1. Introduction
Welcome to TimberNinja. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit our website www.timberninja.co.uk (the “Site”) or place an order with us.
We are Timber Ninja Ltd, company number SC826442.
By using the Site or placing an order you agree to the collection and use of your information in accordance with this policy.

2. Data Controller
Timber Ninja Ltd is the data controller for the personal data you provide via the Site (unless we state otherwise). If you have any questions about this policy or your rights, please contact us at the email/address given below.

3. Information We Collect
We collect the following categories of personal data:

• Identity & contact data: eg. your name, billing & delivery address, email address, telephone number.

• Transaction data: details of products you purchase, payment method, delivery.

• Technical / usage data: your IP address, browser type and version, device identifiers, pages you visit, time and date of visits, referral source, length of visit, click-stream data.

• Marketing & communications data: your preferences in receiving marketing from us and your communication preferences.

• Other data: if you contact our customer service, we may collect the content of your communications.

4. How We Collect Your Data
We gather data when you:

• Visit our Site and make a purchase;

• Create an account or log in;

• Subscribe to our marketing or newsletter;

• Contact our customer service;

• Use features of the Site, such as wish-lists, reviews or feedback.
  We may also collect usage data automatically via cookies and similar technologies (see our separate Cookie Policy).

5. Purposes of the Processing & Legal Basis
We process your personal data for these purposes:

• To fulfil your orders (legal basis: performance of contract).

• To manage your account and provide customer services (contract / legitimate interest).

• To improve and operate our Site and services (legitimate interest).

• To send you marketing communications (consent or legitimate interest, as appropriate).

• To comply with legal and regulatory obligations (legal obligation).
  We rely on the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 as our legal framework.

6. Sharing Your Personal Data
We may share your personal data with:

• Payment and fulfilment service providers (to process your order and delivery).

• IT, hosting and email service providers (to run the Site and our marketing).

• Logistics and courier firms (to deliver your goods).

• Our professional advisers, auditors or insurers (where necessary).

• Legal or regulatory authorities, if required by law or to protect our rights.
  We do not sell your personal data to third parties for their own marketing.

7. International Transfers
If we transfer your data outside the UK or EEA, appropriate safeguards will be in place (for example: Standard Contractual Clauses) to protect your rights.

8. Data Retention
We will only keep your personal data for as long as is necessary for the purposes for which it was collected and as required by law. For example, for purchase records we may retain data for a period to allow for warranty claims or accounting obligations. After that your data will be securely deleted or anonymised.

9. Security
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. However, no method of transmission or storage is 100 % secure and we cannot guarantee absolute security.

10. Your Rights
Under applicable data protection laws you have the following rights:

• Right of access – to obtain a copy of your personal data.

• Right to rectification – to ask us to correct inaccurate or incomplete data.

• Right to erasure (“right to be forgotten”) – in certain circumstances to request deletion.

• Right to restrict processing – in certain circumstances.

• Right to data portability – to receive a copy of your data in a structured format where applicable.

• Right to object – to processing for marketing or profiling.

• Right to withdraw consent – where processing is based on consent.

• Right to lodge a complaint with the UK supervisory authority (the Information Commissioner’s Office).
  To exercise any of these rights, please contact us using the details below.

11. Children
Our Site and services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will delete it.

12. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect data about how you interact with the Site, to remember you, provide personalised experiences, analyse traffic and tailor marketing. For more detail see our separate Cookie Policy.

13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The version shown on the Site will always be the current version, and we will indicate the date of last revision.

14. Contact Us
If you have any questions or wish to exercise your rights, please contact:
Timber Ninja Ltd
Effective Date: 20/11/2025