Privacy Policy
This policy explains what personal information ShedBox collects, how we use it, when it may be shared and the rights you have in relation to your information.
Who we are & what we collect
Who we are
ShedBox designs, manufactures and installs bespoke timber buildings. When you provide personal information to us, ShedBox is responsible for deciding how that information is used and protected.
If you have any questions about this privacy policy or how we handle your personal information, you can contact us using the details below.
Email: info@theshedbox.co.uk
Telephone: 01948 807000
Information we may collect
The personal information we collect depends on how you interact with ShedBox. This may include information you provide when making an enquiry, requesting a quotation, placing an order, contacting us or using our website.
- Your name and contact details, including your email address and telephone number.
- Your address, postcode and project location.
- Information about the building or project you are interested in.
- Measurements, photographs, plans, drawings or other files you choose to provide.
- Details of enquiries, quotations, orders and communications with ShedBox.
- Payment and transaction information where relevant to an order or project.
- Technical information generated when you use our website, such as device, browser and website usage information where applicable.
How we use your information
Why we use personal information
ShedBox uses personal information only where there is a legitimate reason to do so. The way we use your information will depend on your relationship with us and the nature of your enquiry, order or project.
-
To respond to enquiries
We use your contact details and the information you provide to respond to questions, discuss a potential project and provide information about ShedBox products and services.
-
To prepare quotations and project specifications
We may use project details, measurements, photographs, drawings and other information you provide to understand your requirements and prepare a quotation or specification.
-
To manage orders and projects
Where you proceed with ShedBox, we use your information to manage the order, communicate with you, arrange manufacture, delivery, installation and any other agreed elements of the project.
-
To process payments and maintain business records
We may use transaction and customer information for invoicing, payment processing, accounting and other necessary business and financial records.
-
To operate and improve our website
Where applicable, technical and website usage information may be used to maintain security, understand how the site is used and improve the experience for visitors.
-
To meet legal and regulatory obligations
We may use or retain information where necessary to comply with legal, tax, accounting, regulatory or other obligations.
Lawful bases
UK data protection law requires us to have a lawful basis for processing personal information. Depending on the circumstances, we may rely on one or more of the following.
Contract
Where processing is necessary to provide a quotation, take steps at your request before entering into a contract, or fulfil an order or project you have agreed with us.
Legitimate interests
Where processing is reasonably necessary to operate, manage and improve our business, respond to customers, maintain records or protect the business, provided those interests do not override your rights.
Legal obligation
Where we need to process or retain information to meet a legal or regulatory requirement.
Consent
Where we specifically ask for your consent for a particular use of your information. Where processing is based on consent, you can withdraw that consent at any time.
Who we share information with
When information may be shared
We do not sell your personal information. We may share information with trusted third parties where this is necessary to operate the business, deliver your project, process payments, meet legal requirements or provide services on our behalf.
-
Contractors and project partners
Where relevant to your project, information may be shared with contractors, installers, groundworks providers, electricians or other project partners involved in delivering agreed work.
-
Delivery and logistics providers
We may share the information needed to arrange delivery, access, installation or other logistics connected with your order or project.
-
Payment, accounting and financial service providers
Information may be shared with providers used for payment processing, invoicing, accounting or related financial administration.
-
Website and technology providers
We may use third-party services for website hosting, forms, email, analytics, security, backups or other technical functions needed to operate the website and our business systems.
-
Professional advisers
Where necessary, information may be shared with accountants, legal advisers, insurers or other professional advisers.
-
Public authorities or regulators
We may disclose information where required by law or where reasonably necessary to respond to a lawful request, protect our rights or meet regulatory obligations.
How much information we share
Where information is shared with another organisation, we aim to provide only the information reasonably necessary for that organisation to carry out its role.
We expect organisations that process personal information on our behalf to handle it securely and in accordance with applicable data protection requirements.
How long we keep your information
Retention periods
We keep personal information only for as long as it is reasonably necessary for the purpose for which it was collected, including where information needs to be retained for legal, accounting, tax, contractual or business reasons.
-
Enquiries and quotations
Information connected with enquiries and quotations may be retained for a reasonable period so that we can respond to follow-up questions, maintain records and understand previous discussions if you contact us again.
-
Customers and completed projects
Records relating to orders, contracts, payments, specifications and completed projects may be retained for longer where necessary for accounting, tax, warranty, legal or other legitimate business purposes.
-
Website and technical information
Technical information, logs and analytics data may be retained for shorter periods depending on the service used and the reason the information is collected.
When personal information is no longer required, we aim to delete it, anonymise it or otherwise dispose of it securely.
International transfers
Some of the technology or service providers used by ShedBox may process or store information outside the United Kingdom. Where this happens, we take reasonable steps to ensure that appropriate safeguards are in place for the protection of personal information.
The specific retention period will depend on the type of information, why it was collected and whether we are required to keep it for legal, contractual or regulatory reasons.
Your data protection rights
Your rights
Depending on the circumstances, UK data protection law gives you a number of rights in relation to the personal information we hold about you.
-
The right to access
You can ask us for confirmation of whether we hold personal information about you and request a copy of that information.
-
The right to rectification
You can ask us to correct personal information that is inaccurate or complete information that is incomplete.
-
The right to erasure
In certain circumstances, you can ask us to delete personal information we hold about you.
-
The right to restrict processing
In certain circumstances, you can ask us to restrict how we use your personal information.
-
The right to object
You may have the right to object to certain types of processing, including processing based on our legitimate interests in some circumstances.
-
The right to data portability
In certain circumstances, you may have the right to receive personal information you have provided to us in a structured, commonly used and machine-readable format, or ask us to transfer it to another organisation.
-
The right to withdraw consent
Where we rely on your consent to process personal information, you can withdraw that consent at any time. This will not affect processing carried out before the consent was withdrawn.
How to exercise your rights
If you would like to exercise any of these rights, please contact ShedBox using the details below. We may need to ask for information to confirm your identity before acting on your request.
Email: info@theshedbox.co.uk
Telephone: 01948 807000
Complaints, cookies & policy changes
Complaints
If you have a concern about how ShedBox has handled your personal information, please contact us first so that we have the opportunity to look into the issue and respond.
You also have the right to raise a complaint with the Information Commissioner’s Office, the UK supervisory authority for data protection.
You can find more information about the Information Commissioner’s Office at ico.org.uk .
Cookies
Our website may use cookies and similar technologies to support essential website functions, improve security, understand how visitors use the site and, where applicable, support analytics or other online services.
Where non-essential cookies are used, we will provide appropriate information and controls in accordance with applicable requirements.
Changes to this privacy policy
We may update this privacy policy from time to time to reflect changes to our business, website, services, legal requirements or the way we process personal information.
When we make changes, the updated version will be published on this page and the date shown at the top of the policy will be updated.
Contact ShedBox
If you have any questions about this privacy policy, your personal information or your data protection rights, please contact ShedBox.
Email:
info@theshedbox.co.uk
Telephone:
01948 807000
This privacy policy was last updated in September 2026.