Privacy Policy
Last updated: April 2026
1. Who we are
PaxBespoke is a bespoke wardrobe fitting service based in the United Kingdom. We design and install custom IKEA PAX wardrobe solutions for residential customers. References to "we", "us", or "our" in this policy refer to PaxBespoke.
For data protection enquiries, contact us at: [email protected]
2. Data we collect
When you use our website or booking service, we may collect:
- Contact details: name, email address, phone number
- Property information: postcode, room type, measurements, photos of your space
- Project preferences: style, finish type, budget range, timeline
- Booking details: consultation date and time, assigned designer
- Payment information: processed securely via third-party providers. We do not store card details
- Communications: emails, WhatsApp messages, and notes from consultations
- Technical data: IP address, browser type, pages visited, referral source (for analytics and fraud prevention)
3. How we use your data
We use your personal data to:
- Process and manage your booking and consultation
- Communicate with you about your project
- Send appointment reminders and follow-up messages
- Generate and send invoices
- Improve our service and website
- Comply with legal obligations
Our lawful basis for processing is contract performance (to deliver the service you requested) and legitimate interests (to operate and improve our business). Where we send marketing communications, we rely on your consent, which you may withdraw at any time.
4. Who we share data with
We do not sell your personal data. We may share it with:
- Fitters and subcontractors: to fulfil your installation
- Payment processors: to handle deposits and final payments
- Accounting software: QuickBooks, for invoicing and financial records
- Cloud infrastructure providers: Supabase, DigitalOcean, for hosting and data storage
- Communication tools: Gmail, for sending emails on our behalf
All third parties are required to handle your data securely and in accordance with applicable law.
5. Data retention
We retain your personal data for as long as necessary to deliver the service and meet our legal obligations. Project records (including invoices) are kept for 7 years in line with UK tax law. If you request deletion of your data, we will remove it where we are not legally required to retain it.
6. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing
- Data portability
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
7. Cookies
We use essential cookies to operate the website (session management, security). We may use analytics cookies to understand how visitors use the site. You can control cookies through your browser settings.
8. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our service after changes constitutes acceptance of the updated policy.