Privacy Policy

1. Introduction and company information

This Privacy Policy explains how Northwood Wardrobe Studio collects, uses, stores, shares, and protects personal data when you visit our website, contact us, request a quotation, purchase our products or services, or otherwise interact with us.

Northwood Wardrobe Studio is the data controller responsible for your personal data for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Company details:

• Data controller: Northwood Wardrobe Studio
• Address: Northwood Wardrobe Studio, 18 High Street, Uxbridge, London UB8 1JZ, UK
• Email: [email protected]
• Phone: +44 20 7946 8372

We are committed to handling personal data lawfully, fairly, and transparently, and to respecting your privacy rights.

2. Data collection and processing

We may collect and process the following categories of personal data:

• Identity data: name, title, and any information you provide in correspondence.
• Contact data: email address, telephone number, billing address, delivery address, and installation address.
• Transaction data: details of products and services purchased, quotations, invoices, payment status, and order history.
• Communication data: messages, enquiries, complaints, feedback, and records of communications with us.
• Technical data: IP address, browser type, device information, operating system, and website usage data.
• Usage data: information about how you use our website and services, including pages viewed and interactions.
• Marketing data: your preferences in receiving marketing from us and your communication preferences.
• Project-related data: measurements, room dimensions, design preferences, photographs, and other information necessary to provide wardrobe design, supply, and installation services.

We collect personal data directly from you when you complete forms, contact us by phone or email, request a consultation, place an order, or otherwise engage with our services. We may also receive data from third parties such as payment providers, delivery companies, installers, or professional advisers where necessary for our business operations.

We do not intentionally collect special category data unless you choose to provide it to us. If you do provide such information, we will only process it where permitted by law and where necessary for a specific purpose.

3. Purpose of data processing

We use personal data for the following purposes:

• to respond to enquiries and provide quotations, consultations, and customer support;
• to design, supply, deliver, and install wardrobes and related products or services;
• to manage orders, payments, invoices, refunds, and account administration;
• to communicate with you about your project, appointments, and service updates;
• to maintain business records and fulfil contractual obligations;
• to improve our website, services, products, and customer experience;
• to send marketing communications where permitted and where you have not opted out;
• to comply with legal and regulatory obligations;
• to prevent fraud, misuse, and security incidents;
• to establish, exercise, or defend legal claims.

Where relevant, we may use measurements, photographs, and design preferences to prepare bespoke wardrobe solutions tailored to your property and requirements.

4. Legal basis for processing

We will only process your personal data where we have a lawful basis under UK data protection law. Depending on the context, our legal bases include:

• Contract: where processing is necessary to enter into or perform a contract with you, such as providing wardrobe design, supply, installation, or related services.
• Legal obligation: where processing is necessary to comply with applicable laws, including tax, accounting, and consumer protection obligations.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and interests. This may include managing customer relationships, improving services, maintaining security, and defending legal claims.
• Consent: where you have given clear consent, for example for certain marketing communications or optional cookies, where applicable.

Where we rely on legitimate interests, we carry out an assessment to ensure that our interests are balanced against your rights and freedoms.

5. Data sharing and third parties

We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include:

• payment processors and financial service providers;
• delivery, logistics, and installation partners;
• IT, hosting, website, and cloud service providers;
• professional advisers, including accountants, insurers, legal advisers, and auditors;
• customer relationship management and communication service providers;
• marketing and analytics providers, where applicable and lawful;
• public authorities, regulators, law enforcement, or courts where required by law;
• third parties involved in a business sale, merger, restructuring, or asset transfer.

We require third parties to process personal data only in accordance with our instructions, applicable law, and appropriate confidentiality and security obligations.

We do not sell your personal data.

6. Data transfer to third countries

Some of our service providers may be located outside the United Kingdom. Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect your data in accordance with UK data protection law.

These safeguards may include:

• transfers to countries that have been deemed to provide an adequate level of protection;
• the use of UK International Data Transfer Agreements or the UK Addendum to the EU Standard Contractual Clauses;
• other lawful transfer mechanisms permitted under applicable law.

If you would like more information about international transfers and the safeguards we use, please contact us using the details below.

7. Storage duration

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, accounting, reporting, and contractual requirements.

In general, retention periods are determined by:

• the nature of the data and the purpose for which it was collected;
• the duration of our relationship with you;
• legal and regulatory retention requirements;
• the need to resolve disputes, enforce agreements, or defend legal claims.

When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in accordance with our retention practices.

8. User rights

Under UK data protection law, you may have the following rights in relation to your personal data:

• Access: to request a copy of the personal data we hold about you.
• Rectification: to request correction of inaccurate or incomplete data.
• Erasure: to request deletion of your personal data in certain circumstances.
• Restriction: to request that we limit the processing of your data in certain circumstances.
• Data portability: to request that we provide your data in a structured, commonly used, machine-readable format, where applicable.
• Objection: to object to processing based on legitimate interests or to direct marketing at any time.

These rights are subject to certain legal conditions and exemptions. We may need to verify your identity before responding to your request.

To exercise any of these rights, please contact us using the details in the Contact Information section.

9. Withdrawal of consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

If you withdraw consent, we may no longer be able to provide certain services or communications to you where consent was necessary for that purpose. You can withdraw consent by contacting us at [email protected].

10. Right to complain

If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO):

• Website: https://ico.org.uk/
• Telephone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, UK

11. Data security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our security practices.

While we take reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. We therefore cannot guarantee absolute security.

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will take appropriate action in accordance with applicable law.

12. Contact information

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact:

• Northwood Wardrobe Studio
• Address: Northwood Wardrobe Studio, 18 High Street, Uxbridge, London UB8 1JZ, UK
• Email: [email protected]
• Phone: +44 20 7946 8372

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updates will be posted on this page with a revised effective date where appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how Northwood Wardrobe Studio protects your personal data.