Privacy Policy

Last updated: 18 August 2026

This Privacy Policy explains how March Oaks Construction Ltd, trading as Bespoke Tower Clocks, collects and uses personal information relating to website visitors, enquirers, customers, suppliers, professional advisers and project contacts.

1. Who is responsible for your information

The data controller is:

March Oaks Construction Ltd, trading as Bespoke Tower Clocks
Company number: See the registered company details in the website footer
Registered office: See the registered office in the website footer
Email for privacy requests: enquiries@bespoketowerclocks.co.uk
Telephone: 07833 045540

2. Information we collect

Depending on your relationship with us, we may collect:

• name, job title, company and organisation;
• email address, telephone number and postal address;
• project address, postcode, delivery country and Site-contact details;
• building photographs, plans, sketches, measurements, planning information and project specifications;
• information about preferred turret size, roof profile, material, finish, clock package, budget and timescale;
• quotation, order, contract, invoice, payment and delivery records;
• communications, approvals, complaints, guarantee claims, maintenance records and photographs;
• supplier, architect, engineer, installer and contractor contact details;
• limited payment information such as bank-transfer references, but not full payment-card details where a separate payment provider processes them;
• marketing preferences and records of consent or objection;
• technical information such as IP address, device and browser information, server logs, security events, form timestamps and cookie preferences; and
• publicly available professional or company information where relevant to a genuine project or credit assessment.

Please avoid sending unnecessary special-category information, identity documents or private household information that is not needed for the project.

3. How we obtain information

We obtain personal information:

• directly from you through the website, email, telephone, meetings, quotations and contracts;
• from another project participant, such as a property owner, architect, contractor, developer or organisation that has involved you in the project;
• from payment, delivery, clock-equipment, professional or technical service providers;
• from publicly available business, planning or company sources where reasonably necessary; and
• automatically from website, hosting, security and consent systems.

If you provide another person’s details, you should ensure they reasonably expect that information to be shared with us for the project.

4. Why we use personal information and our lawful bases

We use information for the following purposes:

Enquiries, design review and quotations

To respond, understand the building, assess feasibility, ask technical questions and prepare a quotation.

Lawful basis: taking steps at your request before entering a contract; and our legitimate interests in responding to genuine enquiries and developing suitable projects.

Contracts and project delivery

To design, manufacture, source components, take payment, arrange delivery, install where agreed, communicate with the project team and provide aftercare.

Lawful basis: performance of a contract, taking pre-contract steps, and legitimate interests where the contracting customer is an organisation but the information relates to its staff or advisers.

Safety, installation and technical records

To assess access, structural interfaces, lifting, electrical requirements, Site risks and safe working arrangements.

Lawful basis: contract, legal obligations and legitimate interests in safe and effective project delivery.

Accounting, tax and company administration

To issue invoices, maintain records, manage debt and comply with tax, accounting and legal obligations.

Lawful basis: legal obligation, contract and legitimate interests in managing the business.

Guarantee, maintenance and complaints

To administer the 25-Year Timber Guarantee, investigate defects, arrange inspection or repair, keep product history and resolve complaints.

Lawful basis: contract, legal obligation and legitimate interests in honouring commitments and defending or establishing legal claims.

Website operation and security

To deliver the website, prevent spam, protect forms and systems, investigate misuse and maintain logs.

Lawful basis: legitimate interests in operating a secure website and, where applicable, legal obligation.

Marketing and project follow-up

We may send a limited follow-up about an enquiry or an existing customer relationship. General electronic marketing to an individual will be sent only where permitted by privacy and electronic-communications law, for example with consent or where a lawful existing-customer exception applies.

Business-to-business marketing may be based on legitimate interests where permitted, with a clear opt-out. We respect objections and do not sell personal information.

Lawful basis: consent or legitimate interests, depending on the recipient and circumstances.

5. What happens if information is not provided

We may be unable to assess, quote, manufacture, deliver, install, administer a guarantee or comply with law if essential information is not supplied.

We will explain where information is required by contract or law and where it is optional.

