Privacy Policy
Luxury Designer Room Interiors Last updated: [DATE]
This Privacy Policy explains how [COMPANY LEGAL NAME] (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit luxurydesignerroominteriors.co.uk (the “Site”), place an order, book a showroom appointment, or otherwise interact with us. It should be read alongside our [Cookie Policy] and [Terms and Conditions].
We are committed to handling your data in accordance with the UK General Data Protection Regulation (UK GDPR)and the Data Protection Act 2018.
1. Who We Are
[COMPANY LEGAL NAME] is the “data controller” of your personal data. Our details:
- Company number: [COMPANY NUMBER]
- Registered address: [REGISTERED ADDRESS]
- Email: [CONTACT EMAIL]
- Phone: [CONTACT PHONE]
If you have any questions about this policy or how we handle your data, please contact us using the details above.
2. What Personal Data We Collect
Depending on how you interact with the Site, we may collect:
| Category | Examples | Collected when |
|---|---|---|
| Identity data | Name, title | Order, account creation, booking |
| Contact data | Email address, phone number, delivery/billing address | Order, account creation, booking, newsletter signup |
| Order data | Products purchased, order value, order history | Placing an order |
| Payment data | Card details (processed by our payment provider, not stored by us), billing address | Checkout |
| Booking data | Preferred appointment date/time, showroom location, notes provided | Booking a showroom visit via Amelia |
| Technical data | IP address, browser type, device information, pages visited | Automatically, via cookies/analytics when you browse the Site |
| Marketing preferences | Whether you’ve opted in to email marketing | Newsletter signup, checkout opt-in |
| Correspondence | Emails, enquiry form submissions, chat/call notes | When you contact us |
We do not knowingly collect data from anyone under the age of 18.
3. How We Collect Your Data
- Directly from you — when you place an order, create an account, book an appointment, sign up to our newsletter, or contact us.
- Automatically — via cookies and similar technologies as you browse the Site (see our [Cookie Policy] for full details).
- From third parties — such as our payment provider (confirming successful payment) or delivery couriers (confirming delivery status).
4. How We Use Your Data and Our Legal Basis
| Purpose | Legal basis under UK GDPR |
|---|---|
| Processing and fulfilling your order, arranging delivery | Performance of a contract |
| Managing your showroom appointment booking | Performance of a contract |
| Creating and managing your account | Performance of a contract |
| Responding to enquiries and customer service requests | Performance of a contract / legitimate interests |
| Sending order confirmations, delivery updates, and appointment reminders | Performance of a contract |
| Sending marketing emails about new collections or offers | Consent (you can withdraw at any time) |
| Analysing Site usage to improve design and content | Legitimate interests |
| Preventing fraud and maintaining Site security | Legitimate interests / legal obligation |
| Complying with tax, accounting, and legal record-keeping requirements | Legal obligation |
Where we rely on consent (e.g. marketing emails, non-essential cookies), you can withdraw this at any time — see Section 8.
5. Who We Share Your Data With
We do not sell your personal data. We share it only where necessary, with:
- Payment processors (e.g. [STRIPE / PAYPAL / OTHER]) — to securely process payments. We do not store full card details ourselves.
- Delivery and logistics partners — to deliver your furniture/lighting orders, including specialist white-glove delivery services for larger items.
- Booking software provider (Amelia / TMS) — to operate the showroom appointment booking system; booking data is stored on our own website database.
- Email marketing provider (e.g. [MAILCHIMP / KLAVIYO / OTHER]) — if you’ve opted in to receive marketing communications.
- Analytics providers (e.g. Google Analytics) — to understand aggregated, largely anonymised Site usage.
- Professional advisors and authorities — where required for legal, accounting, or regulatory purposes, or to protect our legal rights.
Any third party processing data on our behalf is required to keep it secure and use it only for the purposes we specify.
6. International Transfers
Some of the third-party services we use (for example, Google Analytics or certain hosting/email infrastructure) may transfer data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK’s International Data Transfer Agreement (IDTA) or adequacy regulations, so your data remains protected to UK standards.
7. How Long We Keep Your Data
| Data type | Retention period |
|---|---|
| Order and transaction records | [e.g. 6 years, for tax/accounting purposes] |
| Account data | Until you close your account, plus a reasonable period after |
| Booking data | [e.g. 12 months after the appointment date] |
| Marketing consent records | Until you unsubscribe, plus a record of your unsubscribe for compliance purposes |
| Enquiry/correspondence records | [e.g. 2 years] |
We only keep personal data for as long as necessary for the purposes it was collected for, or as required by law.
8. Your Rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data, where applicable (e.g. it’s no longer needed, or you withdraw consent).
- Restrict processing — ask us to limit how we use your data in certain circumstances.
- Data portability — request your data in a portable format, where technically feasible.
- Object — object to processing based on legitimate interests, or to direct marketing at any time.
- Withdraw consent — where we rely on consent (e.g. marketing emails), withdraw it at any time without affecting past processing.
To exercise any of these rights, contact us at [CONTACT EMAIL]. We will respond within one month, as required by law.
You also have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or by calling 0303 123 1113 — though we’d appreciate the chance to resolve any concerns directly first.
9. How We Protect Your Data
We use appropriate technical and organisational measures to protect your personal data, including secure (HTTPS) connections, access controls on our systems, and using reputable third-party providers for payment processing (so we never store full card details). No online system is 100% secure, but we take reasonable steps to protect your information from unauthorised access, loss, or misuse.
10. Cookies
Our use of cookies and similar tracking technologies is covered separately in our [Cookie Policy], which explains what cookies we use, why, and how you can manage your preferences.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the services we use, or legal requirements. The “Last updated” date at the top shows when it was last revised. We encourage you to review this page periodically.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact:
[COMPANY LEGAL NAME] Email: [CONTACT EMAIL] Phone: [CONTACT PHONE] Address: [REGISTERED/TRADING ADDRESS]
This document is a general template and does not constitute legal advice. Before publishing, replace all placeholders with your actual business details, confirm the specific third-party providers you use (payment, email marketing, analytics, courier/delivery partners) and remove any rows that don’t apply, and set realistic retention periods based on your actual bookkeeping/legal requirements. We recommend a solicitor or data protection consultant reviews this alongside your Cookie Policy and Terms and Conditions before going live, particularly around retention periods and any international data transfers.
