Privacy Policy

Last updated: 7 March 2026

Lakeway Workshop is a trading name of Tier8 Limited (“we”, “us”, or “our”). We operate the website lakewayworkshop.co.uk. This privacy policy explains how we collect, use, store, and protect your personal information when you visit our website, place an order, or interact with us. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website, you acknowledge that you have read and understood this privacy policy. If you do not agree with our practices, please do not use our website.

1. Who We Are (Data Controller)

Tier8 Limited, trading as Lakeway Workshop, is the data controller responsible for your personal data. Our contact details are:

  • Business name: Tier8 Limited (trading as Lakeway Workshop), Company Number: 16395318
  • Website: lakewayworkshop.co.uk
  • Email: orders@lakewayworkshop.co.uk
  • Postal address: Corner House, 28 Huddersfield Rd, Milnrow, Newhey, Rochdale OL16 3QF

If you have any questions about this privacy policy or how we handle your personal data, please contact us using the details above.

2. What Personal Data We Collect

We collect personal data in the following ways:

2.1 Information You Provide Directly

When you place an order or create an account on our website, we collect:

  • Your name (first name and last name)
  • Email address
  • Billing and shipping address
  • Telephone number (if provided)
  • Payment information (processed securely by our payment provider; we do not store your full card details)
  • Order personalisation details (such as your house number and street name for custom door signs)
  • Any additional information you include in order notes or correspondence with us

2.2 Information Collected Automatically

When you browse our website, we may automatically collect:

  • IP address
  • Browser type and version
  • Operating system
  • Pages you visit and how you interact with our website
  • Referring website addresses
  • Date, time, and duration of your visit

3. Why We Collect Your Data and Our Lawful Basis

Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

Contract performance (Article 6(1)(b)): To process your orders, deliver your personalised door signs, handle payments, provide customer service, and manage returns or refunds.

Legal obligation (Article 6(1)(c)): To comply with tax, accounting, and other legal requirements, including HMRC record-keeping obligations.

Legitimate interests (Article 6(1)(f)): To improve our website and products, prevent fraud, ensure site security, and understand how customers use our website. We balance these interests against your rights and freedoms.

Consent (Article 6(1)(a)): Where we send you marketing emails or use non-essential cookies, we do so only with your explicit consent. You may withdraw consent at any time by contacting us or using the unsubscribe link in marketing emails.

4. How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfil your orders, including manufacturing your personalised signs
  • To send order confirmations, shipping updates, and delivery notifications
  • To process payments securely through our payment provider
  • To respond to your enquiries and provide customer support
  • To manage returns, refunds, and complaints
  • To improve our website, products, and services
  • To comply with our legal and regulatory obligations
  • To send marketing communications (only with your consent)

5. Who We Share Your Data With

We share your personal data with the following third-party service providers who help us operate our business. Each provider processes your data in accordance with their own privacy policies and only for the purposes described below.

5.1 Payment Processing

WooPayments (powered by Stripe): When you make a payment, your card details, billing address, transaction amount, and IP address are securely transmitted to Stripe for payment processing. Stripe is PCI DSS Level 1 compliant. We do not store your full card details on our servers. Stripe’s privacy policy: stripe.com/privacy

5.2 Website Hosting and Platform

WordPress and WooCommerce (Automattic): Our website is built on WordPress with WooCommerce. WooCommerce stores your order data, account information, and site usage data. Automattic’s privacy policy: automattic.com/privacy

Jetpack (Automattic): We use Jetpack for site security, performance optimisation, and statistics. Jetpack may collect IP addresses, browser user agents, and site interaction data. This data is processed by Automattic on servers in the United States.

5.3 Tax Calculation

WooCommerce Tax: To calculate the correct tax on your orders, your shipping address and cart contents may be shared with the WooCommerce Tax service operated by Automattic.

