We are committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard the data you provide when you use our website or contact us regarding our services.
We comply with all relevant data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We will only process your personal data in a lawful, fair and transparent manner.
This policy applies to:
Visitors browsing our website
Individuals who contact us by phone, email, website forms or social media
Customers who proceed with a design, quotation or installation project
By using our website or submitting your details to us, you acknowledge that you have read and understood this Privacy Policy.
2. Who We Are
This Privacy Policy is issued on behalf of John Dobbin, the data controller responsible for the handling and protection of your personal information.
.
Business Name: John Dobbin
Business Type: Bespoke kitchen, bathroom, bedroom and fitted furniture design & installation Head Office / Workshop Location: Dumbarton, Scotland
2.1 How to Contact Us About Data Protection
If you have any questions about this policy, the data we hold, or wish to exercise your privacy rights, you can contact us using the details below:
Email: sales@johndobbin.co.uk
Phone: +44 1389 761944
Postal Contact: 8 Bankend Rd, Dumbarton G82 2RT, United Kingdom
For legal purposes, we are the “data controller” which means we decide how and why your personal data is collected and processed.
3. What Data We Collect
We collect different types of personal data depending on how you interact with us – for example, when browsing our website, making an enquiry, or proceeding with a design or installation project.
We only collect the information we need in order to provide our services, respond to enquiries, and operate our business lawfully.
3.1 Personal Data You Provide to Us
This is the information you choose to give us when you contact us, complete a form, request a quote or communicate with us directly. This may include:
Name
Email address
Phone number
Postal address and/or postcode
Details about your project or enquiry
Information shared during calls, emails or consultations
Images, plans or documents uploaded through our website or emailed to us
If you become a customer, we may also collect:
Installation address (if different from billing address)
Preferred materials, design specifications and measurements
Payment details required to process invoices (we do not store card information)
3.2 Data Collected Automatically When You Use Our Website
When you browse our website, certain data is collected automatically through cookies, analytics tools and server logs. This may include:
IP address
Browser type and version
Device type and operating system
Pages visited and time spent on our website
Referring website links or search terms
Cookie and tracking identifiers (e.g. Google Analytics)
This information helps us understand how visitors use our website, improve user experience, and ensure the site is functioning securely.
We do not use this data to personally identify you unless it is combined with information you provide directly (e.g. through a form).
3.3 Sensitive Data
We do not intentionally collect sensitive personal data (such as medical, religious or biometric information). If such data is ever provided voluntarily, it will be processed only with explicit consent.
4. How We Use Your Data
We only use your personal data when we have a lawful reason to do so. This may be because you have given us consent, because we need the information to fulfil a contract with you, or because it is in our legitimate business interests.
Below is a clear explanation of why we collect your data and the legal basis we rely on for each purpose.
4.1 To Respond to Enquiries and Provide Quotes
When you contact us through our website, by phone, email or social media, we use the information you provide to answer your questions, assess your project, and supply a quotation if requested.
4.2 To Arrange Home Visits, Design Consultations or Installation Work
If you decide to proceed with a project, we will use your contact details, address and project information to schedule site visits, prepare designs, and carry out the work you have requested.
4.3 To Send Project Updates, Follow-Up Communication or Service Information
We may contact you with important updates about your installation, booking confirmations, reminders, invoices, aftercare advice or similar communication directly related to your enquiry or project.
4.4 To Improve Our Website and Customer Experience
We use anonymous analytics data to understand how visitors use our website, diagnose issues, review performance, and make improvements to usability and security.
4.5 For Internal Record Keeping and Business Administration
We may store records of enquiries, quotes, invoices and project details for accounting, tax and legal compliance purposes.
4.6 With Your Consent – Email Updates or Optional Marketing
If you choose to opt in, we may send occasional news, updates or marketing messages about our services. You can withdraw consent at any time by contacting us or using an unsubscribe link.
5. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to help us improve performance, analyse visitor behaviour and provide a better browsing experience. Cookies are small text files that are stored on your device when you visit a website.
We use cookies for the following purposes:
To ensure the website functions correctly
To understand how visitors use our website (for example, which pages are viewed and how long users stay)
To improve site performance, layout and accessibility
To help us identify and resolve technical issues
To measure the effectiveness of our online content or campaigns
5.1 Tools We Use
We may use the following third-party tools and analytics services:
Google Analytics – to collect anonymous statistical data about website traffic
Form tracking tools – to monitor enquiries submitted through our website
Cookie consent banner or plugin – to record your preferences
These tools may store cookies on your device. They do not allow us to personally identify you unless you submit your details through a form.
5.2 Managing Cookies
When you visit our website for the first time, you will see a cookie notice that allows you to accept or manage cookies. You can change your preferences at any time by adjusting your browser settings or clearing stored cookies.
Most web browsers allow you to:
Block cookies entirely
Allow only essential cookies
Delete existing cookies
Receive a warning before a cookie is stored
If you disable cookies, some features of the website may not function as intended.
5.3 More Information
For full details on the cookies we use, including names, expiry times and purposes, please refer to our Cookie Policy (if published separately).
If you would like guidance on managing cookies, visit: [www.allaboutcookies.org]
6. Data Sharing & Third Parties
We do not sell, trade, or share your personal data with third parties for marketing purposes. Your information will only ever be shared when it is necessary to deliver our services, comply with the law, or operate our business securely.
