PRIVACY POLICY - YOUR INFORMATION AND DATA PROTECTION

What’s this policy about and when does it apply?

Your privacy is important to us. In this policy we want to explain to you how we

• use your personal data
• comply with the data protection legal obligations which apply to us and this website so that you understand and have a choice about how your personal data is collected, used and stored (processed).

The policy applies when you use our Website. This policy was last updated on 21st May 2018 to comply with GDPR regulations.
We may make changes to the policy (for example to keep up with changes in the law) so we advise you to check the policy as you use the Website and our services, although we will let you know about material changes.

Who are we?

Online Furniture UK Ltd T/A Chiltern Oak Furniture, a company registered in England and Wales Company Registration number 08981645 whose Registered Office is at Stuart's House - East Wing, Peterborough, PE1 5DD.

Our email address is sales@chilternoakfurniture.co.uk and our website is www.chilternoakfurniture.co.uk

Who do I contact about personal data or change my mind about how you can use it?

Our data protection representative is Henna Amin who you can email at henna@chilternoakfurniture.co.uk if you need any help or information about this policy or about how we collect and use personal data. You can also write to us if you prefer – see Who are you? above.

What personal data and information do you collect?

Personal data is any information which could identify you, including your name, address and email address and IP address.

Depending on how you use the Website and what we provide to you, we collect a range of personal data from you, including your name and contact information (such as your address, telephone number and email) as well as other information which you choose to give us as you use the Website and our services. You may also choose to give us special category personal information so that we can provide services to you as you require.

If you choose not to provide us with personal data, we may be unable to provide some services to you. For example, without your email address we will not be able to email you.

How do you collect personal data?

We may collect your personal data from you in the following ways

• Forms you complete on the Website, such as when you register with us
• Information you provide to us when you buy from us or ask us to provide services to you
• The information you provide when you communicate with us such as by email
• Any surveys or feedback requests which you choose to complete or competitions which you choose to enter
• Information about your visits to our Website which will include (but are not limited to) your IP address, online tracking such as location, browser and type of device you use

How do you use Personal information?

We use personal data so that we can

• Supply you with services you have asked us for
• Send you any information you have asked for or which may interest you, where you have consented to this happening, or information we need to tell you about
• Deal with any request for help or answer your queries and customer support generally
• Give you the best user experience and to enable you to participate in interactive features of our Website
• To analyse and monitor how our Website is used and to help us to administer it (including security and fraud detection) and to run our business generally

What is the lawful basis for processing my personal data?

The law says that we cannot process (collect, use or store) your information unless we have a lawful basis for doing so. There are several lawful bases which we rely on, including

• consent – when you agree that we can use your personal data in a particular way
• contract – to fulfil our contractual obligations to you or because you have asked us to do something before we enter into a contract together
• legal obligation – when the law says that we must, such as for tax reasons
• legitimate interests – when we use your personal data in ways you would reasonably expect, and which have a minimal privacy impact, or where there is a compelling justification

Who do you share personal data with?

There may be times when we must share your personal data with others, for example, where the law requires us or to enforce our rights or protect others, such as for fraud prevention. We may also

• Allow authorised third parties to track and store information about visitors to our website (including IP addresses)
• Disclose your personal data to those who are providing services to us if they have appropriate processes to protect it

Otherwise we will only share your personal information if you have consented to this.

What are my personal data rights?

The law gives you certain rights in relation to your personal data and to exercise or discuss these rights contact Henna Amin who you can email at henna@chilternoakfurniture.co.uk The following rights apply to personal data we collect and process so that you can

• Access your personal data
• Rectify your personal data if it is inaccurate or incomplete
• Ask us to erase your personal data and prevent processing in specific circumstances
• Restrict processing of your personal data in certain circumstances
• Obtain and reuse your personal data for your own purposes across different services
• Object to processing your personal data in certain circumstances

You also have the right to lodge any data protection complaints with the Information Commissioner's Office (ICO), the UK’s supervisory authority. Visit www.ico.org.uk for more information including how to access their helpline.

What about storing and transferring personal data?

We keep your personal data only for as long as it is reasonably required and then it will be deleted or destroyed or anonymised. Your data may be transferred or stored outside the EU to countries which may not have the same data protection as the EU but, if we do this, we will have an agreement with the third party who will be using an approved mechanism to keep personal data secure.

Do you collect and process non-personal Information?

When you use the Website we may also collect non-personal information or aggregated information – that is any information about more than one individual where the individual’s identity is unknown and cannot be inferred from that information. This helps us run our Website and business effectively. An example of this would be the use of ‘Cookies’ which you can read about here.

What about third parties and social media?

You may visit or leave our Website by clicking a link to or from another website or platform operated by a third party – for example, you may use social media icons (such as Twitter). If you do this, please also take the time to read the relevant privacy information provided by other websites/platforms because they may be different. Your information will only be shared where you have agreed to permit this.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.