Privacy Notice

1. Who controls your data

The controller for filwooddp.com is the Ukrainian business operating under the Filwood trading name:

2. Data we collect

Please do not put health, biometric, political, religious or other sensitive information in a free-text field; it is not needed for an estimate.

3. Purposes and legal grounds

We do not use form data for advertising messages without separate, voluntary consent. Refusing marketing consent never affects an enquiry.

4. Recipients and service providers

Access is limited to those who need it for these purposes: authorised Filwood staff and contractors; Netlify, which hosts the site and receives its forms; email and IT providers; agreed delivery or installation contractors; accountants, lawyers, banks and public authorities where required by law. They must keep data confidential and secure.

The site also loads technical resources from Google Fonts/WebFont and Webflow/CDN. Those providers may receive IP address, browser and request-time data under their own notices. Google Maps and Instagram apply their own terms when you follow a link to them.

5. International processing

Netlify and some infrastructure providers may process form or technical data outside Ukraine. A transfer is made only on a ground allowed by Ukrainian law and with proportionate contractual and technical safeguards. By submitting a form and giving consent, you acknowledge that this processing may be cross-border.

6. Retention

Data is then deleted or anonymised unless the law requires longer retention.

7. Your rights

You may ask about the source, location, purpose and recipients of your data; access it; request correction, deletion or an end to unlawful processing; withdraw consent; object; complain to the Ukrainian Parliament Commissioner for Human Rights or a court; and exercise the other rights in Article 8 of the Law of Ukraine “On Personal Data Protection.”

Email filwood.dp@gmail.com to exercise a right. We may verify your identity to avoid disclosing data to someone else. Withdrawal does not make earlier processing unlawful or stop processing required by a contract or law.

8. Security

We use access controls, HTTPS, account controls, retention practices and other organisational and technical measures proportionate to the risk. No transmission or storage method is completely secure.

9. Cookies

As of this update, the site has no first-party advertising analytics, ad pixels or profiling. Hosting and external technical resources may use strictly necessary identifiers for security, content delivery and network operation. If optional analytics or advertising technology is added, it will not be activated before any required consent and this notice will be updated.

10. Children, third-party data and changes

The site is not intended for children to use independently. If you submit another person’s details, you must have a lawful reason and tell them about this notice. The current notice remains available here; material changes requiring fresh consent will be presented separately.