Privacy Policy — LumberJackJoe | Lumber Studio

Last updated: [4/12/25]

This Privacy Policy explains how I collect, use and protect your personal information when you visit lumberjackjoe.com, contact me, or work with me.
I am committed to handling your data honestly, securely and in accordance with UK data protection laws.


1. Who I Am

Data Controller:
LumberJackJoe (Joe Taylor)
Dudley, West Midlands, UK
Email: design@lumberjackjoe.com

If you have any questions about this policy or would like to exercise your rights, you can contact me using the email above.


2. What Personal Data I Collect & Why

a) Information you give me directly

Contact forms / email enquiries

  • Name

  • Email address

  • Any message or project details you choose to share

Purpose: Responding to your enquiry, discussing a potential project, or providing a service
Legal basis: Legitimate interests / contract


Comments

  • Name

  • Email address

  • Comment content

  • IP address

  • Browser user agent (for spam protection)

Legal basis: Legitimate interests (spam prevention and site functionality)


b) Information collected automatically

Cookies & website analytics
I use essential cookies for basic site functionality and may use anonymised analytics cookies to understand website performance.

These may collect:

  • Pages visited

  • Browser type

  • Device information

  • Time spent on the site

Purpose: Improving the website and user experience
Legal basis: Consent (for non-essential cookies)

You can manage cookie consent at any time through the cookie banner or settings.


c) Embedded and third-party content

Pages may include:

  • Vimeo or YouTube videos

  • Instagram embeds

  • Google Fonts

  • Third-party portfolio or project tools

These services may collect data about you, use cookies or track interactions as if you visited their site directly.

Legal basis: Legitimate interests / Consent (depending on cookie type)


d) Media uploads 

If you upload images, avoid including location data (EXIF GPS).
Visitors can download and extract this information.


3. How I Use Your Data

I may use your information to:

  • Respond to enquiries

  • Provide a quote or begin a project

  • Maintain and improve the website

  • Protect the site from spam and security risks

  • Fulfil legal obligations

I do not use your data for automated decision-making, behaviour profiling, or marketing without your explicit consent.


4. Who I Share Information With

I only share data with trusted third-party providers who help operate the website or deliver services:

  • Website hosting provider

  • Email provider

  • Analytics tools (e.g., Google Analytics, Plausible, etc.)

  • Spam protection service (e.g., Akismet)

  • Content Delivery Networks for fonts or scripts

  • Any lawful request from authorities (rare)

These providers may be located outside the UK/EEA. Where they are, appropriate safeguards (such as Standard Contractual Clauses) are used.

I never sell your personal information.


5. Cookies

The site uses essential and optional cookies.

Essential cookies:
Required for the website to function (security, preferences, login state).

Optional cookies:
Analytics, performance or marketing cookies (only active with your consent).

You can:

  • Accept or reject non-essential cookies

  • Change your cookie preferences any time

  • Clear cookies via browser settings

A full cookie breakdown can be added to your site’s cookie banner if you need one.


6. Data Retention

  • Contact form enquiries: kept up to 12–24 months for reference or until no longer needed

  • Email correspondence: kept as long as reasonably required for business records

  • Comments: stored indefinitely unless you request deletion

  • Analytics data: anonymised and retained according to the analytics provider’s policy

  • Client project files: retained only for as long as needed for ongoing work, archiving or portfolio use (where consented)

I keep data only as long as necessary for the purpose it was collected.


7. How Your Data Is Protected

I take reasonable technical and organisational measures to protect your information, including:

  • Secure hosting

  • Strong passwords and access controls

  • SSL encryption

  • Limited access to personal data

  • Regular updates and security maintenance

However, no website can guarantee absolute security.


8. Your Rights Under UK GDPR

You have the right to:

  • Access your personal data

  • Correct inaccurate information

  • Request deletion (“right to be forgotten”)

  • Object to processing

  • Restrict processing

  • Request data portability

  • Withdraw cookie or email consent at any time

  • Make a complaint to the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact me at the email above.


9. Links to Other Websites

My website may contain links to external sites.
I am not responsible for their content, privacy practices or data handling.


10. Changes to This Policy

I may update this Privacy Policy from time to time to reflect changes in the website, legal requirements or business practices.
The date at the top will always show the latest update.