Privacy Policy

The data controller responsible for your personal data is MARK LUNDIE BESPOKE JOINERY LTD, trading as Lundie & Grain.

• Registered address: 8 Seggiedon Close, PH14 9AD, United Kingdom
• Email: support@marlunbesjoi.shop
• Phone: +44 7160569645

For any privacy question or request, contact us using the details above.

• Account data: name, email address and authentication identifiers.
• Project data: the briefs, dimensions, wood and finish choices, and any space photos you upload to generate designs.
• Generated content: renders, drawings, cut lists and videos produced from your inputs.
• Billing data: subscription plan, billing status and the last four digits and card brand as returned by our payment provider. We do not store full card numbers.
• Support data: messages, enquiries and correspondence you send us.
• Technical data: IP address, device and browser information, and usage events needed to operate and secure the service.

We collect data (a) directly from you when you create an account, submit a brief, upload a photo, subscribe or contact us; (b) automatically from your device when you use the site (cookies and similar technologies); and (c) from our processors, such as billing status from our payment provider.

• Provide the service (generate designs, store your projects): performance of a contract.
• Process subscriptions and payments: performance of a contract and compliance with legal obligations.
• Support and communications: legitimate interests and performance of a contract.
• Security, fraud prevention and service improvement: legitimate interests.
• Analytics and non-essential cookies: your consent, which you may withdraw at any time.
• Legal compliance: compliance with a legal obligation.

Under the CCPA we do not sell your personal information and do not share it for cross-context behavioural advertising.

Payments are processed by our third-party payment provider (Stripe). Card details are entered on the provider's secure checkout and are handled by the provider as an independent controller under its own terms and privacy policy. We receive only limited billing metadata (such as subscription status and card brand and last four digits) — never your full card number or security code.

We keep records of your subscription, account settings and support history so we can provide the service, honour billing and cancellations, and answer your questions. Access to this data within our team is limited to those who need it to operate the service.

We use strictly necessary cookies to run the site and, with your consent, analytics cookies to understand usage. You can manage non-essential cookies at any time. See our Cookie Policy for details.

We use vetted processors under data processing agreements to run the service, including:

• Cloud hosting and content delivery.
• Database, authentication and file storage.
• Payment processing.
• AI model providers used to generate renders, drawings and videos from your inputs.

Processors act on our instructions and are bound by confidentiality and security obligations.

Some processors may handle data outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and equivalent mechanisms to protect it.

We keep account and billing records for as long as your account is active and as required for legal, tax and accounting purposes. Uploaded space photos and generated project files are retained for up to 30 days by default and then deleted or anonymised, unless you save them to your account or we are required to keep them longer.

We apply technical and organisational measures including encryption in transit, access controls, and least-privilege handling of secrets and keys. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and regulators of qualifying incidents where required.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (right to erasure).
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent at any time where processing relies on consent.
• Under the CCPA, to know, delete and opt out, and not be discriminated against for exercising your rights.

To exercise any right, email support@marlunbesjoi.shop. We will respond within the timeframes required by law.

The service is not intended for children under 13, and they may not use it. Users aged 13 to 17 may use the service only with the consent and supervision of a parent or guardian, who must also supervise any use of power tools or construction. We do not knowingly collect data from children under 13; if you believe we have, contact us and we will delete it.

If you have a concern, contact us first at support@marlunbesjoi.shop. If you are in the UK or EEA, you also have the right to lodge a complaint with your local data protection authority.

We may update this policy and will revise the date above when we do. This policy is governed by the laws of England and Wales.