Privacy Policy
Last Updated: 14/01/2026
At Rafa’s Woodwork (“we”, “us”, “our”), we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you visit https://rafaswoodwork.com (the “Website”), interact with our content, or purchase our products.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Business name: Rafa’s Woodwork
Website: https://rafaswoodwork.com
Contact email: info@rafaswoodwork.com
We are the data controller responsible for your personal data.
2. Information We Collect
We may collect the following types of personal data:
a) Information you provide to us
-
Name
-
Email address
-
Postal and billing address
-
Phone number
-
Payment information (processed securely by third-party providers; we do not store card details)
-
Account information (if you create an account)
-
Messages sent via contact forms, email, or social media
-
Newsletter subscriptions, survey entries, or promotions
b) Comments
When visitors leave comments, we collect the data shown in the comments form, the visitor’s IP address, and browser user agent string to help with spam detection.
c) Automatically collected information
-
IP address
-
Browser type and device information
-
Pages visited, links clicked, and time spent on the Website
-
Referral sources
-
Cookies and similar technologies
3. How We Use Your Information
We use your information to:
-
Operate and maintain the Website
-
Process and fulfil orders
-
Deliver digital products
-
Respond to enquiries and provide customer support
-
Send service-related communications
-
Send marketing emails (only where consent is given)
-
Improve our Website, content, and offerings
-
Monitor performance and analyse traffic
-
Prevent fraud and enhance security
-
Comply with legal and tax obligations
4. Legal Basis for Processing
We process personal data under the following lawful bases:
-
Contractual necessity – to fulfil orders and provide services
-
Consent – for marketing communications and cookies
-
Legal obligation – for accounting and regulatory purposes
-
Legitimate interests – to improve services, secure the Website, and grow our business
5. Cookies
We use cookies to:
-
Enable essential site functionality
-
Remember preferences
-
Understand how visitors use the Website
-
Support marketing and analytics (where consent is provided)
If you leave a comment, you may opt in to saving your name and email address in cookies for convenience.
You can control or disable cookies through your browser settings. For more details, please see our Cookie Policy.
6. Embedded Content from Other Websites
Articles on this Website may include embedded content (e.g., videos, images, articles). Embedded content behaves as if you have visited the external website. These sites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with their content.
7. Analytics
We use services such as Google Analytics to collect information about Website usage, including pages visited, links clicked, and time spent on the site. This helps us understand user behaviour and improve the Website.
8. Affiliate Links
Some pages may contain affiliate links. If you click an affiliate link and make a purchase, we may earn a commission at no extra cost to you. These links may use cookies or tracking to attribute sales.
9. Social Sharing Features
The Website may offer social sharing tools (such as “Like” or “Share” buttons). These features may collect your IP address and which page you are visiting and may set cookies to function properly. Your interactions are governed by the privacy policies of the respective social platforms.
10. How We Share Your Information
We do not sell your personal data.
We may share information with trusted third parties who assist us in operating the Website and business, including:
-
Payment processors
-
E-commerce and hosting platforms
-
Email marketing providers
-
Shipping and fulfilment services
-
Analytics and security services
These providers only receive data necessary to perform their services and are required to protect it.
11. Data Security and Retention
We take reasonable technical and organisational measures to protect your data from loss, misuse, unauthorised access, disclosure, alteration, or destruction.
We retain personal data only as long as necessary to fulfil the purposes described in this policy, including legal, accounting, and reporting requirements.
12. Your Data Protection Rights (UK & EEA)
You have the right to:
-
Access your personal data
-
Request correction of inaccurate data
-
Request erasure of your data
-
Restrict or object to processing
-
Withdraw consent at any time
-
Request data portability
-
Lodge a complaint with the Information Commissioner’s Office (ICO)
ICO website: https://ico.org.uk
13. Email Marketing
If you opt in, we may send you updates, promotions, and news. You can unsubscribe at any time using the link in our emails or by contacting us.
14. Children’s Information
This Website is not intended for children under 16. We do not knowingly collect personal data from children.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Last Updated” date.
16. Contact Us
If you have any questions about this Privacy Policy or how your personal data is handled, please contact:
