1. Introduction

End Grain (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our website https://theendgrain.co.uk (“Site”), contact us, or engage with any of our services (bespoke joinery, furniture, kitchens, etc.).

2. Data Controller & Contact Details

We are the data controller for your personal data.

Company: End Grain
Contact Email: info@theendgrain.co.uk
Address: Unit 20, Tavis House Industrial Estate, Pegasus Way, Haddenham, HP17 8ZD, United Kingdom
Phone: 020 8561 4909

3. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity & Contact Data: name, email address, telephone number, postal address.

  • Project and Order Data: information about your project such as preferences, measurements, photos/plans, bespoke furniture/design brief.

  • Communications Data: correspondence when you contact us (via email, phone, forms), feedback, enquiries.

  • Technical / Usage Data: IP address, browser type/version, device type, operating system, referring/exit pages, pages visited, timestamps, interaction with the Site, etc.

  • Cookies and Tracking Data: via cookies or similar technologies for analytics, site performance, marketing.

  • Marketing Preferences: whether you consent to receive marketing messages, newsletters, offers.

4. Lawful Basis for Processing

We rely on one or more of the following lawful bases under UK GDPR:

  • Performance of a contract with you, e.g. to deliver services you have requested.

  • Legitimate interests, such as improving our website, maintaining efficient operations, analysing how customers use our services, promoting our business (provided your rights are not overridden).

  • Consent, where required (for example for marketing communications or non-essential cookies).

  • Legal obligations, such as tax, compliance with other laws.

5. How We Use Your Personal Data

We use your data for purposes including:

  • Providing and delivering our services: bespoke joinery, furniture, kitchens, etc.

  • Handling enquiries, quotes, orders, scheduling, site visits, project management.

  • Processing payments, invoicing, billing.

  • Operating and improving our website, including analytics and performance monitoring.

  • Sending marketing communications if you have consented.

  • Responding to your communications, requests, and feedback.

  • Complying with legal or regulatory requirements; enforcing our terms.

6. Sharing Your Data

We may share your personal data with:

  • Suppliers, contractors, or trades-people involved in fulfilling your orders or projects (e.g. furnituremakers, joiners, delivery services).

  • Service providers who support our operations (e.g. IT and hosting providers, payment processors, analytics providers).

  • Marketing or advertising partners, if you have opted in.

  • Legal, regulatory or governmental bodies if required by law.

  • In connection with a business change (merger, acquisition, sale), subject to confidentiality and legal protections.

All third-parties will be required to maintain secure handling of data in accordance with data protection laws and only process the data for purposes we permit.

7. Cookies & Similar Technologies

  • We use cookies and similar tracking technologies to enhance user experience, site functionality, analyze how visitors use our Site, and for marketing or analytics.

  • Some cookies are essential for site operation; non-essential ones (analytics, marketing) will only be used with appropriate consent if required by law.

  • You can control or disable cookies through your browser settings. Be aware that disabling some cookies may affect site functionalities.

8. International Transfers

If personal data is transferred outside the UK (or EEA), we will ensure that appropriate safeguards are in place (e.g. standard contractual clauses) or other means permitted under UK GDPR, so that your data is protected to a sufficient standard.

9. Data Retention

We keep your personal data only as long as necessary for the purposes for which it was collected, including any project completion, legal, accounting, tax obligations, or resolving disputes. After that, data will be securely deleted or anonymised.

10. Your Rights

Under UK GDPR, you have certain rights in relation to your personal data:

  • Right of access – you can request a copy of your personal data.

  • Right of rectification – correct inaccurate or incomplete data.

  • Right to erasure (“right to be forgotten”) in certain circumstances.

  • Right to restrict processing in certain situations.

  • Right to object to processing (e.g. for marketing or legitimate interests).

  • Right to data portability, if applicable.

  • Right to withdraw consent where consent is the legal basis for processing.

To exercise any of these rights, please contact us at info@theendgrain.co.uk or via postal address above.

11. Security

We implement appropriate technical and organisational measures to secure your personal data against unauthorised or unlawful processing, accidental loss, disclosure, damage or destruction. While we strive to protect your data, no internet transmission or storage is completely secure; we cannot guarantee absolute security.

12. Children

Our services and Site are not directed to children under the age of 16. We do not knowingly collect personal data from children. If we become aware of such collection, we will take steps to remove the data as soon as possible.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or site functionality. We will post revisions on the Site with a new “Last Updated” date. Continued use of the Site after such changes constitutes acceptance of the updated policy.

14. Complaints & Supervisory Authority

If you believe we have not complied with this Privacy Policy or UK GDPR, you may contact us using the contact details above. You may also lodge a complaint with the UK’s data protection supervisory authority:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: https://ico.org.uk