Privacy policy

This policy explains what personal information MJ Bespoke collects, why, how we look after it, and the rights you have over it. It covers the website, and everything that follows when you get in touch with us about a piece of furniture.

Who we are

MJ Bespoke is the trading name of Michael Leonard, a sole trader who designs, makes and fits bespoke furniture in Northamptonshire. In this policy “we”, “us” and “our” mean MJ Bespoke. We decide how your information is used, which makes us the data controller:

If you have any question about this policy or your information, email us at the address above.

The information we collect

When you get in touch

Whether you use the form on this website, email, phone or message us on Instagram, we keep what you send us. That is usually your name, email address and phone number, where the project is, what you have in mind, and any photos, drawings or measurements you share.

When we quote for and carry out work

To design, make and fit your furniture we also keep your address, measurements and photos of the room, access notes, our drawings and quotes, and our messages to each other. For payment we keep invoices and the payment details that appear on our bank statements. We never see or store your card details.

When you use this website

The website uses a small number of essential cookies, and analytics and advertising cookies only if you accept them. Our cookie policy lists every one. Like every website, our server also keeps short-lived technical logs (your IP address, browser and the pages requested) to keep the site secure and working.

We don’t ask for sensitive information, such as health details, and we would rather you didn’t send it.

How we use it

The law says we need a reason (a “lawful basis”) for each use of your information. Ours are:

• Answering your enquiry and preparing a quote, because you asked us to, before any contract.
• Designing, making, delivering and fitting your furniture, and looking after it afterwards, to carry out our contract with you.
• Invoicing, keeping accounts and paying tax, because the law requires it.
• Keeping the website and our messages secure, including stopping spam through the contact form, because we have a legitimate interest in doing so.
• Showing photos of finished work on this website and on social media, only with your permission. We never show your address or anything that identifies you.
• Measuring how the website is used, and our advertising, only if you accept those cookies.

We don’t send marketing emails unless you have asked for them, and we never sell or rent your information.

Who we share it with

We only share what is needed, with people who need it to do their job:

• Trades and suppliers working on your project, such as a specialist fitter, electrician or delivery company, who get only the details they need.
• The services we use to run the business, such as our website and email hosting, and our accountant.
• HMRC and other authorities, when the law requires it.
• Google and Meta, only through the analytics and advertising cookies you accept, and Cloudflare Turnstile, which checks our forms for spam. The cookie policy explains each.

Information sent outside the UK

Some of the services we use may store or process information outside the UK. Where they do, we rely on the safeguards UK law provides, such as UK adequacy regulations or the International Data Transfer Addendum, so your information is protected to the same standard.

How long we keep it

• Enquiries that don’t go ahead: up to 12 months after we last hear from you, then deleted.
• Customer records, including quotes, invoices and correspondence: six years after the end of the tax year in which the work was finished, for tax and in case of a claim.
• Drawings and measurements of furniture we made: as long as they are useful for repairs or matching pieces, unless you ask us to delete them.
• Photos of finished work: until you withdraw your permission.
• Website logs: a short time only, for security.

How we keep it safe

Your information is kept on password-protected devices and services, shared only as described above, and deleted when we no longer need it. If something ever went wrong that put your information at risk, we would tell you and, where required, the Information Commissioner’s Office.

Your rights

You can ask us to:

• Tell you what we hold, with a copy of your personal information and what we do with it.
• Correct it, if anything we hold is wrong or incomplete.
• Delete it, unless we have to keep it by law, for example for tax.
• Stop using it, or restrict what we do with it.
• Send you a copy in a machine-readable form, or send it to someone else.
• Withdraw your consent at any time, where we rely on it (photos of your furniture, cookies). It doesn’t affect anything we did lawfully before.

Email us to use any of these rights. There is no charge, and we will reply within one month.

If you’re not happy with how we handle your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first, but you don’t have to come to us.

Children

Our services are for adults. We don’t knowingly collect information about children.

Changes to this policy

We will update this page if the way we use your information changes, and the date at the top shows when it last changed.