5.4 Email Marketing

Klaviyo: If you subscribe to our mailing list or place an order, your email address, name, and purchase history may be shared with Klaviyo to send you marketing emails, abandoned cart reminders, and order-related communications. You can unsubscribe at any time by clicking the unsubscribe link in any email. Klaviyo’s privacy policy: klaviyo.com/legal/privacy-notice

5.5 Advertising and Analytics

Google (via Google for WooCommerce): We may share product data and site usage information with Google for advertising, product listing, and analytics purposes. This may include the use of Google Analytics and Google Ads conversion tracking. Google’s privacy policy: policies.google.com/privacy

Meta (Facebook/Instagram): We use the Meta for WooCommerce plugin which may place tracking pixels on our website to measure advertising effectiveness and create audiences for advertising on Facebook and Instagram. This may collect data about your browsing behaviour and interactions with our website. Meta’s privacy policy: facebook.com/privacy/policy

Pinterest: We use the Pinterest for WooCommerce plugin which may place tracking tags on our website for advertising measurement and audience creation. Pinterest’s privacy policy: policy.pinterest.com/privacy-policy

TikTok: We use the TikTok for WooCommerce plugin which may place tracking pixels on our website to measure advertising performance and build audiences. TikTok’s privacy policy: tiktok.com/legal/privacy-policy

5.6 Shipping

When we ship your order, we share your name, shipping address, and contact details with Royal Mail or other postal carriers as necessary to deliver your order.

5.7 Other Disclosures

We may also share your personal data if required to do so by law, regulation, or legal process, or to protect our rights, property, or the safety of others.

6. International Data Transfers

Some of our third-party service providers (including Stripe, Automattic, Klaviyo, Google, Meta, Pinterest, and TikTok) are based in the United States or other countries outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner’s Office (ICO), or that the recipient country has been recognised as providing an adequate level of data protection.

7. How Long We Keep Your Data

We retain your personal data only for as long as is necessary for the purposes set out in this policy:

  • Order and transaction data: 6 years from the date of the transaction, as required by HMRC for tax and accounting purposes.
  • Customer account data: For as long as your account is active. If you request deletion, we will delete your account data within 30 days, subject to our legal retention obligations.
  • Marketing data: Until you unsubscribe or withdraw consent.
  • Website analytics data: Typically retained for up to 26 months in aggregated form.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device when you visit our website.

Strictly necessary cookies: These are essential for the website to function, including maintaining your shopping cart and processing checkout. These do not require your consent.

Analytics cookies: These help us understand how visitors use our website so we can improve it. This includes cookies set by Google Analytics and Jetpack Stats.

Advertising and tracking cookies: These are set by third-party advertising platforms (Google, Meta, Pinterest, TikTok) to measure advertising effectiveness and deliver relevant advertisements. These cookies are only placed with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

9. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights in relation to your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct any inaccurate or incomplete personal data.
  • Right to erasure: You can ask us to delete your personal data, subject to our legal retention obligations.
  • Right to restrict processing: You can ask us to limit how we use your personal data in certain circumstances.
  • Right to data portability: You can request your personal data in a structured, commonly used, machine-readable format.
  • Right to object: You can object to us processing your personal data based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: Where we process your data based on your consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at orders@lakewayworkshop.co.uk. We will respond to your request within one month. There is no fee for making a request unless the request is manifestly unfounded or excessive.

10. How We Protect Your Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption on our website, secure payment processing through PCI DSS-compliant providers, access controls to limit who can view your data, and regular security updates to our website software.

11. Children’s Privacy

Our website is not directed at children under the age of 16 and we do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete the data promptly.

12. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO). You can contact the ICO at ico.org.uk or by telephone on 0303 123 1113. We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically. Where changes are significant, we will make reasonable efforts to notify you.

14. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or your personal data, please contact us:

  • Email: orders@lakewayworkshop.co.uk
  • Post: Corner House, 28 Huddersfield Rd, Milnrow, Newhey, Rochdale OL16 3QF
  • Website: lakewayworkshop.co.uk