We may share your data with trusted third parties in the following situations:
6.1 Service Providers Working on Our Behalf
We may share limited personal data with professional partners who help us run our business, such as:
:
Website hosting and security providers
Email service providers (e.g. Outlook, Gmail)
Analytics tools (e.g. Google Analytics)
IT and data backup services
These companies process data only under our instruction and are not permitted to use it for their own purposes.
6.2 Subcontractors or Suppliers (If You Proceed with a Project)
If part of your installation requires a specialist trade, delivery service, or manufacturer (for example, worktop suppliers or appliance distributors), we may need to share basic contact and delivery details to complete your order.
We only share the minimum information required.
6.3 Legal, Regulatory or Safety Requirements
We may share data where required to:
Comply with legal, tax or regulatory obligations
Respond to lawful requests from authorities
Protect our business from fraud or security risks
6.4 Payment Processing
If payments are processed electronically, you may be redirected to a secure third-party provider. We do not store or have access to your full card details.
6.5 International Transfers
We do not routinely transfer your personal data outside the UK. If this ever becomes necessary (e.g. cloud storage hosted overseas), we will ensure that appropriate UK GDPR safeguards are in place.
7. How We Store & Protect Your Data
We take data security seriously and use industry-standard measures to ensure your personal information remains safe.
7.1 Secure Servers
All data you share with us is stored on encrypted and security-compliant servers designed to prevent unauthorised access, loss, or misuse.
7.2 Restricted Access
Only authorised team members who need your information to perform essential business tasks (such as customer support, account management, or billing) are granted access. Every access point is monitored and logged.
7.3 Data Retention Period
We retain your data only for as long as necessary to fulfil the purpose it was collected for, including legal, regulatory, and accounting requirements.
For example, data related to financial transactions may be kept for up to 7 years to comply with tax and auditing laws, after which it is safely deleted or anonymised.
7.4 Ongoing Protection
We regularly review our data handling, update security protocols, and run checks to prevent breaches, cyber-attacks, and unauthorised use.
8. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation (UK GDPR), you have full control over how your personal data is used. You are entitled to the following rights:
8.1 Right to Access
You can request a copy of the personal data we hold about you at any time. This is often referred to as a “Subject Access Request”.
8.2 Right to Rectificatio
If any information we hold about you is inaccurate, incomplete, or outdated, you can ask us to correct or update it.
8.3 Right to Erasure (“Right to Be Forgotten”)
You may request that we delete your data where:
It is no longer required for the purpose we collected it for
You withdraw consent (where consent was the basis for processing)
You object to processing and there is no overriding legitimate interest
8.4 Right to Withdraw Consent
If we process your data based on consent (e.g., email marketing), you can withdraw that consent at any time – and we will stop using your data for that purpose.
8.5 Right to Object to Processing
You can object to how we use your data for:
Marketing purposes
Profiling
Legitimate interest processing (unless we have a strong lawful basis to continue)
8.6 Right to Restrict Processing
Instead of deletion, you may request that we temporarily pause the use of your data in certain situations.
8.7 Right to Data Portability
You can request a copy of your data in a structured, commonly used, machine-readable format – or ask us to transfer it to another service provider.
8.8 Right to Lodge a Complaint
If you believe your data has been mishandled, you have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection authority.
Website: ico.org.uk
9. Data Retention – How Long We Keep Your Information
We only keep your personal data for as long as it is genuinely needed for the purpose it was collected. Below is a clear breakdown of how long we store different types of information:
Enquiry & Quote Request Data
If you contact us for a quote or general enquiry but do not become a client, we will retain your details for up to 12–24 months. This allows us to respond to follow-up questions, track service interest, and improve our customer support. After this period, your data is securely deleted.
Client Project & Service Data
If you proceed with our services, we are legally required to retain project, billing and communication records for up to 6 years. This is to comply with UK tax, accounting, insurance, and audit regulations.
Marketing & Newsletter Data
If you sign up to receive updates or marketing emails, we will store your information until you unsubscribe or request deletion. You can opt out at any time via the link in every email.
Website Analytics & Cookie Data
Non-identifiable analytics data (e.g., page views, session duration) may be retained for up to 26 months, depending on the tool used (such as Google Analytics).
Data Deletion & Anonymisation
Once retention periods expire, your data will either be:
✅ Permanently deleted, or
✅ Fully anonymised so it can no longer identify you
10. Links to External Websites
Our website may contain links to third-party websites, services, or resources that are not operated or controlled by John Dobbin. These external sites have their own privacy policies, cookie practices, and terms of use.
We are not responsible for the content, security, or data handling practices of any third-party website you choose to visit.
We strongly recommend that you review the privacy policy of every website you access through our links before submitting any personal information.
By following a link away from our website, you acknowledge that you do so at your own discretion and that this Privacy Policy no longer applies once you leave our site.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updates will be published on this page, and the “Last Updated” date at the bottom will be revised accordingly.
If the changes are significant or affect how we use your personal data, we may also notify you directly by email or via a notice on our website before the update becomes effective.
We encourage you to review this page periodically to stay informed about how we protect your information.
Last Updated: [10 November 2025]
12. Contact Information for Privacy Requests
If you have any questions about this Privacy Policy, or if you wish to request access, correction, deletion, or restriction of your personal data, you can contact us using the details below:
Email: sales@johndobbin.co.uk Phone: +44 1389 761944 Postal Address:
John Dobbin
8 Bankend Rd, Dumbarton G82 2RT, United Kingdom
Dumbarton, Scotland
Please include your full name, contact details, and a clear description of your request so we can process it efficiently.
We aim to respond to all valid requests within 30 days, as required under UK GDPR.
