Privacy policy

Privacy Policy

Effective Date: 24 August 2026

Estlea Creative Limited, trading as Matt Estlea, respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what personal information we collect when you visit mattestlea.com, place an order, create an account, subscribe to our emails, submit a form, book a course, leave a review or otherwise interact with us. It also explains why we use your information, who we may share it with and the rights available to you.

1. Who We Are

For the purposes of UK data protection law, the data controller is:

Estlea Creative Limited trading as Matt Estlea
Company Number: 13489751
Unit 9, Studland Industrial Estate
Ball Hill
Newbury
Berkshire
RG20 0PW
United Kingdom

Email: rob@mattestlea.com

Our online store is operated using Shopify.

2. What Personal Information Do We Collect?

Depending on how you use our website and services, we may collect the following information.

Order and Customer Information

When you place an order, we may collect:

  • your name;

  • email address;

  • billing address;

  • shipping address;

  • telephone number, where provided;

  • products purchased;

  • order history;

  • shipping and tracking information;

  • transaction information; and

  • communications relating to your order.

We use this information to process payments, fulfil and ship orders, provide tracking information, handle returns and refunds, prevent fraud and provide customer support.

Payment Information

Payments are processed through Shopify and supported third-party payment providers.

Depending on your location and chosen payment method, these may include services and payment methods such as:

  • Shopify Payments;

  • Shop Pay;

  • PayPal;

  • Klarna;

  • Apple Pay;

  • Google Pay;

  • Visa;

  • Mastercard;

  • American Express;

  • Discover;

  • Diners Club;

  • Maestro; and

  • UnionPay.

Payment providers may collect and process payment card details and other financial information directly. We do not normally receive or store your complete payment card details ourselves.

The privacy policies and terms of the relevant payment provider may also apply to your transaction.

Customer Accounts

If you create a customer account, we may process information associated with that account, including your contact information, order history and account activity.

Email Marketing

If you subscribe to our marketing emails, we may collect:

  • your name;

  • email address;

  • subscription status;

  • email engagement information, such as whether an email was opened or a link was clicked; and

  • information about purchases or interests that may help us make our communications more relevant.

We currently use Brevo to help manage our email marketing.

You may join our mailing list through dedicated newsletter forms or by choosing to receive marketing communications during checkout.

You can unsubscribe from marketing emails at any time using the unsubscribe link contained in our emails.

Product Reviews

We use Judge.me to help collect and display customer product reviews.

If you purchase a product, we may use your name, email address and purchase information to invite you to leave a review where permitted by law.

If you submit a review, information you choose to include in that review may be displayed publicly on our website.

Contact Forms and Enquiries

When you contact us or complete a form on our website, we may collect your:

  • name;

  • email address; and

  • the contents of your message or enquiry.

We use this information to respond to your request and provide customer support.

Course Bookings

If you book or enquire about one of our woodworking courses, we may collect your name, email address and information required to manage your booking.

Website and Device Information

When you visit our website, Shopify and other technologies used by the site may automatically collect information such as:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • pages visited;

  • referring website;

  • approximate location derived from your IP address;

  • website interactions;

  • shopping activity; and

  • cookie or similar technology identifiers.

This information can be used to operate the website, maintain security, understand how the site is used and improve our products and services.

3. How Do We Use Your Personal Information?

We may use personal information to:

  • process and fulfil orders;

  • take and administer payments;

  • provide order and shipping updates;

  • provide customer support;

  • process returns, refunds and exchanges;

  • manage customer accounts;

  • respond to enquiries;

  • manage course bookings;

  • send marketing communications where permitted;

  • request and publish customer reviews;

  • understand how customers use our website;

  • improve our website, products and services;

  • personalise marketing or advertising where permitted;

  • detect and prevent fraud or misuse;

  • maintain the security of our website;

  • keep appropriate business and financial records;

  • comply with tax, accounting and other legal obligations; and

  • establish, exercise or defend legal claims.