6. Sharing personal information

We share only what is reasonably necessary with appropriate recipients, which may include:

• GoDaddy or another website-hosting and domain provider;
• Google Workspace or another business email and document provider;
• WordPress, security, backup, form and consent-technology providers used on the website;
• accountants, bookkeepers, banks and payment providers;
• clock manufacturers and specialist component suppliers;
• couriers, freight forwarders, export packers, insurers and customs agents;
• installers, roofers, electricians, engineers, architects and subcontractors involved in the project;
• IT support, cloud storage and professional advisers;
• insurers, solicitors, courts, regulators, Trading Standards, HMRC, police or other authorities where necessary; and
• a purchaser or adviser involved in a genuine sale, restructuring or transfer of the business, subject to appropriate confidentiality.

Service providers acting for us must use information only for the relevant service and protect it appropriately.

We do not sell personal information.

7. International transfers

Some service providers may process information outside the United Kingdom.

Where personal information is transferred to a country without UK adequacy regulations, we use an appropriate safeguard where required, such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another lawful transfer mechanism. We may also rely on a legal exception where it applies to a specific transfer.

You may ask for more information about the relevant safeguard.

8. How long we keep information

We keep information only for as long as reasonably necessary for the purpose, legal duties and claims. Typical periods are:

• website enquiries that do not proceed: normally up to 24 months after the last meaningful contact;
• quotations and design proposals that do not proceed: normally up to 3 years where needed to manage repeat enquiries or disputes;
• contract, project, payment, delivery and accounting records: normally 6 years after completion or the end of the relevant accounting period, or longer where law requires;
• core product, Specification and guarantee records for a qualifying 25-year guarantee: for the guarantee period and up to 6 years afterwards, with unnecessary personal information removed where practical;
• complaints and legal claims: normally 6 years after resolution, or longer where a claim or legal hold requires;
• website security logs: normally between 30 days and 12 months depending on risk and provider settings;
• marketing information: until consent is withdrawn, an objection is made or the information is no longer useful; and
• suppression records: a minimal record may be kept as long as reasonably necessary to ensure that an opt-out continues to be respected.

We may keep information longer where required for a live dispute, fraud prevention, insurance, tax, safety recall or legal obligation.

9. Security

We use proportionate technical and organisational measures, including access controls, authentication, reputable hosting and email providers, backups, security monitoring and restricted sharing.

No online system is completely risk-free. Please use secure methods for particularly sensitive plans or property information and tell us if you believe information has been compromised.

10. Your data-protection rights

Depending on the circumstances, you may have rights to:

• be informed about use of your information;
• request access to your personal information;
• ask for inaccurate or incomplete information to be corrected;
• request erasure where there is no lawful reason to keep it;
• request restriction of processing;
• object to processing based on legitimate interests;
• object at any time to direct marketing;
• receive certain information in a portable format;
• withdraw consent, where processing is based on consent; and
• complain to the Information Commissioner’s Office.

These rights are not absolute. For example, we may need to retain contract, tax, guarantee or legal-claim records.

We will normally respond within one month, subject to any lawful extension. We may ask for proportionate information to verify identity.

11. Automated decision-making

We do not make decisions with legal or similarly significant effects about customers solely by automated processing.

Spam and security systems may automatically block suspicious form submissions, but a genuine enquirer can contact us by email or telephone.

12. Children

Our services are not directed at children and we do not knowingly collect children’s information through the website. A parent, guardian, school or organisation should provide appropriate adult contact details for a project involving premises used by children.

13. Direct marketing choices

Every electronic marketing message will provide a clear way to opt out where required.

You may object to marketing at any time by emailing enquiries@bespoketowerclocks.co.uk. Service messages about an enquiry, order, delivery, safety issue or guarantee are not marketing and may still be sent where necessary.

14. Cookies and storage technologies

Our Cookie Policy explains the storage and access technologies used on the website and how to manage choices.

Non-essential technologies are used only with valid consent or where a current legal exception applies and the required information and objection mechanism are provided.

15. Complaints to us and the ICO

Please contact us first so we can try to resolve a privacy concern.

You also have the right to complain to the Information Commissioner’s Office. The ICO’s current contact details are available on its official website.

16. Changes to this policy

We may update this Privacy Policy when services, providers or law change. The latest version and date will be published on the website.