Skip to content
Oaknest

Oaknest policy ledger · Updated 21 July 2026

Privacy Policy

A complete account of the customer, delivery, order, support, cookie and payment data used to operate our worldwide solid-wood store.

Material and fulfilment boundary

We sell physical solid-wood home pieces only. Natural grain varies; food-contact pieces require hand care; stick-on and freestanding pieces are not structural fixtures.

Last updated and effective date

Last updated: 21 July 2026. Effective date: 21 July 2026.

Who is responsible

GLENAVON JOINERY & CONSTRUCTION SERVICES LIMITED, trading online as Oaknest, is the data controller for information collected through this store. Our contact details are 37 Hamilton Road, Strathaven, Scotland, ML10 6JA, United Kingdom, support@glenavonjoineryy.shop and +44 7946547552.

What we collect and collection sources

Information provided by you at checkout, in a trade request or when contacting support includes your name, email, phone, country, shipping address, billing address, order contents, consent, enquiry text, returns details and membership status. For visitors aged 13–17 we also collect a guardian email. We receive payment status, transaction identifiers and limited billing information from payment providers, but not the complete card number or security code.

Our collection sources are the forms and choices you submit, payment-status notices from Stripe or PayPal when selected, and delivery events supplied by the carrier. We automatically collect only necessary device, security and request data such as IP address, browser type, referral page, cookie choices and anti-spam results.

Why we use it and legal bases

We process order, address and payment-status data to perform our sales contract; contact and trade data to answer your request and take pre-contract steps; records required for tax, accounting, fraud prevention and consumer claims to comply with law; and security logs under our legitimate interests in protecting the store and customers.

With consent, we may send optional product or abandoned-checkout follow-up. Consent can be withdrawn at any time without affecting earlier lawful processing. We do not use sensitive-category data and ask you not to send it.

Who we share it with

We share only what is necessary with hosting and deployment providers, Supabase for database and storage, Stripe for payment, PayPal only if its payment option is selected, email delivery providers, Cloudflare for anti-spam protection, analytics providers where consent permits, professional advisers, and postal or courier carriers for order fulfilment and returns.

Payment providers receive billing and transaction information directly. Oaknest does not handle or store complete payment card credentials. For order fulfilment, carriers receive the recipient name, contact number and shipping address. Returns information is shared with a carrier only where collection or return delivery requires it. We do not sell personal information.

International transfers

Worldwide sales and cloud services can involve processing outside the United Kingdom or European Economic Area. Where required, we rely on adequacy decisions, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses and proportionate security measures. Contact us for information about relevant safeguards.

How long we keep it

Contact, trade and abandoned-checkout leads are retained for no longer than 24 months unless a shorter period is required. Order, payment, refund and tax records are generally retained for up to seven years. Support and return records are retained while needed for the issue and legal claims. Security logs are normally retained for up to 12 months. We delete or anonymise records when their purpose expires, subject to legal holds.

UK GDPR, EU GDPR and CCPA rights

Depending on residence, you may request access, correction, deletion, restriction, portability or objection; withdraw consent; or ask us to review processing. California residents may request to know, correct or delete data and may not be discriminated against for exercising rights.

Do Not Sell or Share

We do not sell personal information and do not share it for cross-context behavioural advertising. You may still contact us with a “Do Not Sell or Share” request, which we will record and honour as applicable. We may verify identity before completing a request.

Cookies and analytics

Strictly necessary cookies support basket state, admin security, payment return state, consent choices and abuse prevention. Optional analytics operates only where consent is required and granted. Your browser or cookie controls can remove optional cookies; disabling necessary storage may prevent checkout or account functions.

Security

We use access controls, encrypted transport, restricted service credentials, signed administrator sessions, payment-provider boundaries, webhook verification and retention limits. No internet transmission is risk-free. If an incident creates a legally reportable risk, we will notify regulators and affected individuals as required.

Automated decisions and children

The Wood Finder uses a transparent rules-based mapping of four answers to products; it does not make legal or similarly significant decisions. Children under 13 may not use the store. Visitors aged 13–17 require a parent or guardian’s agreement and must provide a guardian email for forms or checkout.

Complaints and contact

Send privacy requests or complaints to support@glenavonjoineryy.shop or write to 37 Hamilton Road, Strathaven, Scotland, ML10 6JA, United Kingdom. We aim to respond within one month where UK GDPR applies. You may also complain to the UK Information Commissioner’s Office or the competent supervisory authority in your country.