Privacy Policy

Last updated: 06/11/2025
Who we are
Timbit Wood Design (“we”, “us”, “our”) is a small workshop creating handmade and bespoke wooden products. Our registered business details are: Mariusz Borkowski / trading as Timbit Wood Design, White Cottage, Pitreuchie Farm, DD8 2RW Forfar. This Privacy Policy explains how we collect, use, share and protect personal information about visitors to our website and customers who purchase our products.

1. Summary — what this covers

This policy explains:

  • What personal data we collect and why;

  • How we use, store and share that data;

  • Your rights and how to exercise them.
    If you have questions about this policy or wish to exercise your rights, contact us at: contact@timbitdesign.co.uk. (See Section 11 for contact details.) This policy follows standard e-commerce/privacy best practice and legal guidance.

2. Personal information we collect

We collect personal data necessary to provide our products and services, including:

a. Information you provide directly

  • Name, billing and delivery address, email, phone number (to create or process orders).

  • Account details when you create an account on our site (username/password).

  • Messages you send us (enquiries, custom order specifications).

  • Marketing preferences and consents.

b. Payment & order information

  • Payment processor data (we do not store full card numbers; card processing is handled by our payment provider).

c. Technical and usage data

  • IP address, browser and device information, pages visited and interactions with the site, and cookies / similar technologies. These help us run and improve the site.

3. How and why we use your information (purposes & lawful bases)

We use personal data for the following purposes and legal bases:

  • To fulfil orders and deliver goods — processing and shipping your purchases (performance of contract).

  • To communicate with you about orders, queries, repairs or returns (necessary for contract/performance).

  • To send marketing (email newsletters or promotions) only where you have given consent; you can withdraw consent at any time.

  • To comply with legal obligations (e.g., tax, accounting).

  • To improve our website and services (analytics and aggregated usage data — legitimate interests).
    We ensure each use has an appropriate legal basis under GDPR (e.g., consent, contract, legal obligation, legitimate interests).

4. Cookies and tracking technologies

We use cookies and similar technologies (e.g., local storage, pixels) to provide essential site functionality, remember preferences, and for analytics/advertising where applicable. When required by law, we ask for consent to use non-essential cookies and provide a cookie control tool. For more on cookie requirements and best practice see our guidance sources.

5. Who we share data with

We will only share personal information when necessary and with trusted third parties, for example:

  • Payment processors (to process payments).

  • Delivery/courier companies (to ship your order).

  • Hosting & e-commerce platform providers (site hosting, order management).

  • Professional advisers where required (e.g., accountants, legal advisers).

  • Law enforcement or regulators where required by law.
    We have written contracts in place with third parties who process data on our behalf (data processors).

6. International transfers

Some third-party services (e.g., payment processors, analytics) may store or process data outside the UK/EU. Where we transfer data internationally we put safeguards in place (e.g., standard contractual clauses) or rely on an adequacy decision. We will inform you if a transfer requires your explicit consent.

7. How long we keep your data

We retain personal data only for as long as necessary for the purposes set out above, and as required by law (for example, tax records are typically retained for 6 years in the UK). Retention periods vary by data type; if you want details for a specific category, contact us.

8. Your rights

If you are a UK/EU resident you have rights under data protection law, including:

  • The right to access the personal data we hold about you.

  • The right to correct inaccurate information.

  • The right to erasure (to be forgotten), in some circumstances.

  • The right to restrict or object to certain processing (including direct marketing).

  • The right to data portability (receive your data in a usable format).

  • The right to withdraw consent (where processing is based on consent).
    To exercise any right, contact us at contact@timbitdesign.co.uk We will respond within statutory timeframes.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse (e.g., secure hosting, encryption for payment channels, access controls). However, no online transmission is completely secure — if you suspect a data breach involving your personal data, contact us immediately.

10. Children

Our website and services are not intended for children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without consent, we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. Material changes will be highlighted on our website or communicated to you directly where appropriate. The policy’s “Last updated” date shows the latest revision.

12. Contact us

If you have questions, requests or complaints about this policy or our processing of your data, please contact:

Timbit Wood Design
Email: contact@timbitdesign.co.uk
Address:Timbit Wood Design, White Cottage, Pitreuchie Farm DD8 2RW Forfar

Contact form