The Best Office — Privacy Policy
Effective date: 27 August 2026
This Privacy Policy explains how The Best Office, part of the EDIWOOD Group, collects, uses, stores and protects personal information when you visit www.thebestoffice.co.uk, contact us, request information or work with us on a project.
The Best Office is operated by EDIWOOD Cabinet Makers Ltd, registered in Scotland under company number SC585252. EDIWOOD is a Scotland-based furniture manufacturer specialising in bespoke furniture, fitted cabinetry and commercial workplace furniture, providing design development, manufacture and installation services.
This policy is intended to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and relevant amendments introduced by the Data (Use and Access) Act 2025, all of whose data-protection provisions are now in force.
1. Who is responsible for your personal information?
The data controller is:
EDIWOOD Cabinet Makers Ltd
Trading as The Best Office
Part of the EDIWOOD Group
Registered in Scotland: SC585252
Registered Office:
9 Easter Langside Crescent
Dalkeith
Scotland
EH22 2FL
Email: info@ediwood.co.uk
Telephone: 0131 629 5036
For questions relating to this Privacy Policy or how your personal information is handled, please contact us using the details above.
2. Information we may collect
Depending on how you interact with us, we may collect your name, business name, job title, business or personal email address, telephone number, correspondence address, project or site address and details about your enquiry or proposed project.
Where you engage us for a project, we may also process drawings, specifications, photographs, measurements, project correspondence, quotation information, invoices, payment records and details relating to site access, delivery or installation.
When you use our website, certain technical information may also be collected, including your IP address, browser type, device information, pages viewed, referring website and information collected through cookies or similar technologies.
We do not intentionally collect special-category personal information through our website and ask that you do not provide such information unless it is genuinely necessary.
3. How we collect personal information
We may obtain information directly from you when you complete a website form, send us an email, telephone us, request an estimate or quotation, arrange a meeting, submit drawings or specifications, or enter into a contract with us.
We may also receive business contact information from your employer, architect, designer, contractor, project manager or another member of a project team where this is reasonably necessary for us to work on the project.
Our website is built using Wix, which may process website, form and technical information on our behalf as part of providing website hosting and related services.
4. Why we use your information and our lawful basis
We only use personal information where we have an appropriate lawful basis. UK data-protection law requires organisations to identify and explain the basis relied upon when processing personal data.
PurposeTypical lawful basis
Responding to enquiries and preparing estimates or quotationsSteps taken at your request before entering a contract and/or legitimate interests
Designing, manufacturing, delivering and installing a projectContract and/or legitimate interests
Communicating with clients, contractors, designers and project teamsLegitimate interests and/or contract
Managing appointments and site surveysContract, pre-contract steps and/or legitimate interests
Invoicing, bookkeeping and financial administrationContract and legal obligation
Maintaining business and project recordsLegal obligation and legitimate interests
Protecting our website, systems and business from fraud, misuse or security threatsLegitimate interests
Improving our website and understanding its useConsent where non-essential cookies or analytics require it
Sending relevant business-to-business marketingLegitimate interests where permitted, or consent where required
Complying with legal or regulatory obligationsLegal obligation
Where we rely on legitimate interests, those interests may include operating and developing our business, responding efficiently to commercial enquiries, managing client relationships, delivering projects, protecting our systems and promoting relevant commercial furniture and workplace services. We consider these interests against the rights and reasonable expectations of the individual concerned.
5. Business-to-business marketing
The Best Office primarily serves commercial organisations, including landlords, serviced-office operators, contractors, developers, architects, designers, facilities managers and businesses responsible for commercial workplaces.
We may therefore occasionally contact relevant business contacts regarding The Best Office or EDIWOOD services where permitted by law and where we reasonably believe the information is professionally relevant.
UK rules distinguish between marketing to corporate organisations and marketing to individuals such as sole traders. Marketing emails to corporate subscribers generally do not require prior consent under PECR, although UK GDPR still applies where a named person's personal information is being used. Sole traders and certain partnerships have additional protections. In all cases, recipients can object to direct marketing and we will respect unsubscribe or opt-out requests.
