We’ve moved! Click here for more information


Here at Carpenter Oak Ltd we pride ourselves on our honesty and integrity. We do not share data outside of our organisation for marketing or any other commercial purpose.
Any data collected by Carpenter Oak Ltd will stay within the Carpenter Oak Group.
In this privacy policy we’ve provided lots of information about how we collect and use data.

Data collection

To provide our services, we collect and process personal data which could be used to identify you as an individual. We only request the minimum amount to fulfill our services to you. This data includes:

  • Name
  • Telephone number
  • Email address
  • Postal address
  • Job title
  • Email correspondence
  • Job/Project information


Lawful basis for processing

We lawfully process your data on the following basis:

  • Consent: you have given clear consent for us to process their personal data for a specific purpose.
  • Contract: the processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract.
  • Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
  • Vital interests: the processing is necessary to protect someone’s life.
  • Public task: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.
  • Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.

We do not collect or process special category data including:

  • personal data revealing racial or ethnic origin
  • personal data revealing political opinions
  • personal data revealing religious or philosophical beliefs
  • personal data revealing trade union membership
  • genetic data
  • biometric data (where used for identification purposes)
  • data concerning health
  • data concerning a person’s sex life
  • data concerning a person’s sexual orientation


How we process your personal data

Provide services to you

We use your personal information to provide and deliver our services and process transactions related to our service, including registrations, subscriptions, purchases, and payments.

Communicate with you

We use your personal information to communicate with you in relation to our services via different channels (e.g., by phone, email, chat) and to respond to your requests.

Marketing to you

We use your personal information to market and promote our services to you.

Our website

Our website uses personal data to the extent it is required to fulfil our service to you and no more. We regularly cleanse our data through anonymization or deletion in the following circumstances:

  • The data is more than 7 years old
  • We have not done any kind of business with you for 5 years
  • You instruct us through exercising your GDPR rights

We may from time to time ask you to reconfirm your personal information. We will ever only email you to do this. This helps us understand that you still wish to be engaged with us for legitimate business reasons and offers and opportunity to change or correct the personal data we hold.

Website Cookies

Our websites use 1st party cookies to collect information that will help them work more efficiently.

We also use 3rd party Cookies to record:

Statistical data

like browsing behaviour and information about pages that are viewed in order to provide a smoother, user-friendly, interactive website.

Marketing data

Cookies from services like Vimeo and Youtube to display their content and settings or advertising platforms like Google & Facebook enable them to track their performance effectively.

If you want to know the exact cookies and their use, please read our cookie policy.

Mailing Data

We offer regular email communication to those who wish to learn about our products, services, special offers, competitions and latest project news. We do this to stay in contact with those who are interested in our brand and products.
This is an opt-in service where we only send email newsletters to those who are self-subscribed. We operate a one-click, unsubscribe service to those who no longer wish to receive this service. Alternatively, you can contact us on hello@carpenteroak.com with your request.

Third Party Information

We do not sell or buy any data for marketing purposes, data-swaps or for commercial gain.
We may, however, share anonymised data with our digital advertising agency who use browsing data and search terms to make our marketing efforts more efficient.

3rd party data processors we use which can hold your personal data

Name Role Data location Business address
Amazon Web Services Web Hosting EU-U.S. Privacy Shield Framework E.U. Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109-5210
Google analytics Website analysis Data Protection Act 2018 (GDPR) U.K. Saint Giles, 1-13 St Giles High St, London WC2H 8AG, UK.
MailChimp SMTP mailing service EU-U.S. Privacy Shield Framework U.S. 675 Ponce de Leon Ave NE, Suite 5000
Atlanta, GA 30308 USA
VU Online Digital services Data Protection Act 2018 (GDPR) U.K. Kings wharf, Quay House The Gallery, Exeter EX2 4AN
Insightly CRM CRM EU-U.S. Privacy Shield Framework U.S. Insightly, Inc.
58 West Portal Ave PMB 716
San Francisco, CA 94127


Your rights

We will uphold your rights. Your rights are more fully explained at the ICO website but can be simply stated as:

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights in relation to automated decision making and profiling
  • Contact us
  • You are entitled to view, amend, or delete the personal information that we hold.

Please contact us directly in writing for questions relating to GDPR and we’ll be happy to help.

If you are making a Data Subject Access Request we will ask you for proof of identity in the form of photo ID. We will fulfil our obligations within 30 days.

Our Data Protection Officer is: Luke Copley-Wilkins
Email your request to privacy@carpenteroak.com

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO).

Changes to this Privacy Notice

This notice was revised in Apr 2024.

This notice was revised in May 2022.
This notice was drafted in May 2018 in line with original GDPR legislation

Download Brochure from Carpenter Oak
Download Brochure

If you want to give us more detailed information, visit the main contact form.

"*" indicates required fields

Company News

Sign up to our newsletter

We'll keep you up to date about events and send you exclusive invites to our open house events

"*" indicates required fields


Your email address is safe with us. Read our privacy policy.

Sign up to our newsletter

"*" indicates required fields