This Privacy Policy outlines how wooddeskriser collects, uses, processes, and protects personal data obtained from customers and visitors accessing www.wooddeskriser.com. We operate in accordance with applicable UK and European data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller wooddeskriser is the data controller responsible for the personal data collected through this website.
Business Information:
- Brand Name: wooddeskriser
- Website: www.wooddeskriser.com
- Address: 44 Rosemont Avenue, London, N12 0BX, United Kingdom
- Email: portaladmin@wooddeskriser.com
- Telephone: +44 2083437323
2. Information Collected We collect and process personal data necessary for fulfilling commercial transactions, managing customer communication, and maintaining legal records. This includes:
- Contact & Identity Data: Full name, billing address, delivery address, email address, and telephone number.
- Order & Transaction Data: Details regarding products purchased, order values, transaction timestamps, and fulfilment progress.
- Technical & Usage Data: IP addresses, browser types, and standard access logs collected via website operation.
3. Legal Basis for Processing We process personal data based on the following legal grounds:
- Contractual Necessity: Processing is required to manage customer orders, dispatch goods, and handle customer enquiries.
- Legal Obligation: Processing is required to maintain statutory accounting, tax, and commercial reporting records.
- Legitimate Interests: Processing is required to support administrative functions, system functionality, and communication management.
4. Payment Processing All online payment transactions are processed securely by Stripe.
When an order is placed, transaction information is transmitted directly to Stripe to facilitate authorization, fraud prevention, and payment completion. We do not store or process full payment card credentials, security codes, or account details directly on our servers. The handling of transaction data by Stripe is conducted in compliance with applicable payment security standards and data protection regulations.
5. Third-Party Data Sharing Personal data is shared strictly with trusted service partners solely to execute business operations, including:
- Payment processing providers (Stripe).
- Logistical and courier partners required for standard dispatch and delivery to addresses within Europe.
- Web infrastructure and hosting providers necessary for operational stability.
We do not rent, trade, or transfer personal data to unauthorized third parties for promotional or independent marketing activities.
6. Retention of Personal Data We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting requirements:
- Order and Transaction Records: Retained for up to six (6) years following transaction completion in accordance with UK statutory tax and financial record-keeping requirements.
- General Enquiries: Retained for up to twelve (12) months following the last communication to ensure proper support context.
- Technical Access Logs: Retained for operational maintenance for up to ninety (90) days before automatic deletion.
Upon expiration of the relevant retention period, personal data is permanently deleted or securely anonymized.
7. Customer Rights Under applicable data protection laws in the United Kingdom and Europe, individuals possess the following rights regarding their personal data:
- Right of Access: Request a copy of personal data held by us.
- Right to Rectification: Request correction of inaccurate or incomplete information.
- Right to Erasure: Request deletion of personal data where legal grounds allow.
- Right to Restriction: Request suspension of data processing under specific circumstances.
- Right to Object: Object to data processing based on legitimate interests.
To exercise any of these rights, please contact us using the official contact details provided above.
8. Updates to This Policy We reserve the right to modify or update this Privacy Policy at any time to reflect operational or regulatory changes. Updated versions will be published directly on this page.