Privacy Policy

 

Flatpack Forge (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data responsibly, in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR).

This policy explains what data we collect, how we use it, and your rights.

Who we are

Flatpack Forge
Based in Worthing, West Sussex
Email: info@flatpackforge.co.uk 

We are the data controller for the personal information we collect through our website.

What personal data we collect

We only collect the information we need to run our business and fulfil your order.

This may include:

  • Your name
  • Billing and delivery address
  • Email address
  • Phone number (if provided)
  • Order details and purchase history
  • Payment information (processed securely by third-party payment providers — we do not store card details)

If you choose to sign up to our mailing list, we will also collect:

  • Your email address
  • Your marketing preferences

How we use your data

We use your personal data to:

  • Process and fulfil your orders
  • Communicate with you about your order (e.g. confirmations, shipping updates, support queries)
  • Provide customer support
  • Comply with legal and accounting obligations
  • Send marketing emails only if you have opted in

We do not sell your data or use it for unrelated purposes.

Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases:

  • Contract – to process and deliver your order
  • Legal obligation – for record-keeping and accounting
  • Consent – for marketing emails (which you can withdraw at any time)
  • Legitimate interests – to run our business effectively and provide customer support

Marketing communications

You will only receive marketing emails from us if:

  • You have actively opted in, or
  • You are an existing customer and the emails relate to similar products (where permitted by law)

You can unsubscribe at any time by:

  • Clicking the unsubscribe link in any email, or
  • Contacting us directly

Cookies and website data

Our website uses cookies to:

  • Make the site function properly
  • Process shopping carts and checkouts
  • Understand how visitors use the site so we can improve it

Some cookies are set by third-party services such as:

  • WooCommerce
  • Payment providers
  • Website analytics tools

You can manage or disable cookies through your browser settings. Disabling some cookies may affect how the site works.

For more information, see our Cookie Policy.

Who we share your data with

We only share your data with trusted third parties where necessary, including:

  • Payment processors
  • Delivery and shipping providers
  • Website hosting and platform providers (e.g. WordPress, WooCommerce)
  • Email marketing providers (only if you opt in)

All third parties are required to handle your data securely and lawfully.

How long we keep your data

We keep personal data only for as long as necessary:

  • Order and transaction data is kept for legal and accounting purposes
  • Customer accounts remain active unless you request deletion
  • Marketing data is kept until you unsubscribe or withdraw consent

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (where applicable)
  • Object to or restrict processing
  • Withdraw consent for marketing at any time
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us at info@flatpackforge.co.uk 

Data security

We take reasonable and appropriate measures to protect your personal data, including:

  • Secure website hosting
  • Encrypted connections (HTTPS)
  • Reputable third-party services
  • Limited access to personal data

Changes to this policy

We may update this policy from time to time to reflect changes in the law or how we operate. The latest version will always be available on our website.