Privacy Policy

1. Introduction

London Carpets is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains who we are, how we collect personal data about you, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.

This policy applies to your use of our website at londoncarpets.com, any enquiry forms you complete, and any communications we have with you in connection with our services. We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data - your first name and last name.
• Contact data - your email address and telephone number.
• Project data - information about your property, project type, location and budget range that you provide in our enquiry form.
• Communications data - records of correspondence with us, including emails and any messages you send us.
• Technical data - if you have given your consent to analytics cookies, internet protocol (IP) address, browser type and version, time zone setting, operating system and platform.
• Cookie consent data - a record of the cookie preferences you have set on this website, stored locally on your device.
• Newsletter subscription data - your email address if you subscribe to our newsletter, stored securely and processed only with your consent.

We do not collect any special category data and we do not collect payment card details through this website.

3. How We Collect Your Personal Data

• Enquiry forms submitted on our website, where you provide your details directly.
• Email and telephone correspondence you initiate with us.
• Newsletter subscription forms, where you voluntarily provide your email address.
• Automated technologies such as cookies and similar tracking technologies, where you have given your consent (see Section 8 on Cookies below).

4. How We Use Your Personal Data and Our Lawful Bases

• To respond to your enquiry and provide our services - Lawful basis: Contract (Article 6(1)(b) UK GDPR), being necessary to take steps at your request prior to entering into a contract, or to perform a contract with you.
• To send you communications about your project - Lawful basis: Contract (Article 6(1)(b) UK GDPR).
• To comply with legal and regulatory obligations - Lawful basis: Legal obligation (Article 6(1)(c) UK GDPR), including obligations under UK tax law, VAT regulations and company law.
• To send you newsletters or marketing communications (only where you have expressly subscribed) - Lawful basis: Consent (Article 6(1)(a) UK GDPR). You may withdraw your consent at any time by contacting hello@londoncarpets.com.
• To improve our website (only where you have consented to analytics cookies) - Lawful basis: Consent (Article 6(1)(a) UK GDPR).

5. How Long We Keep Your Data

• Enquiry data - retained for up to 3 years from the date of the enquiry, or for the duration of any ongoing business relationship, whichever is longer.
• Commission and contract records - retained for 7 years from completion of the project, in accordance with our obligations under UK tax law.
• Newsletter subscriber data - retained until you unsubscribe or withdraw consent. To unsubscribe, email hello@londoncarpets.com.
• Cookie consent records - stored locally on your device and retained for up to 12 months, at which point you will be asked to confirm your preferences again.

6. Who We Share Your Data With

We do not sell, rent or trade your personal data to any third party for their own marketing purposes. We may share your personal data with:

• Our hosting and email service providers - who process data on our behalf as data processors, subject to appropriate data processing agreements.
• Mailchimp (The Rocket Science Group LLC) - if you subscribe to our newsletter and we have enabled Mailchimp integration, your email address will be processed by Mailchimp in accordance with their Privacy Policy. Mailchimp is certified under the EU-US Data Privacy Framework.
• Professional advisers - including solicitors, accountants and insurers, where necessary.
• HM Revenue and Customs, regulators and other authorities - where required by law.

7. International Transfers

We do not routinely transfer your personal data outside of the United Kingdom. Where we use Mailchimp for newsletter management, your email address may be processed on servers in the United States. Mailchimp participates in the EU-US and UK-US Data Privacy Frameworks, providing appropriate safeguards for such transfers in accordance with UK GDPR.

8. Cookies

Our website uses the following categories of cookies:

• Strictly necessary cookies - Essential for the website to function. These cannot be switched off and do not require your consent.
• Analytics cookies - These help us understand how visitors use our website by collecting information anonymously. We only set these if you give your consent.
• Marketing cookies - These may be used to show you relevant advertising on other websites. We only set these if you give your consent.

Your cookie preferences are stored locally on your device and will expire after 12 months. To change your cookie settings at any time, please use the Manage Cookies link in our website footer.

9. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

• Right of access - to request a copy of the personal data we hold about you.
• Right to rectification - to ask us to correct inaccurate or incomplete personal data.
• Right to erasure - to ask us to delete your personal data in certain circumstances.
• Right to restrict processing - to ask us to limit how we use your data in certain circumstances.
• Right to data portability - where processing is based on your consent or a contract and carried out by automated means, to request your data in a structured, commonly used format.
• Right to object - to object to processing based on legitimate interests, and to processing for direct marketing purposes.
• Right to withdraw consent - where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at hello@londoncarpets.com. We will respond within one calendar month. We may need to verify your identity before we can act on your request.

10. Right to Complain to the ICO

If you have a concern about how we handle your personal data and are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

11. Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered or disclosed in an unauthorised way. We have procedures in place to deal with any suspected data security breach and will notify you and the ICO of a suspected breach where we are legally required to do so.

12. Spam Protection

Our website uses technical measures to protect against automated spam submissions, including rate limiting on all forms. These measures process your IP address temporarily to enforce submission limits. This processing is based on our legitimate interest in maintaining the security and integrity of our website (Article 6(1)(f) UK GDPR). IP addresses used for rate limiting are not stored beyond the active session window.

13. Third-Party Links

This website may include links to third-party websites including our ready-made carpet shop. We do not control those websites and are not responsible for their privacy policies. We encourage you to read the privacy notice on every website you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. If we make significant changes, we will notify you by email where we hold your address, or by a prominent notice on our website.

Contact for data protection enquiries:
London Carpets (a trading name of Interiors By Sutton Ltd)
General: hello@londoncarpets.com
Complaints: complaints@londoncarpets.com
Company No: 14113713  ·  VAT No: 504 794 775
Registered in England and Wales