Privacy Policy

Last updated: 24 October 2026

At Deck and Design, we respect your privacy and take care of the personal information we collect. This policy explains how we collect, use, store and share personal information when you visit our website, contact us or use our decking and garden construction services.

1. Who we are

Deck and Design provides composite decking, timber decking, pergolas and other garden structures across Surrey and the surrounding areas.

The business responsible for your personal information is:

John Michael, trading as Deck and Design
Email: hello@deckanddesign.com
Telephone: 07756 269011
Website: www.deckanddesign.com

We are the data controller for the personal information covered by this policy.

2. Information we collect

Depending on our dealings with you, we may collect:

• Your name, email address and telephone number.
• Your home address and the address where work is required.
• Details of your enquiry, proposed project and preferences.
• Correspondence, quotations, contracts, invoices and payment records.
• Measurements, site notes and photographs relevant to your project.
• Reviews, feedback and any permissions relating to their publication.
• Technical information, such as your IP address, browser type, device information and website security logs.
• Information about your use of our website, where analytics tools are enabled.

We collect information directly from you when you complete a form, contact us, request a quotation or become a customer. We may also receive relevant project information from someone acting on your behalf, such as an architect or project manager.

3. How we use your information

We use personal information to:

• Respond to enquiries and arrange site visits.
• Prepare designs, estimates and quotations.
• Plan, supply and complete our work.
• Communicate about appointments, materials, progress and aftercare.
• Process payments and maintain business records.
• Handle questions, complaints and warranty enquiries.
• Protect our website and business against misuse or fraud.
• Understand and improve our website and services.
• Publish agreed reviews, photographs and case studies.
• Send marketing communications where we have an appropriate legal basis.

We only collect and use information relevant to these purposes.

If you do not provide the contact, property or project information we need, we may be unable to prepare a quotation or carry out the work.

4. Our lawful bases

We rely on the following lawful bases under UK data protection law:

Contract: Where we need information to provide our services or take steps you have requested before entering into a contract, such as preparing a quotation.

Legal obligation: Where we must keep or disclose information to meet legal requirements, including accounting and tax obligations.

Legitimate interests: Where necessary to run our business, manage correspondence, maintain security, resolve disputes and improve our services. We consider the effect on your privacy before relying on this basis.

Consent: Where we ask for permission for a particular use, such as certain marketing communications or publishing identifiable project photographs.

Where we rely on consent, you can withdraw it by contacting us. Withdrawal does not affect the lawfulness of earlier use.

5. Who we share information with

Where necessary, we may share relevant information with:

• Suppliers and delivery companies arranging materials for your project.
• Contractors or specialists involved in completing our work.
• Website hosting, maintenance, email and other IT service providers.
• Accounting and payment service providers.
• Our professional advisers and insurers.
• Public authorities where disclosure is required by law.

We share only the information needed for the relevant purpose. Service providers processing information on our behalf must protect it and act on our instructions.

We do not sell your personal information.

6. Project photographs and reviews

We may take photographs to help assess, plan, document and complete our work.

Where photographs, reviews or case studies would identify you or your home, we will seek your permission before using them for publicity. We will not publish your full address or contact details without your agreement.

We can discuss any concerns about photography before work begins.

7. Marketing

Where we send promotional emails or messages, we will obtain consent when required by law.

You can ask us to stop marketing at any time by contacting us or using the unsubscribe option provided.

Messages about an enquiry, quotation, appointment or ongoing project are service communications and may still be necessary after you opt out of marketing.

8. Cookies and website tools

Our website may use cookies and similar technologies to support its operation, remember preferences and help us understand how it is used.

Where consent is required, we will ask before enabling the relevant cookies or tools. You can change your choices through the Cookie Management tab. 

Details of the cookies and third-party tools we use, their purposes and how long they operate are available in the cookie management tab.

9. International transfers

Some service providers may process personal information outside the UK.

Where a transfer takes place, we will ensure an appropriate legal mechanism applies, such as UK adequacy regulations or approved contractual safeguards. We can provide information about the relevant safeguards on request.

10. How long we keep information

We keep personal information for as long as necessary for the purpose for which we collected it.

Our retention periods are:

• Unsuccessful enquiries and quotations: [Confirm period].
• Customer contracts, project records and correspondence: [Confirm period, taking account of warranties and potential claims].
• Invoices and accounting records: [Confirm period required for the business’s tax and accounting obligations].
• Project photographs and published case studies: [Confirm period or review criteria].
• Website analytics and security records: [Confirm periods for the tools used].

Where necessary, we may retain relevant records for longer to deal with an ongoing complaint, dispute or legal obligation.

We securely delete or anonymise information when it is no longer needed.

11. Keeping information secure

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

Access is limited to those who need the information for their work. Although we take reasonable precautions, no internet transmission or storage system can be guaranteed completely secure.

12. Your rights

Depending on the circumstances, you may have the right to:

• Access your personal information.
• Correct inaccurate or incomplete information.
• Ask us to delete information.
• Restrict how we use information.
• Receive certain information in a portable format.
• Withdraw consent where we rely on it.

You also have the right to object to processing based on legitimate interests, and an absolute right to object to the use of your personal information for direct marketing.

To exercise your rights, please contact us using the details above.

We normally respond within one month. Where a lawful extension applies, we will explain why. We do not normally charge for handling a request and may need to verify your identity.

13. Privacy concerns and complaints

Please contact us if you have a question or concern about how we handle your information.

You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator.

Website: https://ico.org.uk/

14. Changes to this policy

We review this policy and update it when necessary. The latest version will appear on our website, with the revision date shown at the top. Where required, we will bring significant changes to your attention.