Privacy Policy

Last updated: 1 January 2026

This Privacy Policy explains how Chalk & Chisel Woodwork (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit our website, place an order, or contact us.

We are committed to protecting your privacy and processing your personal data lawfully, fairly, and transparently, in accordance with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

For the purposes of data protection law, Chalk & Chisel Woodwork is the data controller, meaning we are responsible for deciding how and why your personal data is processed.

1. Who We Are

Business name: Chalk & Chisel Woodwork

Operating locations: Ireland

Shipping destinations: Ireland

Email: JosephChalk@outlook.com

2. Personal Data We Collect

We may collect and process the following types of personal data:

Identity data – such as your name

Contact data – including your email address, phone number, and postal address

Order and transaction data – details of products purchased and order history (please note that we do not store full payment card details)

Communications – messages sent via contact forms, email, or social media

Technical data – such as IP address, browser type, and basic website usage data collected through cookies

Under data protection law, personal data is any information that can identify you, either directly or indirectly.

3. How We Collect Your Data

We collect personal data when you:

Place an order through our website

Request a quote or information about our products

Subscribe to updates or communications (where applicable)

Browse our website, through the use of cookies and similar technologies

4. How We Use Your Data

We use your personal data to:

Process, fulfil, and deliver orders

Communicate with you about purchases or enquiries

Provide customer support

Maintain accurate business and financial records

Improve our website, products, and services

Meet our legal and regulatory obligations

Your data is only used for the purposes for which it was collected.

5. Lawful Basis for Processing

We only process personal data where we have a lawful basis to do so under Article 6 of the GDPR. These include:

Contractual necessity – to process and fulfil your order

Legal obligation – to comply with accounting, tax, or consumer protection laws

Legitimate interests – to operate our business effectively, respond to enquiries, and improve our services

Consent – where you have given clear permission, such as for marketing communications

Where consent is used, you may withdraw it at any time.

6. Cookies and Analytics

Our website uses cookies to ensure it functions correctly and to understand how visitors use the site.

Cookies may collect information such as:

Pages visited

Time spent on the website

Approximate location (non‑precise)

Browser and device type

We use essential cookies for website functionality and optional analytics cookies to help improve the site. Analytics data is collected in an aggregated and anonymised form where possible.

You can manage or disable cookies through your browser settings.

7. Online Orders and Payments

When you place an order through our website, we collect the personal data necessary to process and fulfil your purchase.

Payments are processed securely by third‑party payment providers. We do not store or process full payment card details ourselves.

Payment providers process personal data in accordance with their own privacy policies and applicable data protection laws.

8. Shipping and Delivery (Ireland)

We currently only ship products to customers in Ireland.

To fulfil deliveries, we collect and process:

Your name

Delivery address

Contact details where required

Order details

This data is used solely for order fulfilment, delivery coordination, and customer support.

9. Sharing Your Data

We do not sell or rent your personal data.

We may share personal data with trusted third parties where this is necessary to operate our business, including:

Payment service providers

Delivery and postal services

Website hosting and IT service providers

Professional advisers such as accountants or legal advisers

All third parties are required to handle your data securely and in accordance with data protection law. We do not sell your personal data.

10. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA).
Where personal data is transferred outside the EEA (for example, through website hosting or email services), appropriate safeguards are in place to ensure your data remains protected in line with GDPR requirements.

11. Data Retention

We retain personal data only for as long as necessary:

• Order and transaction records are retained to meet legal and tax obligations

• Enquiry and correspondence data is kept only for as long as needed to respond and follow up

• Marketing data is retained until consent is withdrawn

When personal data is no longer required, it is securely deleted or anonymised.

12. Images and Project Galleries

Our website may display photographs of completed woodworking projects.

These images:

Are used for portfolio and promotional purposes

Do not identify private individuals unless permission has been given

If you believe an image on our website relates to you and should be removed, please contact us.

13. Children’s Data

Our website and services are not intended for children under the age of 16.

We do not knowingly collect or process personal data from children. If we become aware that personal data relating to a child has been collected without appropriate consent, we will take steps to delete that information as soon as possible.

If you believe we may have collected data from a child, please contact us using the details below.

14. Your Data Protection Rights

Depending on your location, under GDPR, you have the right to:

Access your personal data

Request correction of inaccurate or incomplete data

Request deletion of your data (where applicable)

Restrict or object to certain types of processing

Request data portability

Withdraw consent at any time

You also have the right to lodge a complaint with the Irish Data Protection Commission.

15. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure, and restrict access to those who need it for legitimate business purposes.

16. Complaints

If you have any concerns about how we handle your personal data, we encourage you to contact us first so we can address the issue.

You also have the right to lodge a complaint with the relevant data protection authority:

In Ireland, the Data Protection Commission (DPC)

17. External Links

Our website may contain links to external websites. We are not responsible for the content or privacy practices of those websites.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page, with the effective date updated accordingly.

19. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Chalk & Chisel Woodwork
Email: JosephChalk@outlook.com

Chalk & Chisel Woodwork