In short
- We only collect what you choose to send us: through the contact form, by email or by phone.
- We use it to answer your enquiry, prepare a quote and make and deliver your piece.
- This website uses no cookies, analytics, advertising or tracking of any kind.
- We never sell your information or share it for advertising.
- You can ask us at any time to see, correct or delete your information.
Who is responsible for your data
The controller of your personal data (in Ukrainian law, the owner of personal data) is:
- Trading name
- War Wood Furniture Design
- Business
- War Wood, sole proprietor
- Location
- Ternopil, Ukraine
- tim@warwood.design
- Phone
- +380 (68) 175 24 19
This policy is written to meet the Law of Ukraine "On Personal Data Protection" No. 2297-VI, the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, and US state privacy laws, including California's. Where these laws give you different rights, we give you the stronger one.
What we collect and why
| Information | Why we use it | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Enquiry details: your name, email, phone number (optional), the piece you are interested in, your message and any photos you send, and which language version of the site you used. | To reply to you, discuss your project and prepare a quote. | Steps taken at your request before entering into a contract (Art. 6(1)(b)), and our legitimate interest in answering enquiries (Art. 6(1)(f)). |
| Order details: name, contact details, delivery address, agreed design, payment records and our correspondence, including progress photos of your piece. | To make, deliver and invoice your piece, handle warranty questions and keep accounts. | Performance of our contract with you (Art. 6(1)(b)) and compliance with tax and accounting law (Art. 6(1)(c)). |
| Technical data: IP address, browser type, the page requested and the time, recorded automatically in our web server's logs. | To keep the website running, secure and protected from abuse. | Our legitimate interest in operating a secure website (Art. 6(1)(f)). |
Under Ukrainian law we process your data on the basis of your consent, given when you contact us, and to conclude and perform a contract with you (Article 11 of Law No. 2297-VI). You do not have to give us any information, but we cannot reply or take an order without a way to contact you.
The contact form includes a hidden field that helps us filter out automated spam. It does not collect anything about you.
What we do not do
- We do not use cookies, local storage, tracking pixels, fingerprinting, analytics or advertising tools. See our Cookie Policy.
- We do not sell personal information, and we do not share it for cross-context behavioural or targeted advertising.
- We do not make decisions about you by automated means or build profiles of you.
- We do not send newsletters or marketing. We only reply to the messages you send us.
International transfers
We are based in Ukraine, so when you contact us your information comes to us in Ukraine. Our hosting and email provider stores data on servers in the United States.
When personal data from the EU, the European Economic Area or the UK is transferred to a country without an adequacy decision, we rely on the safeguards the law provides, such as the European Commission's Standard Contractual Clauses (with the UK Addendum where needed), or on the transfer being necessary to deal with your enquiry or perform our contract with you (GDPR Art. 49(1)(b)). You can ask us for more information about these safeguards.
How long we keep it
- Enquiries that do not lead to an order: up to 24 months after our last contact, then deleted.
- Customer and order records: for as long as we work together, then for the period required by Ukrainian tax and accounting law and to deal with any warranty claims.
- Server logs: kept by our hosting provider for a limited period for security purposes, then deleted.
Your rights
Depending on where you live, you have the right to:
- know whether we hold data about you and get a copy of it (access);
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it, including where we rely on legitimate interests;
- receive data you gave us in a portable format;
- withdraw your consent at any time, without affecting what we did before;
- not be treated differently for exercising any of these rights.
Under Ukrainian law (Article 8 of Law No. 2297-VI) you also have the right to know where your data is held, the purpose of processing and who receives it, and to have your data protected from unlawful processing.
US residents, including in California: you have the right to know, access, correct and delete your personal information. We do not sell or share personal information, so there is nothing to opt out of, and we treat any Global Privacy Control or Do Not Track signal as a request not to sell or share.
To use any of these rights, email tim@warwood.design. We will answer within one month and may ask you to confirm your identity first. Using your rights is free.
Complaints
Please contact us first and we will try to put things right. You can also complain to a data protection authority:
- Ukraine: the Ukrainian Parliament Commissioner for Human Rights, ombudsman.gov.ua
- European Union: the data protection authority in your country, listed at edpb.europa.eu
- United Kingdom: the Information Commissioner's Office, ico.org.uk
- United States: the attorney general or privacy agency of your state
Security and children
The website is served over an encrypted connection, form messages are checked for misuse before they are sent, and access to our email is limited to the people who run the workshop. No method of transmission is completely secure, but we take reasonable care to protect your information.
This website is not aimed at children under 16, and we do not knowingly collect information from them. If you think a child has sent us information, contact us and we will delete it.
Changes to this policy
If we change how we use personal information, we will update this page and the date at the top. If we ever start using cookies or tools that need your consent, we will ask for it before they run.