Your privacy is important to us. When we process your personal data we comply with the UK GDPR and the Data Protection Act 2018, together with any other applicable data protection and privacy legislation.
Your personal data includes all the information we hold that identifies you or is about you. More information about the types of personal data we process about you is set out below.
Everything we do with your personal data counts as processing it, including collecting, storing, amending, transferring and deleting it.
Furniture Choice Limited trading as Furniture And Choice (“Furniture And Choice”) is registered in England with registered company number 05349107 and address at Unit 22 Bankfield Business Park, Huddersfield Road, Mirfield, West Yorkshire, WF14 9DQ. Furniture And Choice is the data controller of the personal data you provide.
If you have any questions about the ways in which we process your personal data, please contact us at email@example.com.
If you place an order for our products or ask us to send a swatch to you (whether through our website, by phone or by other means) we process the following information about you:
We do not process any of your payment information. When you provide your credit or debit card details to us, it is encrypted so that Furniture And Choice is unable to access the data, and passed to third-party payment gateway providers.
We process most of your information on the grounds of fulfilment of our contract with you, namely to confirm your order, contact you about delivery, arrange for your payment to be processed and provide you with the products you have purchased. We may also use your personal data for our legitimate interests, including for the purposes of fraud protection and for training and quality.
If you work for one of our suppliers or are one of our business contacts, we usually process your name and business contact details, such as your business email address and phone number and the address of your organisation. We process the information on the grounds of our legitimate interests in maintaining our relationship with you.
We use CCTV in and around our premises for the purposes of crime prevention, detection and security. CCTV footage is retained for a period of one month and then automatically deleted unless the footage provides evidence or is otherwise relevant to an incident, accident, crime or similar scenario, in which case we shall retain the footage for as long as necessary in relation to such scenario. We may also be required to disclose the footage to third parties, such as insurers and law enforcement agencies.
If you apply for a job vacancy with us, or speculatively send us your CV, the personal data that we are likely to process about you includes:
We process your information on the grounds of our legitimate interests to determine whether or not we have a suitable vacancy for you. To the extent we need to process special categories of data about you (for example, to ensure our premises are suitably equipped for you if you attend for an interview), we will do so in accordance with our legal obligations. If you provide special categories of data to us which we have not requested, we will process it on the grounds of your consent because you have voluntarily provided the information to us.
We use different methods to collect data from and about you including through:
We receive personal data directly from you when you contact us in respect of a specific vacancy or with a speculative approach. We may also receive information about you from recruiters and agencies that provide temporary workers.
Your personal data is only transferred to the extent that this is necessary. Recipients of your personal data may include:
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
Your personal data may be accessible by our marketing and website development service provider based in Malaysia. We ensure all transfers of data outside of the EEA are governed by appropriate safeguards which, in the case of our Malaysian supplier, are standard contractual clauses for EEA transfers of data and the equivalent safeguard for UK transfers of data.
Your personal data is retained for no more than 11 years from the date you place your order. This enables us to deal with returns, repairs and warranties. After that date your personal data will be deleted or anonymised so that it is no longer personally identifiable. Your information will be kept securely at all times.
Your personal data is retained for the duration of our relationship with you or the organisation for which you work. Please let us know if you leave the organisation or if your details change. If we receive notification from you or your organisation that you no longer work at that organisation, or if we no longer maintain a working relationship with your organisation, we will delete your information from our system.
If we are corresponding with you as a potential supplier, we will retain your details until we receive notification from you or your organisation that you no longer work at that organisation or until we no longer correspond with the organisation for which you work.
We occasionally send newsletters and magazines, in which case we will share your name, email address and (for the purposes of sending you magazines) your billing address with third party mailing companies. We only send you marketing if we are entitled to do so under data protection and privacy legislation, which usually means we either have your consent to send you marketing or we send it to you because you are one of our existing customers. You can unsubscribe to our marketing communications at any time, either by clicking “unsubscribe” in any marketing email we send to you, by visiting my account, by emailing firstname.lastname@example.org or by calling Customer Services on 0333 015 0000.
You benefit from a number of rights in respect of the personal data we hold about you. We have summarised your rights below, and more information is available from the Information Commissioner’s Office website (https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/). These rights apply for the period in which we process your data. There are certain caveats and exemptions to those rights which mean that in some circumstances you may not be entitled to exercise them, if we believe that is the case upon receipt of a request from you we will let you know.
You have the right to ask us to confirm that we process your personal data, as well as access to and copies of your personal data. You can also ask us to provide a range of information, although most of that information corresponds to the information set out in this fair processing notice.
If you believe personal data we hold about you is inaccurate or incomplete, you can ask us to rectify that information.
In some circumstances, you have the right to ask us to delete personal data we hold about you.
In some circumstances you are entitled to ask us to suppress processing of your personal data. This means we will stop actively processing your personal data but we do not have to delete it.
You have the right to ask us to provide your personal data in a structured, commonly used and machine-readable format so that you are able to transmit the personal data to another data controller.
You are entitled to object to us processing your personal data:
We do not intend to use your personal data to send you direct marketing nor for scientific or historical research and statistics.
Automated decision making means making a decision solely by automated means without any human involvement.
You may be subject to automated decision making if you submit a finance application for credit, which would be considered by our third party intermediary. If you do not wish to be subject to automated decision making for that purpose we would be unable to offer you credit.
If you think we have processed your personal data unlawfully or that we have not complied with GDPR, please get in touch with us so we can help. You can report your concerns to the supervisory authority in your jurisdiction. The supervisory authority in the UK is the Information Commissioner’s Office (“ICO”). You can call the ICO on 0303 123 1113 or get in touch via other means, as set out on the ICO website - https://ico.org.uk/concerns/.