Privacy policy

Last updated 3 October 2026

This policy covers the details you give Box & Beam Joinery through the quote form on this site, by email or over the phone. In short:

• We use your details to reply to you and to price your job.
• We never sell them, and we do not pass them to lead-generation companies.
• Asking for a quote does not put you on a marketing list.
• If your enquiry does not turn into work, we delete it after 12 months.
• Email enquiries@boxandbeam.co.uk at any time to see or delete what we hold about you.

Back to the quote form

Who we are

Box & Beam Joinery provides joinery and carpentry services across Newcastle upon Tyne and Northumberland, and is based in Morpeth. For data protection purposes the data controller is Box&Beam Joinery Ltd (company number 17497782).

You can reach us at enquiries@boxandbeam.co.uk or on 0191 743 3002.

What we collect

When you send a quote form we collect the service you are asking about, your area, your name, your email address and your phone number if you choose to give it. The main form also takes anything you write in its message box, and the landlords form asks how many properties you manage instead. Phone is optional and the form says so. The form also notes which page you sent it from and the date and time. It does not keep your IP address.

Our host also records standard server logs, including IP addresses, for security and to keep the site running.

Why we collect it, and our lawful basis

We use your details to answer your enquiry, to arrange a visit if one is needed, and to send you a quote. The lawful basis is that you have asked us to do something before a possible contract, namely to look at your job and price it. If we go on to do work for you, we keep records to perform the contract and to meet our tax and accounting obligations, which the law requires.

You do not have to give us your details, but we cannot reply or price a job without a way to reach you. Your name, your email address, where the job is and what kind of work it is are the minimum. We do not make any automated decisions about you.

We never sell your details, and we do not pass them to lead-generation companies. If another trade works on your job with us, we share only what they need to do their part. We do not add you to a marketing list because you asked for a quote. If we ever want to send you marketing, we will ask first.

Who sees it, and where it goes

Enquiries are read by the person who will price the job and do the work. The web designer who looks after this site for us, Luke Duff Web Design, can also see the copies saved on the website while maintaining it, and uses them for nothing else. When you send the form, two things happen.

First, your enquiry is emailed to our inbox. That email is sent through Site Mailer, an email service run by Elementor Ltd, the company that makes the software this site is built with. Elementor handles the email so that it reaches us, and Site Mailer also receives the type of browser used to send the form. The site keeps a short record of each email it sends, namely who it went to, the subject and the reply address, which is your email address, for 30 days, then deletes it automatically. It does not keep the message itself.

Second, a copy of your enquiry is saved in the website’s own database, so that it is not lost if an email goes astray. The site deletes that copy automatically 12 months after it arrives.

We use ordinary business services to run the site and our email, and those providers process data on our behalf under contract.

The site is looked after by our web designer using Elementor’s management tools (Manage, and tools that let the designer’s software work on the site through Elementor). These can reach the website’s data, including enquiries saved on it, so that the site can be maintained. Elementor Ltd provides them and processes that access on our behalf.

The website is hosted by DreamHost, a US hosting company, so the website, its server logs and the copies of enquiries saved on it are held on DreamHost’s servers. Our email is Microsoft Outlook, supplied through GoDaddy, so the enquiry emails we receive are held by Microsoft. Our domain name is registered with GoDaddy, which does not handle your enquiries.

How long Elementor keeps the emails it sends for us is set out in Elementor’s own privacy policy.

Elementor Ltd is an Israeli company, and the UK recognises Israel as protecting personal data to an adequate standard, so your details can go there without extra safeguards. If Elementor or the providers above hold them anywhere else outside the UK, it must be under safeguards UK law accepts, such as the UK’s standard contract clauses.

The site also uses tools for search listings (Yoast SEO), for faster pages (WP Fastest Cache) and for making photographs smaller (Image Optimizer, which sends the photos we upload to Elementor to be compressed). None of these handles information about you.

Our quote forms are protected by Google reCAPTCHA v3, which checks that a form is being sent by a person and not by a spam program. To do that it collects information such as your IP address and how you use the page, and sends it to Google. Google’s Privacy Policy and Terms of Service apply. We rely on our legitimate interest in keeping spam out of our inbox.

If you allow analytics cookies, the site uses Google Analytics, a service from Google, to show us how people find and use it: which pages are visited, the type of device and browser, the rough area a visit comes from and how the visitor arrived. It does not tell us who you are, and we do not use it for advertising. Google may handle this information in the United States; the UK allows that under the UK-US data bridge, which Google is part of. The cookies section below explains when it runs.

How long we keep it

Enquiries that do not become work are deleted after 12 months. That covers the email in our inbox, which we clear ourselves, and the copy saved on the website, which the site deletes automatically. Records relating to work we have carried out are kept for 6 years, which is the period we may need them for tax, insurance and any claim about the work.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to limit how we use it, ask for it in a form you can take elsewhere, or object to us holding it. Where something rests on your consent, such as your cookie choice, you can change your mind at any time. Email us and we will deal with it within one month. If you are not happy with how we have handled it you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies and storage on your device

This site does not set advertising cookies. It sets the cookies it needs to work, and Google Analytics cookies only if you allow them. This is everything it stores on your device.

cookiez-user-consent is a cookie that remembers whether you accepted or refused cookies, so the banner does not ask you again on every page. It lasts 180 days.

_ga and _ga_MNYXX9NF3X are Google Analytics cookies. They are only set if you choose Accept on the cookie banner, and they let Google Analytics count visits and tell new visitors from returning ones. They last up to two years. Until you accept, and if you refuse, Google Analytics does not load at all, so nothing about your visit is sent to Google. If you accept and later change your mind, the site stops Google Analytics and deletes these cookies. Google keeps analytics data for the period set in our Google Analytics account, which is at most 14 months. The lawful basis for analytics is your consent.

_GRECAPTCHA is set by Google reCAPTCHA on pages with a quote form, to protect the form from spam. The form needs it to work safely. It lasts up to six months.

WordPress may set a small number of functional cookies, for example if you log in.

When you answer the cookie banner, a record of your answer is sent to Elementor, so that there is proof of what you chose. The record holds your answer, the page you were on and the type of browser you use.

How long Elementor keeps these records is set out in Elementor’s own privacy policy.

You can change your answer at any time with the Cookie settings link at the foot of every page.

Legal information

Box & Beam Joinery is the trading name of Box&Beam Joinery Ltd, a company registered in England and Wales, company number 17497782. Email enquiries@boxandbeam.co.uk, phone 0191 743 3002. Not registered for VAT, so the prices on this site have no VAT to add.

Registered office: Collingwood Buildings, 38 Collingwood Street, Newcastle upon Tyne, NE1 1JF. This is our registered and postal address, not a workshop or a place to visit.

Changes

If this policy changes we will update the date at the top.