Privacy Policy

Introduction

JJ Smith & Co Woodworking Machinery Ltd (Company number 00339722) is a family business selling woodworking machinery in the UK and internationally. We maintain high standards of confidentiality and comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025), and the Privacy and Electronic Communications Regulations (PECR).

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights.

Personal Data We Collect

We may collect and process the following types of personal data:

• Identifiers: names, job titles, business contact details (address, email, phone)
• Transactional data: purchase history, service records, invoices
• Communications data: emails, phone records, correspondence
• Technical data: website usage, cookies (see Cookie Policy)
• Special category data: we do not intentionally process special category data (e.g. health, religion). If received inadvertently, it will be deleted.
• Sources include direct interactions (orders, enquiries) and trusted third parties (e.g. couriers, payment processors).

Lawful Bases for Processing

We process personal data under the following bases:

• Consent – e.g. for newsletters (you may withdraw at any time).
• Contract – to fulfil sales, deliveries, warranties, and services.
• Legal obligation – e.g. maintaining tax records.
• Vital interests – e.g. to protect someone’s safety in emergencies.
• Public task – where required by law or regulation.
• Legitimate interests – to run our business in ways that do not materially impact your rights.
• Recognised legitimate interests (Art. 6(1)(ea) UK GDPR) – such as crime prevention, safeguarding, or emergencies, without the need for a balancing test.

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request erasure (“right to be forgotten”)
• Restrict processing
• Object to processing (including marketing)
• Data portability
• Withdraw consent (where consent is the basis)
• Challenge and seek human review of automated decisions

We respond to requests within one month. If we need more information to verify your identity or locate your data, we may pause the time limit (“stop-the-clock”). Searches will be reasonable and proportionate.

Automated Decision-Making

We do not make decisions based solely on automated processing that have legal or similarly significant effects. If this changes, we will notify you and explain your rights, including the right to obtain human review and contest the decision.

Children’s Data

Our services are intended for businesses and not for children. We do not knowingly collect children’s data. If provided inadvertently, we will apply heightened protection and erase it where appropriate.

International Transfers

Where we transfer data outside the UK, we ensure protections are not materially lower than UK standards. We use safeguards such as the International Data Transfer Agreement (IDTA), Standard Contractual Clauses (SCCs), and transfer risk assessments.

Data Sharing

We may share data with:

• Couriers, freight and logistics providers
• Payment processors
• IT, hosting, and system support providers
• Professional advisers (accountants, legal advisers)
• Regulators where required by law

We require all processors to comply with UK GDPR and have data processing agreements in place.

Retention of Data

We retain data only as long as necessary.  When data is no longer required, it is securely deleted or destroyed.

Cookies and Marketing

We use cookies to operate our site and, with your consent, for analytics and improvements. Some low-risk cookies (strictly necessary or statistical) do not require consent. See our separate Cookie Policy for details.

You can opt out of marketing at any time:

• Click ‘unsubscribe’ in our emails
• Email [email protected]
• Call 0151 548 9000

Security

We take appropriate technical and organisational measures to protect personal data, including:

• Access controls and user authentication
• Encryption of data in transit
• Regular backups and monitoring
• Supplier due diligence and contracts

Complaints

You can raise concerns or complaints by emailing [email protected]. We will acknowledge and explain the outcome. You also have the right to complain to the Information Commissioner’s Office (ICO):

• Website: www.ico.org.uk
• Helpline: 0303 123 1113

Contact Us

JJ Smith & Co Woodworking Machinery Ltd
Moorgate Road
Knowsley Industrial Park
Kirkby
Liverpool
L33 7DR

Email: [email protected]
Phone: 0151 548 9000

Effective date: September 2025 (last updated: 1 September 2025)