Privacy Policy

Last Updated: 21/08/2025

1. About This Policy

This Privacy Policy explains how D Mills Carpentry Ltd (“Company,” “we,” “us,” or “our”), as the data controller, collects, uses, and protects your personal data when you visit our website https://www.dmillscarpentry.com/ (“Website”). It applies to all personal data collected about you by us.

2. Data Controller

The data controller responsible for your personal data is:

  • Name: D Mills Carpentry Ltd

  • Address: 2 Kingsleigh Walk, Bromley, BR2 0YE

3. The Legal Basis for Processing Your Data

We will only collect and process your personal data where we have a lawful basis to do so under GDPR. The legal bases we rely on are:

  • Consent: When you have given us clear consent to process your personal data for a specific purpose.

  • Contract: When processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.

  • Legal Obligation: When processing is necessary for us to comply with the law.

  • Legitimate Interests: When processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests do not override your fundamental rights and freedoms.

4. What Personal Data We Collect

We may collect the following types of personal data:

  • Identity Data: First name, last name, username.

  • Contact Data: address, email address, telephone numbers.

  • Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, operating system and platform.

  • Usage Data: Information about how you use our website, products, and services.

  • Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties.

5. How We Use Your Personal Data

We use your data for various purposes, each with a corresponding legal basis:

  • To register you as a new customer (Legal Basis: Contract).

  • To process and deliver your order, including managing payments and fees (Legal Basis: Contract).

  • To manage our relationship with you, including sending you important updates (Legal Basis: Contract & Legitimate Interests).

  • To send you marketing communications where you have provided your consent (Legal Basis: Consent).

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • The right to be informed: The right to be informed about how your data is processed.

  • The right of access: The right to request a copy of the personal data we hold about you.

  • The right to rectification: The right to have inaccurate or incomplete data corrected.

  • The right to erasure (“right to be forgotten”): The right to request the deletion of your personal data under certain conditions.

  • The right to restrict processing: The right to ask us to stop processing your data under certain conditions.

  • The right to data portability: The right to have your data transferred to another organisation in a machine-readable format.

  • The right to object: The right to object to our processing of your data.

  • Rights in relation to automated decision-making and profiling: The right not to be subject to a decision based solely on automated processing.

To exercise any of these rights, please contact us using the form on the Contact page.

7. Data Retention

We will only retain your data for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements.

8. International Transfers

Your personal data may be transferred to and stored in a country outside the European Economic Area (EEA). If we do this, we will ensure adequate safeguards are in place to protect your data as required by GDPR. 

9. The Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection supervisory authority if you have concerns about how we are processing your personal data.

10. Changes to This Privacy Policy

We reserve the right to update this policy at any time.