We do not sell your personal information.

4. Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the activity, we may rely on:

Contract

We process information where it is necessary to fulfil a contract with you or take steps requested by you before entering into a contract.

For example, this applies when processing an order, arranging delivery or handling a return.

Consent

We rely on consent for certain activities, particularly where required for:

  • marketing communications;

  • non-essential cookies;

  • analytics cookies; and

  • advertising or tracking technologies.

Where we rely on consent, you can withdraw it at any time.

Legitimate Interests

We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights.

Examples may include:

  • improving our products and website;

  • providing customer service;

  • understanding business performance;

  • preventing fraud;

  • maintaining website security;

  • requesting customer feedback or reviews where permitted; and

  • understanding customer interests and purchasing behaviour.

Legal Obligations

We may process or retain information where required to comply with applicable laws, including accounting, tax and consumer protection requirements.

5. Email Marketing

If you have agreed to receive marketing communications from Matt Estlea, we may send you emails about:

  • new products;

  • product availability;

  • woodworking courses;

  • educational content;

  • special offers;

  • promotions; and

  • other relevant Matt Estlea news.

We may use information about previous purchases or interactions with our emails to make these communications more relevant to you.

You can unsubscribe at any time by using the unsubscribe link included in our marketing emails.

Unsubscribing from marketing will not prevent us from sending necessary transactional communications relating to an order, account, return or customer-service request.

6. Cookies, Analytics and Advertising

Our website uses cookies and similar technologies.

Some cookies are necessary for the website to function properly. These may support features such as:

  • shopping baskets;

  • checkout;

  • customer accounts;

  • fraud prevention;

  • security; and

  • remembering essential preferences.

We also use Shopify Analytics to help understand the performance and use of our online store.

Where enabled and where you have provided any consent required by law, our website may also use analytics or advertising technologies such as the Meta Pixel or similar services.

We have previously used services including Google Analytics and Google Ads. Such services may be used again in the future where properly configured and subject to applicable consent requirements.

You can control non-essential cookies through the cookie consent options available on our website.

Declining non-essential cookies should not prevent you from using the essential shopping functions of the website.

7. YouTube and Embedded Content

Some pages on our website may contain embedded YouTube videos.

YouTube and its associated services may collect information about your interaction with embedded videos, depending on your browser settings, cookie choices and whether you are signed into a Google or YouTube account.

Where required, non-essential cookies associated with embedded third-party content are subject to your cookie preferences.

8. Personalised Advertising and Profiling

Where permitted and subject to any required consent, we may use information such as:

  • website activity;

  • products viewed;

  • previous purchases;

  • interactions with marketing communications; and

  • general customer interests

to measure advertising performance, create advertising audiences or show more relevant marketing.

Third-party advertising platforms may also perform their own profiling in accordance with their privacy policies.

We do not use solely automated decision-making that produces legal effects or similarly significant effects on you.

9. Who Do We Share Personal Information With?

We may share personal information with trusted third parties where necessary to operate our business.

These may include:

  • Shopify, which provides our ecommerce platform;

  • payment processors and payment providers;

  • Brevo, for email marketing;

  • Judge.me, for product reviews;

  • postal services, couriers and fulfilment providers;

  • website hosting and technology providers;

  • analytics providers;

  • advertising platforms where enabled;

  • fraud prevention and security providers;

  • accountants, professional advisers and insurers; and

  • government bodies, regulators or law enforcement agencies where required by law.

We only share information that is reasonably necessary for the relevant service or purpose.

Some third-party providers act as processors on our behalf, while others may act as independent data controllers for particular services.

10. Shopify

Our online store is powered by Shopify.

Shopify processes certain customer and website information in order to provide services including:

  • website hosting;

  • ecommerce functionality;

  • checkout;

  • payments;

  • customer accounts;

  • fraud detection;

  • analytics; and

  • store administration.

