Last updated: 3 October 2026
This notice explains how LM Stone Creative collects and uses personal information when you visit our website, contact us, book an appointment or arrange a stone-surface project.
LM STONE CREATIVE LTD, trading as LM Stone Creative, is the controller of the personal information described here. We are registered in England and Wales under company number 13744032. Our registered office is 1 Holly House, Mill Street, Uppermill, Oldham, Lancashire, England, OL3 6LZ. Our showroom is at 179 Market Street, Hyde, SK14 1HF, by appointment.
For privacy questions or requests, email info@lmstonecreative.com, call 0161 312 6864, or write to our registered office. We handle personal information under the UK GDPR and the Data Protection Act 2018, as amended.
We receive information directly from you through the website, phone, email, WhatsApp, showroom appointments and project discussions. If a kitchen designer, fitter, builder or other representative introduces your project, we may receive your contact details, address and relevant plans from them. We explain the source when contacting you where required. Please share only information needed for your project and ensure you are entitled to share information about other people.
You do not have to provide optional details. Without necessary contact, site or project information, we may be unable to reply, quote accurately, book a visit or carry out the work.
| Purpose | Lawful basis |
|---|---|
| Respond to your enquiry, prepare a quotation, arrange appointments and fulfil your order, including templating, fabrication, fitting and aftercare. | Taking steps at your request before a contract and performing our contract with you. For contact people acting for a business customer, our legitimate interest in communicating with that business and delivering its project. |
| Maintain invoices, payment and accounting records and comply with applicable legal requirements. | Legal obligation. |
| Manage business relationships, investigate complaints, protect legal rights and keep our systems secure. | Our legitimate interests in running the business, resolving issues, preventing misuse and protecting customers and systems, balanced against your rights. Legal obligation where a particular rule requires the processing. |
| Send promotional emails, texts or WhatsApp messages that you choose to receive. | Consent. You can withdraw it at any time. |
| Publish identifiable customer project photographs or testimonials for publicity. | Consent obtained separately from the order. |
| Use optional analytics and advertising technologies to understand site use and measure campaigns. | Consent for the optional technologies described here and associated personal-data processing. |
| Operate essential website, security and consent-preference functions. | Our legitimate interest in providing a functioning, secure website and recording privacy choices; legal obligation where applicable. |
Requesting a quote or booking an appointment is not agreement to receive unrelated promotional messages. We use your details to answer your enquiry and manage your project, separately from any marketing consent.
You can stop marketing at any time using the unsubscribe option in a message or by contacting us. You have the right to object to use of your personal information for direct marketing at any time. We may retain a minimal suppression record so we can respect your choice. Service messages about an active enquiry or order are separate from marketing.
Access is limited to people and providers who need the information for the relevant task. Depending on your enquiry or project, recipients include:
Providers processing information on our behalf must act under appropriate data-processing terms. We do not sell your personal information. WhatsApp, social networks and other external services also process information under their own privacy notices when you choose to use them.
Some providers, including HighLevel/LeadConnector and Google, operate internationally, and information may be processed outside the UK, including in the United States. Relevant provider and subprocessor locations depend on the service used.
For restricted international transfers we require an appropriate UK-law mechanism, such as UK adequacy regulations where applicable, or approved contractual safeguards including the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses, as relevant to the transfer. You can contact us for information about the countries and safeguards applicable to your information and how to obtain a copy of the relevant safeguards.
We keep information only for as long as needed for its purpose, applicable legal duties and relevant claims. Our retention decisions take account of the type of record and whether a project, complaint, warranty issue or legal matter remains active:
We review whether information is still needed and delete or anonymise it when the retention purpose ends. Contact us if you would like the retention criteria or period relevant to a particular record.
Our website and embedded tools use cookies and similar technologies for essential functions, security, remembering privacy choices, analytics and advertising measurement. Identifiers and online usage information can be personal information; they are not automatically anonymous.
| Technology | Purpose | Choices |
|---|---|---|
| Cookiez consent records | Remember and manage your cookie choices. | Needed to operate the consent mechanism. |
Security technology, including Cloudflare __cf_bm on embedded enquiry/booking services | Protect services from malicious automated traffic. This security cookie is typically short-lived, around 30 minutes. | Used where necessary to provide and protect the requested service. |
Google Analytics, including _ga and _ga_7TG547TXDH | Distinguish visits and measure website usage. | Optional analytics choice. |
Google advertising measurement, including _gcl_au | Measure campaign and conversion performance; this cookie is typically set for around 90 days. | Optional advertising choice. |
Exact cookies, providers and durations depend on the features used and current configuration. Our cookie preferences should provide the current detail.
Optional technologies requiring consent must not be enabled until you make the relevant choice. You can accept or reject optional cookies or choose categories using the site’s cookie controls, and change your choice using the floating Cookies button after your initial choice. If those controls are unavailable or you need help, contact us. You can also delete or block cookies in your browser, although this can affect some features.
We use proportionate technical and organisational measures to protect personal information, including restricting access to those who need it. No website or communication method is completely risk-free. Please avoid sending unnecessary sensitive information, passwords or full card details with a project enquiry.
Depending on the processing and applicable law, you may ask to access your information, correct inaccurate details, erase information, restrict its use or receive/transfer information covered by the portability right. You may object to processing based on legitimate interests, and you can always object to direct marketing.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. Rights are subject to legal conditions and exemptions, including where records must be retained by law.
Contact info@lmstonecreative.com to exercise a right. Requests are normally free and we normally respond within one month, subject to any extension or clarification permitted by law. We may need proportionate information to verify your identity.
We do not make decisions with legal or similarly significant effects on you based solely on automated processing.
If you have a concern about how we handle your information, contact us using the details above. We will acknowledge and investigate your complaint and explain the outcome. You may also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, through ico.org.uk/make-a-complaint/ or on 0303 123 1113.
We may update this notice when our services or processing change. The update date is shown at the top. Where required, we will tell you about significant changes or a new use of your information before that use begins, and obtain a new consent where needed.
