Last updated: 13 June 2026
CedarCraft Builds ("CedarCraft Builds", "we", "us" or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit our website at cedarcraftbuilds.co.uk, submit an enquiry, request a quotation, purchase a project package, or otherwise interact with our outdoor timber construction services. It also sets out your rights in relation to your personal data and how the law protects you.
CedarCraft Builds is operated by Manika Tamang and is based at 150A Plumstead Common Road, London, SE18 7DY, United Kingdom. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, CedarCraft Builds is the data controller responsible for your personal data. By using our website and services, you confirm that you have read and understood this Privacy Policy.
1. The Information We Collect
We collect and process several categories of personal data in the course of providing our services. The information we hold about you depends on how you choose to interact with us.
1.1 Information you provide to us
When you complete our contact or enquiry form, email us, or telephone us, you may provide us with personal information including your full name, email address, telephone number, the location of your property, the type of project you are interested in, and any details you choose to share about your garden, your requirements and your preferences. When you book a project package, additional information may be collected by our payment processor in order to complete the transaction.
1.2 Information collected automatically
When you visit our website, certain information may be collected automatically through cookies and similar technologies. This may include your internet protocol (IP) address, browser type and version, time zone setting, operating system, device information, and information about how you use our site, such as the pages you view and the links you click. Please see our Cookie Policy for full details.
1.3 Information from third parties
We may receive limited information from our payment processor confirming that a payment has been completed. We do not receive or store your full card details at any time.
2. Contact Forms and Customer Enquiries
Our website enquiry form is designed to open your own email application with your enquiry details pre-filled, so that you can review and send the message directly to us. The information you submit through an enquiry — including your name, contact details, property location, project type and message — is used solely to respond to your enquiry, prepare recommendations or a quotation, and communicate with you about a potential or active project.
We retain enquiry correspondence so that we can manage your project effectively, maintain an accurate record of what has been discussed and agreed, and respond to any follow-up questions. We do not use your enquiry information for unrelated purposes, and we do not sell or rent your personal data to any third party.
3. How We Use Your Information
We use your personal data for the following purposes:
- To respond to your enquiries and provide the information you request;
- To assess your outdoor space, prepare recommendations and produce written project specifications and quotations;
- To plan, schedule, carry out and complete construction projects;
- To process payments for project packages through our payment provider;
- To communicate with you about your project, including scheduling, updates and the completion walkthrough;
- To maintain accurate business and financial records and comply with our legal obligations;
- To improve our website, services and customer experience; and
- To resolve disputes, prevent fraud and protect our legal rights.
4. Legal Bases for Processing
Under the UK GDPR, we rely on the following legal bases to process your personal data:
- Performance of a contract: where processing is necessary to provide the services you have requested or to take steps at your request before entering into a contract;
- Legitimate interests: where processing is necessary for our legitimate business interests, such as responding to enquiries, improving our services and protecting our business, provided these interests are not overridden by your rights;
- Legal obligation: where we must process your data to comply with the law, for example retaining financial records for tax purposes; and
- Consent: where you have given clear consent, for example for certain optional cookies. You may withdraw your consent at any time.
5. Cookies
Our website uses cookies and similar technologies to make the site work, to remember your preferences and to understand how the site is used. Essential cookies are necessary for the website to function and cannot be switched off. Optional cookies are only used where you have given consent through our cookie banner. You can manage or withdraw your consent at any time by adjusting your browser settings or clearing your stored preferences. For detailed information, please read our Cookie Policy.
6. Payment Processing
Payments for our project packages are processed securely by Stripe, a third-party payment provider. When you make a payment, you are directed to Stripe’s secure, encrypted checkout. Your card details are entered directly with Stripe and are not collected, processed or stored by CedarCraft Builds. Stripe acts as an independent data controller in respect of the payment information it collects, and its handling of your data is governed by Stripe’s own privacy policy. We receive only confirmation that a payment has been made, together with limited transaction details necessary to fulfil and record your order.
7. Data Retention
We keep your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. Enquiry correspondence is generally retained for as long as needed to manage a potential or active project and for a reasonable period afterwards. Records relating to completed projects and payments are retained for the period required by UK tax and accounting law, which is typically at least six years. When personal data is no longer required, we securely delete or anonymise it.
8. How We Share Your Information
We do not sell, rent or trade your personal data. We share your information only where necessary, and only with parties who are required to keep it secure. This may include our payment processor (Stripe) to complete transactions, professional advisers such as accountants where required, and relevant authorities where we are legally obliged to disclose information. Any third parties who process data on our behalf are required to do so in accordance with applicable data protection law.
9. Data Security
We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse or alteration. Payment transactions are handled through a secure, encrypted checkout provided by our payment processor. While we take reasonable steps to safeguard your information, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are also responsible for keeping any login details or correspondence relating to your project confidential.
10. Your Rights
Under data protection law, you have a number of rights in relation to your personal data, including:
- The right to be informed about how your data is used;
- The right of access to the personal data we hold about you;
- The right to rectification of inaccurate or incomplete data;
- The right to erasure of your data in certain circumstances;
- The right to restrict processing in certain circumstances;
- The right to data portability;
- The right to object to processing based on legitimate interests; and
- Rights in relation to automated decision-making and profiling (we do not carry out such activities).
To exercise any of these rights, please contact us using the details below. We will respond to your request within the timeframes required by law. You will not normally have to pay a fee, although we may charge a reasonable fee or refuse to act on a request that is clearly unfounded or excessive.
11. Children’s Privacy
Our services are intended for adults and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
12. Links to Other Websites
Our website may contain links to third-party websites, including our payment provider. This Privacy Policy applies only to our website, and we are not responsible for the privacy practices of other sites. We encourage you to review the privacy policies of any third-party websites you visit.
13. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk. We would, however, appreciate the opportunity to address your concerns first, so please contact us before approaching the ICO.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we protect your information.
If you have any questions about this policy, please contact us at Tmanika411@gmail.com or call +44 7345 251752.