Shopify may process personal information in countries outside the United Kingdom as part of providing its global services.

For more information about how Shopify processes information, please refer to Shopify's own privacy documentation.

11. International Transfers of Personal Information

Some of the companies we use to operate our website and services are located outside the United Kingdom or use servers located internationally.

As a result, personal information may sometimes be transferred to or processed in countries outside the UK.

Where UK data protection law requires additional protections for an international transfer, we or our service providers use an appropriate legal mechanism. This may include:

  • UK adequacy regulations;

  • approved contractual safeguards;

  • recognised data protection frameworks; or

  • other lawful transfer mechanisms.

We take reasonable steps to ensure that personal information remains appropriately protected when it is processed internationally.

12. How Long Do We Keep Your Information?

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

The appropriate retention period depends on the type of information and why we hold it.

For example:

  • order and transaction records may be retained for accounting, tax and legal purposes;

  • customer-service correspondence may be retained while reasonably necessary to deal with enquiries and disputes;

  • account information may be retained while your account remains active and for an appropriate period afterwards;

  • marketing information may be retained until you unsubscribe or we determine it is no longer required; and

  • cookie and analytics data may be retained according to the settings and retention periods of the relevant service.

We may retain certain information for longer where required by law or where reasonably necessary for legal claims, fraud prevention or security.

13. How Do We Protect Your Information?

We use appropriate organisational and technical measures designed to protect personal information against:

  • unauthorised access;

  • accidental loss;

  • misuse;

  • alteration; and

  • unauthorised disclosure.

We also use established third-party platforms and providers to process sensitive information such as payments.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

14. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you the right to:

  • Access the personal information we hold about you.

  • Correct inaccurate or incomplete personal information.

  • Request deletion of your personal information in certain circumstances.

  • Restrict processing of your personal information in certain circumstances.

  • Object to processing, including certain processing based on legitimate interests and direct marketing.

  • Request data portability where applicable.

  • Withdraw consent at any time where our processing is based on your consent.

  • Complain to a supervisory authority if you believe your information has been handled unlawfully.

These rights are not absolute and may depend on the circumstances and applicable law.

To exercise your rights, contact rob@mattestlea.com.

We may need to verify your identity before fulfilling certain requests.

15. How Do I Stop Marketing Communications?

You can stop receiving our marketing emails at any time by clicking the unsubscribe link at the bottom of any marketing email.

You can also contact us at rob@mattestlea.com.

We may retain a limited suppression record after you unsubscribe so that we know not to send marketing communications to that email address in the future.

16. Children

Our website may be viewed by people of different ages and is not restricted solely to adults.

However, we do not knowingly collect personal information from children where parental or guardian consent would be required under applicable law.

If you believe that a child has provided personal information to us improperly, please contact rob@mattestlea.com so that we can investigate.

17. Third-Party Websites

Our website may contain links to third-party websites and services.

We are not responsible for the privacy practices of websites or services operated independently from Matt Estlea.

We recommend reviewing the privacy policies of third parties before providing them with personal information.

18. Complaints

If you have concerns about how we use your personal information, please contact us first at:

rob@mattestlea.com

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

More information about your data protection rights and how to make a complaint is available from the ICO at:

https://ico.org.uk

19. Contact Us

If you have any questions about this Privacy Policy, would like to exercise a data protection right or have concerns about how your personal information is being used, please contact:

Estlea Creative Limited trading as Matt Estlea
Unit 9, Studland Industrial Estate
Ball Hill
Newbury
Berkshire
RG20 0PW
United Kingdom

Email: rob@mattestlea.com

20. Changes to This Privacy Policy

This Privacy Policy is effective from 24 August 2026.

We may update this policy from time to time to reflect changes to:

  • our website;

  • the services and technology we use;

  • our business practices; or

  • applicable laws and regulations.

Any updated version will take effect when it is published on this page. Where appropriate, we may also provide additional notice of significant changes.