes for which it is processed and the lawful basis for retaining it.
Where the applicable legal requirements for erasure are met and no exception applies, we will delete the relevant personal information or take another appropriate step to remove it from ordinary processing.
We may nevertheless retain information where continued storage is required or permitted for purposes including:
Removal from an active operational system may not cause every backup copy to disappear immediately. Where backup information cannot reasonably be selectively removed without compromising the backup system, it may remain beyond ordinary use until the backup is overwritten or expires under the applicable retention cycle.
You may contact us directly to make a request concerning your personal information.
The simplest method is to email info@agjoinerycontractors.co.uk and use the subject line "Data Protection Request".
Please explain what you are requesting and provide enough information for us to identify the relevant records.
Where a request is unclear, we may contact you for clarification. Where identity verification is reasonably necessary, we may also request appropriate evidence before releasing or deleting personal information.
You are not required to use the online form if you prefer to make a valid request by another method.
We aim to respond within the period required by applicable data protection legislation. The applicable response period may be extended where the law allows this, for example in certain complex circumstances, and we will provide information about such an extension where required.
If you have a concern about the way we handle your personal information, we encourage you to contact us so that we have an opportunity to investigate and address the issue.
You also have the right to raise a complaint with the United Kingdom's data protection supervisory authority, the Information Commissioner's Office (ICO), where applicable.
Information about data protection rights and the complaints process is available from the Information Commissioner's Office.
Making a complaint does not prevent you from exercising any other rights or remedies available under applicable law.
We may amend this Privacy, Cookies & Data Protection Notice from time to time to reflect changes to our website, services, technical infrastructure, business processes, legal requirements, regulatory guidance or the way in which information is processed.
The current version will be published on this page and the "Last updated" date at the beginning of the Notice will be changed where appropriate.
Changes that clarify existing practices or reflect technical improvements may take effect when the updated Notice is published.
If a change materially affects the way in which we use existing personal information and applicable law requires additional notification or consent, we will take the steps required in the circumstances.
We recommend reviewing this Notice periodically if you continue to use our website or services over an extended period.
Questions about this Notice or about the way we process personal information can be sent to:
AG JOINERY CONTRACTORS LTDWhen contacting us about personal information, please provide enough information for us to understand your request, but do not send unnecessary identity documents or sensitive information unless we specifically ask for it and it is appropriate to do so.