We do not sell personal information to marketing organisations.
6. Cookies and website technologies
Our website may use cookies and similar technologies to operate correctly, remember preferences, understand website performance and, where enabled, support analytics or marketing.
Essential technologies required to provide the website may operate without consent where legally permitted. Non-essential cookies and tracking technologies will only be activated where the appropriate consent has been obtained.
UK guidance requires users to be given clear information about non-essential cookies and a genuine choice before they are placed or accessed. Simply continuing to browse a website is not sufficient consent.
Further details should be provided in our separate Cookie Policy and through the cookie-management controls available on the website.
7. Who we may share your information with
We may share personal information where reasonably necessary with website and IT service providers such as Wix, email and cloud-service providers, accountants and professional advisers, payment and banking providers, suppliers, manufacturers, subcontractors, delivery providers and installers involved in fulfilling a project.
Information may also be shared with architects, designers, contractors, project managers or other parties involved in a project where coordination requires it.
We may disclose information to HMRC, courts, regulators, law-enforcement bodies or other authorities where required by law.
We only provide third parties with information that is reasonably necessary for the relevant purpose and expect service providers processing personal information on our behalf to protect it appropriately.
8. International transfers
Some technology and cloud-service providers may process or store information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps required by UK data-protection law to protect it. Depending on the destination and provider, these protections may include UK adequacy regulations, contractual safeguards or other legally approved transfer mechanisms.
9. How long we keep information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, tax, accounting, warranty and contractual requirements.
Enquiries that do not proceed to a project will generally be retained only for a reasonable period to allow us to respond to follow-up enquiries and maintain appropriate business records. Project, contractual, financial and invoice information may normally be retained for up to six years or longer where legally required or where necessary in connection with an ongoing dispute, warranty or legal claim.
Marketing information is retained until you unsubscribe, object to the processing or we determine that it is no longer appropriate to retain it.
Technical and cookie information is retained in accordance with the purpose and duration stated in our Cookie Policy and the settings of the relevant service provider.
10. Security
We take reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.
Access to personal information is limited to people and service providers who reasonably require it for legitimate business purposes.
No internet-based service can guarantee absolute security, but we review our systems and working practices with the aim of maintaining an appropriate level of protection.
11. Your data-protection rights
Depending on the circumstances, UK data-protection law gives you rights to request access to personal information we hold about you, request correction of inaccurate information, request deletion, restrict certain processing, object to processing, request data portability and withdraw consent where processing is based on consent.
You also have an absolute right to object to your personal information being used for direct marketing.
Not every right applies in every circumstance, and legal or contractual obligations may sometimes require us to retain particular information.
The ICO requires privacy notices to explain these rights, retention arrangements, recipients, international transfers and the right to complain.
To exercise a right, contact info@ediwood.co.uk.
We may need to verify your identity before responding to a request.
12. Data-protection complaints
If you believe we have not handled your personal information correctly, please contact us at:
info@ediwood.co.uk
0131 629 5036
From 19 June 2026, UK organisations are subject to specific statutory requirements for handling data-protection complaints. We will provide a clear means of raising a complaint, acknowledge qualifying data-protection complaints within the required period, investigate the matter appropriately, keep you informed and communicate the outcome.
You also have the right to raise concerns with the Information Commissioner's Office (ICO), the UK's data-protection regulator. Information Commissioner's Office
We would appreciate the opportunity to address your concerns directly before you contact the ICO.
13. Automated decision-making
We do not currently use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
If this changes, this Privacy Policy will be updated and appropriate safeguards will be implemented.
14. Links to other websites
Our website may contain links to external websites operated by manufacturers, suppliers or other organisations.
We are not responsible for the privacy practices of those third-party websites. We recommend reviewing the privacy policy of any external website before providing personal information.
15. Children's information
The Best Office provides commercial furniture and workplace services and our website is not intended for children.
We do not knowingly collect personal information from children through this website.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, technology or legal obligations.