Privacy Policy for Stowmarket Bathroom & Kitchen Centre

Introduction

Stowmarket Bathroom & Kitchen Centre (referred to as “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy outlines the types of personal data we collect, how we use it, and how we protect it, in accordance with the General Data Protection Regulation (GDPR) and UK privacy laws. By using our services, website, or communicating with us, you agree to the terms outlined in this policy.

1. Data We Collect

We collect and process various types of personal information. This information is collected to provide and improve our services to you. We may collect the following data:

Contact Information: Such as your name, postal address, email address, and telephone number, which allows us to communicate with you and process orders.

Transactional Data: Information related to any purchases or orders you place with us, including details about the products or services purchased, payment amounts, and other order-related details.

Financial Information: We may collect payment details for order processing purposes, though payment card information is handled securely by third-party payment processors who comply with PCI-DSS standards.

Interaction Data: Information about your interactions with us, including emails, feedback, phone calls, and any other communication with our team, which helps us enhance our service.

Technical Information: When you visit our website, we may automatically collect information about your device and browsing habits, such as IP address, browser type, operating system, and pages viewed. This data helps us analyse website performance and improve user experience.

Marketing and Preferences Data: Information on your marketing preferences, including any consents you have given for marketing communications, and any related preferences, such as preferred communication channels.

2. How We Use Your Data

We use the data collected to deliver and improve our services. Specifically, your data may be used for the following purposes:

Order Processing: To manage and fulfil orders, handle returns or refunds, and communicate with you about the status of your order.

Customer Support: To provide customer service, respond to inquiries, and resolve issues or complaints. This helps us offer a more seamless customer experience.

Marketing and Communications: With your consent, we may use your contact details to inform you of promotions, new products, events, or updates that might interest you. You can unsubscribe from these communications at any time.

Service Improvement: We may analyse transaction and interaction data to understand customer needs and preferences, enabling us to improve our products, services, and website functionality.

Legal Compliance: To comply with legal obligations, regulatory requirements, and applicable laws, including responding to lawful requests and orders from law enforcement or regulatory authorities.

Security and Fraud Prevention: We may use personal data to detect and prevent fraud or other illegal activities, and to safeguard our systems and information.

3. Legal Basis for Processing Your Data

We process your personal data only when we have a lawful basis to do so. These include:

Consent: When you provide consent to receive marketing communications or other non-essential services. You may withdraw your consent at any time.

Contractual Necessity: When we need your data to fulfil a contract with you, such as processing an order or providing customer support.

Legal Obligation: When we are required to process your data to comply with legal or regulatory obligations, such as tax or record-keeping requirements.

Legitimate Interests: In some cases, we process your data for our legitimate interests, such as improving our products and services, provided this doesn’t override your rights and interests.

4. Sharing Your Data

We respect the confidentiality of your personal data and do not sell, rent, or trade it with third parties. However, we may share your data in the following cases:

Service Providers: We work with third-party providers (e.g., delivery services, IT providers, and payment processors) who assist us in delivering our services. These providers only process data based on our instructions and are required to adhere to strict data protection standards.

Business Transfers: If we undergo a reorganisation, merger, or sale, personal data may be transferred to the new entity to continue offering our services.

Legal Requirements: We may share your data if required to do so by law, regulation, or in response to a valid legal request from authorities (e.g., law enforcement).

Protection of Rights: We may disclose information where necessary to enforce our rights, protect our property, or safeguard the rights, property, or safety of our employees, clients, or others.

5. Data Security

We are committed to safeguarding your personal information. We implement various security measures to protect your data against unauthorised access, loss, or misuse, including:

Access Controls: Restricting access to personal data to authorised personnel only.

Encryption: Using encryption technology for sensitive data, particularly in payment processing and website transactions.

Physical Security: Ensuring our physical premises and systems are secure.

Regular Monitoring: Reviewing and updating our security practices and policies to address evolving risks and vulnerabilities.

While we strive to protect your data, no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee absolute security but take all reasonable measures to protect your information.

6. Data Retention

We retain your personal data only as long as is necessary to fulfil the purposes outlined in this Privacy Policy or to comply with legal requirements. The retention period depends on the type of data and the purpose for which it is collected. Generally:

Transactional Data is retained for as long as needed to complete your order and comply with applicable laws and record-keeping obligations.

Marketing Data is retained until you withdraw your consent or opt out of communications.

Technical Data collected through our website may be retained to analyse site performance and enhance user experience.

We securely dispose of any data that is no longer needed in a manner that ensures your information remains protected.

7. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you and how it is used.

Right to Rectification: You have the right to correct any inaccurate or incomplete information.

Right to Erasure: Under certain conditions, you may request the deletion of your data.

Right to Restriction: You can ask us to limit the processing of your data in specific circumstances.

Right to Data Portability: You have the right to receive your data in a structured, commonly used format that can be transferred to another service.

Right to Object: You may object to the processing of your data where it impacts your rights or freedoms.

To exercise these rights, please contact us using the details provided at the end of this policy.

8. Marketing Communications

If you have opted-in to receive marketing communications, we may use your contact details to send promotional materials and updates. You can unsubscribe at any time by:

Clicking the “unsubscribe” link included in any email communication.

Contacting us directly to request removal from our mailing list.

Once unsubscribed, you will no longer receive marketing emails, though we may still contact you regarding any active orders or necessary service-related communications.

9. Cookies

Our website uses cookies to enhance user experience and gather analytical data. Cookies are small files stored on your device, allowing us to recognise you and remember certain preferences. You can control cookies through your browser settings, although disabling them may affect site functionality. For more details, please refer to our Cookie Policy.

10. Changes to Our Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or comply with new legal requirements. All updates will be posted on our website, and any significant changes will be communicated to you directly where appropriate.

Contact Us

For any questions, concerns, or requests regarding this Privacy Policy, please reach out to us at:

Stowmarket Bathroom & Kitchen Centre

Address: 3 Mill Street, Stowupland, Stowmarket IP14 5BJ

Telephone: 01449 774900

Email Address: sales@stowmarketbathrooms.co.uk

Effective Date: 05/11/2024