Privacy Policy

Introduction

Blackthorn of Kent Ltd ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website blackthornofkent.com (the "Website") or engage our services.

We are registered in England and Wales. Our registered address is 18 The Laurels, Manston Business Park, Ramsgate, Kent CT12 5NQ.

For the purposes of UK data protection law, we are the data controller of your personal data.

Information We Collect

Information You Provide to Us

We collect information you voluntarily provide when you:

• Fill out our contact form
• Request a consultation or quote
• Subscribe to our newsletter
• Communicate with us via email, phone, or in person

This may include:

• Contact information: Name, email address, phone number, postal address
• Project information: Details about your kitchen or joinery project, property type, budget range
• Communication preferences: How you prefer to be contacted
• Correspondence: Records of our communications with you

Information Collected Automatically

When you visit our Website, we may automatically collect:

• Device information: Browser type, operating system, device type
• Usage data: Pages visited, time spent on pages, click patterns
• Location data: General geographic location based on IP address
• Referral data: How you arrived at our Website

This information is collected using cookies and similar technologies. Please see our Cookie Policy for more details.

How We Use Your Information

We use the information we collect to:

• Respond to enquiries: Answer your questions and provide information about our services
• Provide quotes: Prepare estimates for your bespoke kitchen or joinery project
• Deliver services: Design, manufacture, and install your commissioned work
• Communicate: Send project updates, appointment reminders, and follow-up communications
• Improve our Website: Analyse usage patterns to enhance user experience
• Marketing: With your consent, send newsletters and promotional materials
• Legal compliance: Meet our legal and regulatory obligations

Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract: Processing necessary for a contract with you or to take steps at your request before entering a contract
• Legitimate interests: Processing necessary for our legitimate business interests, provided these don't override your rights
• Consent: Where you have given clear consent for us to process your data for a specific purpose
• Legal obligation: Processing necessary to comply with a legal obligation

Sharing Your Information

We may share your personal information with:

• Service providers: Companies that help us operate our business (e.g., email service providers, website hosting, payment processors)
• Professional advisers: Accountants, lawyers, and other professionals as necessary
• Business partners: Trusted tradespeople we work with on your project (e.g., electricians, plumbers), only with your knowledge
• Legal requirements: When required by law, court order, or to protect our rights

We do not sell your personal information to third parties.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including:

• Enquiries (no project): 2 years from last contact
• Completed projects: 7 years (for warranty and legal purposes)
• Marketing contacts: Until you unsubscribe
• Website analytics: 26 months

Your Rights

Under UK data protection law, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Request limited processing of your data
• Portability: Request transfer of your data to another organisation
• Objection: Object to processing based on legitimate interests or for marketing
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us using the details below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Secure data storage
• Encrypted communications (SSL/TLS)
• Access controls and authentication
• Regular security reviews

International Transfers

Your data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Children's Privacy

Our Website and services are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: www.ico.org.uk
Phone: 0303 123 1113