Privacy Policy

As data controllers in the context of consultancy and carpentry, businesses and sole practitioners determine why and how personal data is processed — for example, consultants hold client contact details, proposals, financial records and project reports, while carpenters may hold customer contact information, site addresses, measurements, photographs and health-and-safety details. As controllers they are responsible under data protection law (for example the UK GDPR and the Data Protection Act 2018) for establishing a lawful basis for processing (such as performance of a contract, consent or legitimate interests), providing clear privacy notices, keeping processing records and implementing appropriate security measures to protect personal data. Practical steps include staff training, minimising data collected, encrypting or securely storing records, responding promptly to subject access requests and keeping privacy information up to date. Overall, whether operating a Consultancy / Maintenance / Carpentry business, accepting the responsibilities of a data controller helps meet legal obligations and maintain client trust.