Privacy notice

1. Who we are and how to contact us

Smiley Bespoke (bespoke timber structures) is the data controller for the information described here — meaning we decide why and how it is used. You can reach us at freddiesmiley@hotmail.com or 07401046334.

2. What we collect, and how

The only personal information we ask you for is what you type into the enquiry form on our contact page. There is no tracking on this site — but like every website, our host's servers do record technical details of each request, including your IP address. That is covered below.

If you send an enquiry, we receive:

• Your name and email address — required, because we cannot reply without them.
• Your phone number and location or postcode — optional. A postcode helps us judge travel and access before quoting.
• Details about the project — the type of build, your budget range, your timeframe, whether you are a family, school or holiday site, how you heard about us, and anything you write in your own words.

Everything except your name and email is optional. If you would rather not fill in a form at all, email or ring us instead — the details are above, and you will get the same answer.

3. Why we use it, and our lawful basis

We use it to answer your enquiry and, if you go ahead, to quote for and carry out the work. We do not sell it, and we do not use it to advertise to you.

Our lawful basis is Article 6(1)(b) of the UK GDPR — taking steps at your request before entering into a contract. Where an enquiry does not lead to work, we rely on Article 6(1)(f), legitimate interests: our interest in keeping a record of who asked us for what, so we can pick up the conversation if you come back to us. We have considered whether that outweighs your privacy and concluded it is limited, expected, and something you can object to at any time (see below).

We do not send marketing. You will not be added to a mailing list, and we will not contact you about anything other than the enquiry you sent.

4. Who else sees it

Your enquiry goes to us. It is not sold, and it is not shared with anyone for their own purposes. These suppliers handle it on our behalf, under contract, and only to provide their service to us:

• Cloudflare, who host this website. Like every web host, their servers handle each request and keep short-term technical logs, which include IP addresses, for security and to keep the site running.
• Resend (Plus Five Five, Inc., USA), who carry the enquiry from this website to our inbox. They process it only in order to send that one message.
• Microsoft, who host the mailbox it arrives in and where we keep it while we are dealing with you.
• GitHub, where this website's content is stored. If we later publish a photo of your project, that photo is kept there.

5. Sending information outside the UK

Some of those suppliers are based in, or use servers in, the United States. Where information leaves the UK it is protected by the safeguards UK data protection law requires — in practice the UK's International Data Transfer Agreement or Addendum, or the supplier's certification under the UK extension to the EU–US Data Privacy Framework. Ask us and we will tell you which applies to which supplier, and give you a copy.

6. Showing your project on this site

If we build something for you, we may want to show it in our Our Work section — photographs, the type of build and the county it is in. We rely on legitimate interests for this: showing real work is how a business like ours is judged. We will not publish your name, your address or anything that identifies exactly where you live, and we will not publish a quote from you without asking first.

If you would rather your project did not appear, just say so — before, during or years after the work. Email us and we will take it down. You do not need a reason. One thing to be straight about: our website's content is version-controlled, so while we can remove a photograph from the live site quickly, older copies may persist in that technical history. Tell us if that matters to you and we will discuss what we can do.

7. How long we keep it

• Enquiries that do not lead to work: up to 2 years, then deleted. That is long enough for a seasonal project to come back around.
• Enquiries that become a job: for the life of the project and 6 years afterwards, because we may need the records for accounting, insurance or a warranty question.
• Server logs held by our host: kept for a short period under their published policy. Ask us and we will point you to it.

8. Cookies and tracking

Browsing this site sets no cookies, and there is no tracking of any kind. No analytics, no advertising pixel, no tag manager, no social media embed. The fonts are served from our own site rather than a font network, so loading a page does not tell anyone else you visited. That is why you are not asked to accept anything.

Two small exceptions, neither of which tracks you. The sign-in our own staff use to update this website sets one strictly necessary cookie to keep that sign-in secure — you will never encounter it as a visitor. And our host Cloudflare asks browsers to report network errors back to it, so faults get noticed; no analytics or profile is built from this.

Our cookie policy lists that cookie in full, with its purpose and how long it lasts.

9. Keeping it safe

Article 32 of the UK GDPR requires appropriate security, so rather than say we take it seriously, here is what is actually in place:

• The whole site is served over an encrypted connection (HTTPS), so what you type into the form cannot be read in transit.
• The form posts your details rather than putting them in the web address, so they never appear in your browser history or in a server's access log.
• We never ask for payment details on this website, so there are none to lose. Nobody from us will ever email you asking for card or bank details in reply to an enquiry — if you receive such a message, it is not from us.
• Access to the enquiry mailbox and to the tools that run this site is limited to us and protected by individual sign-ins.
• We keep no database of customers on this website. Enquiries live in an email inbox and, for jobs we take on, in our ordinary business records.

No system is perfect. If something did go wrong and it put you at risk, we would tell you, and we would report it to the Information Commissioner's Office within 72 hours where the law requires it.

10. Your rights

Over the information we hold about you, you have the right to:

• Be told what we hold and why — this page, and ask us any time.
• Get a copy of it.
• Have it corrected if it is wrong or incomplete.
• Have it deleted. If you ask us to delete an enquiry, we will, unless we still need it for a job we are doing for you or for our legal and accounting obligations.
• Restrict how we use it, while a question about it is being sorted out.
• Ask for it in a portable format, where that applies.

You also have the right to object. Where we rely on legitimate interests — that is, keeping a record of an enquiry that did not lead to work — you can object at any time and we will stop, unless we have compelling grounds not to. Just email freddiesmiley@hotmail.com and say so. You do not need to give a reason, and it costs you nothing.

To use any of these, email us. We will reply within one month, and there is normally no charge.

11. Is any of it required?

Not by law, and not by any contract. Your name and email are the only things the form itself insists on, simply because we cannot write back without them — nothing bad happens if you would rather not give the rest. If you would rather give us nothing at all, ring us instead.

12. Automated decisions

We do not make any decision about you by automated means, and we do not profile you. Enquiries are read by a person. The form does run a simple automatic check to block spam robots; if it ever wrongly stopped a real message, email or ring us and we will pick it up.

13. Children

This website is aimed at adults — parents, schools, estates and holiday sites — and we do not ask children for any information. If you are under 18, please ask a parent, carer or teacher to make the enquiry.

We build for schools and for families, so it is worth being clear about photographs. We do not publish photographs of children on this website. Our Work photographs are of the structures themselves; where a person appears at all they are a distant figure in a public place, too small to recognise, and never a child. If we ever wanted to use a photograph in which someone is identifiable, we would ask them — or, for a child, the school and the parents — first and in writing, and we would not use it otherwise.

14. If you are unhappy

Please tell us first — email freddiesmiley@hotmail.com and we will try to put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at any time:

• ico.org.uk/make-a-complaint
• Helpline 0303 123 1113
• Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

15. Changes to this notice

If we change how we use personal information, we will update this page and change the date at the top. This notice was last updated on 9 September 2026.