GET IN TOUCH
ABOUT
SERVICES
PROJECTS
GET IN TOUCH
ABOUT
SERVICES
PROJECTS
privacy policy
Last updated: 20 August 2025
Forest & Stone (“we”, “us”, “our”) respects your privacy. This notice explains what personal data we collect, how we use it, and your rights under UK data protection law.
If you have any questions, contact:
Email: andrew@forestandstone.co.uk
Phone: 07554 429 322
Postal: Forest & Stone, Unit 15, Wellesley Road, Tharston, Norwich, Norfolk, NR152PD, 01603 339290
(Optional legal line if applicable)
[Forest & Stone Ltd, registered in England & Wales. Company No [16410667]. Registered office:Unit 15, Wellesley Road, Tharston, Norwich, Norfolk, NR152PD, 01603 339290 . VAT No 493678237
1) Who we are and how to contact us
We design, build and install bespoke fitted furniture from our workshop in Tharston, South Norfolk. For the purposes of the UK GDPR and Data Protection Act 2018, we are the data controller for the personal data described in this notice. You can reach us using the details above.
GOV.UK
2) The data we collect
We only collect what we need to respond to enquiries, provide quotes, deliver projects and run our business.
Identity & contact data: name, email, phone number, address, project site address.
Project data
: room measurements, drawings, photos you share, specifications, budgets.
Communications:
emails, messages, call notes.
Transaction data
: quotes, invoices, payment records (we do not store full card details).
Website data:
basic technical data (e.g. IP address, device/browser) and cookies/analytics if enabled — see Cookies & analytics below.
3) How we get your data
Directly from you (contact forms, email, phone, social media messages, in-person).
From project partners (e.g. interior designers you introduce).
Automatically via our website (e.g. limited technical data and cookies/analytics if used).
4) Why we use your data (purposes) & lawful bases
We process your data only where we have a lawful basis:
To respond to enquiries and provide quotations – Legitimate Interests / Pre-contract.
To deliver and manage projects, take payments and provide aftercare – Contract.
To manage our accounts, tax, and legal obligations – Legal Obligation.
To keep basic client records and project images for portfolio and quality assurance – Legitimate Interests (we’ll never publish identifiable home photos without your consent or clear anonymisation).
To send occasional updates or marketing – Consent (you can withdraw at any time).
ICO
+1
5) Sharing your data
We share data only when necessary and with safeguards in place:
Service providers
: website host, email provider, cloud storage, accounting software, payment processors, couriers/fitters (where applicable).
Professional advisors
: accountants, legal advisors.
Legal/Regulatory: where required by law (e.g. HMRC).
We do not sell your personal data.
6) International transfers
Some providers may store data outside the UK (e.g. cloud/email services). Where this happens, we ensure appropriate safeguards are in place (such as adequacy decisions or standard contractual clauses).
ICO
7) Data retention
– how long we keep it
We keep data only as long as needed for the purpose collected:
Enquiries that don’t proceed: typically up to 12 months.
Clients & projects: quotes, invoices and core project records are kept for up to 6 years after the end of the relevant tax year (to meet accounting/tax obligations and for aftercare/warranty).
Marketing consents: until you withdraw consent (we keep a record of when you opted in/out).
We will securely delete or anonymise data when it’s no longer needed.
8) Your rights
You have rights over your personal data, including the right to access, rectify, erase, restrict or object to processing, and data portability in certain cases. Where we rely on consent, you can withdraw it at any time. To exercise your rights, contact us using the details above. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or call 0303 123 1113.
ICO
+1
9) Cookies & analytics
Our website may use cookies for essential functions and to understand site usage (for example, anonymous analytics). You can control cookies through your browser settings. If we implement analytics or marketing cookies, we will show a consent banner and provide a detailed Cookie Policy explaining the categories used and how to opt out.
ICO
10) Marketing
We’ll only send you marketing if you’ve asked us to or if the law allows it. You can opt out at any time by clicking “unsubscribe” (where available) or by emailing andrew@forestandstone.co.uk
.
11) Security
We use reasonable technical and organisational measures to protect your data (e.g. access controls, secure passwords, limited retention). No system is 100% secure, but we aim to minimise risk and review controls periodically.
12) Children
Our services are designed for adults. We do not knowingly collect personal data from children.
13) Third-party links
Our site may link to other websites (e.g. Instagram). We’re not responsible for their content or privacy practices. Please read their privacy notices.
14) Changes to this notice
We may update this policy from time to time. New versions will be posted on this page with an updated “Last updated” date.
15) How to contact us
For privacy questions or to exercise your rights, contact:
Email: andrew@forestandstone.co.uk
• Phone: 07554 429 322 • Post: Forest & Stone, Unit 15, Wellesley Road, Tharston, Norwich, Norfolk, NR152PD, 01603 339290
Thank you!
We will be in touch soon.
