Privacy Policy

Last updated: 15 December 2025

This Privacy Policy explains how Estetiko (“we”, “us”, “our”) collects, uses and protects your personal data when you visit our website at https://estetiko.co.uk (“the Site”) or contact us about our services.

By using the Site, you agree to the terms of this Privacy Policy.

1. Who we are

Estetiko provides bespoke joinery, furniture and upholstery services. We operate this website to showcase our work and allow potential clients and partners to contact us.

If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us by email using the contact details published on the Site (for example, on the Contact page).

2. Personal data we collect

We may collect and process the following categories of personal data:

Information you provide directly

When you contact us (for example via a contact form or email), you may provide:

• Your name

• Your email address

• Your phone number (if you choose to share it)

• Your company name and role (if relevant)

• Project details and any other information you include in your message

Information collected automatically

When you visit the Site, certain information may be collected automatically, such as:

• IP address and approximate location

• Browser type and version

• Device type and operating system

• Pages visited, time and date of visit, time spent on each page

• Referring website or source

This is usually collected through cookies and similar technologies (see Cookie Policy below).

3. How we use your personal data

We use your personal data for the following purposes:

• To respond to your enquiries and requests

• To prepare and send proposals or quotations for our services

• To manage our relationship with you as a client, supplier or partner

• To operate, maintain and improve the Site

• To keep internal records (for example for administration and accounting)

• To comply with legal obligations and to handle disputes or claims, if any

We only use your personal data where we have a lawful basis to do so.

4. Legal bases for processing

Depending on the context, we may process your personal data on one or more of the following legal bases:

• Performance of a contract – where it is necessary to take steps at your request prior to entering into a contract, or to perform an agreement with you.

• Legitimate interests – where we have a legitimate business interest in using your data (for example, to respond to enquiries, manage projects or improve the Site) and this interest is not overridden by your rights.

• Consent – where you have given explicit consent for specific processing (for example, certain types of communication, where required by law). You can withdraw your consent at any time.

• Legal obligation – where we are required to process your data in order to comply with applicable laws and regulations.

5. How we share your data

We do not sell your personal data. We may share it only with:

• Service providers who help us operate our business (for example, website hosting, IT support, email or analytics providers).

• Professional advisers (for example, accountants or legal advisers), where necessary.

• Project partners such as contractors or designers, but only where this is necessary to manage or deliver a project you are involved in.

• Public authorities or regulators, if we are legally required to do so.

Any third parties who process data on our behalf are required to keep it secure and to use it only for the purposes we specify.

6. Data retention

We keep your personal data only for as long as is reasonably necessary for the purposes described in this Privacy Policy, including:

• For the duration of any active enquiry, proposal or project

• For a reasonable period after a project or enquiry, in case of follow-up questions or future work

• For as long as required by law (for example, accounting and tax requirements)

When the data is no longer needed, we will delete it or anonymise it safely.

7. Your rights

Depending on the law that applies to you (for example, UK GDPR / EU GDPR), you may have some or all of the following rights in relation to your personal data:

• The right to access the personal data we hold about you

• The right to have inaccurate or incomplete data corrected

• The right to request deletion of your data in certain circumstances

• The right to request restriction of processing in certain circumstances

• The right to object to processing based on legitimate interests

• The right to data portability, in some situations

To exercise any of these rights, please contact us by email using the contact details on the Site. We may need to verify your identity before responding.

You may also have the right to lodge a complaint with a data protection authority if you are unhappy with how we handle your personal data.

8. Security

We take reasonable technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, alteration or disclosure. However, no system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.

9. Third-party websites

The Site may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of such third-party sites. We recommend that you read their privacy policies before providing any personal data to them.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. You should check this page occasionally to ensure you are happy with any changes.

If we make material changes, we may also provide a more prominent notice on the Site.