Data privacy policy

Eco Furniture takes the privacy of its customers very seriously and the security of your personal information is extremely important to us.

This policy together with our terms and conditions outline what information we collect about you and how it will be used and stored by us when you use our website, contact us electronically or call us over the phone.

By making a purchase of products or services from Eco Furniture, or by providing your contact details to us in our showrooms, by visiting ecofurnishings.co.uk, by registering an account, placing an order or by communicating with Eco Furniture online or by phone, you are accepting and consenting to the practices described in this policy.

When we say ‘we’, ‘our’, ‘us’ or ‘Eco Furniture’ in this policy we are referring to Eco Furniture.

For the purpose of the General Data Protection Regulation (EU 2016/679), the data controller is Eco Furniture. Unit 2 Main Drive, East Lane Business Park, North Wembley, HA9 7NA. Registered number: 998514949 (England and Wales).

What information does Eco Furniture collect?

When you place an order with Eco Furniture in one of our showrooms or on our website, the information that we collect and store relating to you is primarily used to enable us to provide our products and services to you. This is to ensure that we can carry out our obligations arising from any contracts entered into between you and us, and to provide you with the information, products and services that you request from us.

As we use third parties for all our delivery services, such as Parcelforce, Royal Mail or other providers, your name, address and contact details may also be shared with them to ensure that we can fulfil our contractual arrangement with you to deliver the products and services you purchase from us.

Eco Furniture hold this information for a period of 10 years. After this period, we will permanently archive any inactive customer accounts. Should you request us to, we will anonymise your information, removing all identifiers i.e. names and addresses connected to any transactions you have made with us.

If you choose to contact us using the chat function enabled on our website, this is supported by a selected third-party provider who will store details of the chat securely on their own servers for 12 weeks.

If you provide information to us about any person other than yourself, you must ensure that they understand how their information will be used and that they have given their permission for you to disclose it to us and for you to allow us to use it for the purposes discussed with you e.g. to arrange for delivery of the furniture.

If you choose to communicate with us by phone, this information will be stored for our records and will be retained securely for 26 weeks.

If you use our website to register an account, participate in discussion boards, enter a competition or giveaway, complete a survey, request a call back from customer services or report a problem with our products and services, the information you provide to us will be stored and may be used to facilitate that request or service.

Information Eco Furniture receives from other sources

We may also collect information about you from other sources and combine such information with information we hold about you, including where:

• We communicate with members of your family or your household in relation to the provision of our services or products (for example, to arrange for delivery).
• Our trusted partners have collected information about you, and you have consented for their disclosure to us. For example, you may have entered a competition with a third party and given your consent for your details to be shared with Eco Furniture for the purposes of entering a prize draw or receiving a product discount.
• Information is available about you publicly or is aggregated or anonymised by a third party. For example, we may apply demographic analysis of your postcode such as average household size, and average income, and the general location.
• You provide information to us through your use or interaction with our social media channels.

Why do we collect information and how do we use it?

Under the GDPR we must have a lawful reason for using (or ‘processing’) your personal information. One of the lawful reasons is ‘legitimate interests’. Legitimate interests means that we can process your personal information if we have a genuine and legitimate reason, and we are not harming any of your rights and interests in doing so.

So, what does this mean? When you provide your personal details to us, we use your information for our legitimate business interests to ensure we can provide you with the best service possible and help us ensure you only receive relevant information from us.

Before doing this, though, we will also carefully consider and balance any potential impact on you and your rights.

Some typical examples of when we might use the approach are for preventing fraud, direct marketing, maintaining the security of our system, data analytics, enhancing, modifying or improving our services, identifying usage trends and determining the effectiveness of our advertising.

We will process the personal information you have supplied to us to conduct and manage our business, which will enable us to give you the most appropriate marketing, information, service and products and provide the best and most secure experience. These are what we consider our legitimate interests.

Our interests

The following are when and why we would use this approach:

Direct marketing: If you have purchased from us from 26th November 2020, Eco Furniture will only send you marketing communications which relates to relevant promotions and offers that we feel will be of interest to you if you have actively consented to receiving it.

If you purchased from us prior to 18th August 2020 you will only receive marketing communications from Eco Furniture which relates to relevant promotions and offers that we feel will be of interest to you if you have actively consented to receiving it.

This information will be shared with partners, suppliers, and agencies so they can process your personal information on our behalf. We only share information that allows them to provide their services to us or to facilitate them providing their services to you. For example, some of our service providers place advertising for us online, about our products and services. As a result, where you have indicated you are happy to receive marketing from us, you might see online advertising that we have placed on the web sites you visit, or the interactive services you use.

We will continue to process your information in this way until you advise otherwise. You can opt out of this processing activity at any point using the unsubscribe link on all emails and included within SMS, and by using the contact us function on our website.

We will never sell your details to other companies so that they can market to you.

Add items to your basket: If you create an account on our websites and add items to your basket but the sale has not been completed, we may contact you by telephone or email to ensure that there were no technical issues that prevented you from completing your purchase. This information will be stored for 30 days before being deleted.

Analytics: We process your personal information, collected as part of your furniture purchases for the purposes of customer analysis, assessment, profiling and direct marketing. This may be on a personalised or aggregated basis to help us with our activities and to provide you with the most relevant information as long as this does not harm any of your rights and interests.

Call recording: Any phone calls you receive from or make to Eco Furniture customer care team may be recorded. This is for training and quality purposes to allow us to ensure a high level of customer service is achieved. We may also record your details of the phone number you use to contact us. This phone number will be deleted after 26 weeks.

Protecting you: We process your information to protect you against fraud when transacting on our website, and to ensure our websites and systems are secure.

Using our websites or apps: During each of your visits to our website we may automatically collect the following information from you:

• Technical information, including the Internet Protocol (IP) address used to connect your device to the Internet, your dwell account login information, browser type and version, time zone setting, the country and telephone area code where your device is located, browser plug-in types and versions, operating system and platform.
• Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our websites (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs), methods used to browse away from a page, and any phone number you dial to contact our sales or Customer Care departments.
  
  

This information will be used to administer our websites and phone services, and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes. It allows us to improve our websites and phone services to ensure that information is provided in the most effective manner for you (and for your device). It allows you to participate in the interactive features of our service if you choose to do so. It will also allow us to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you.

We may combine the information you give to us with information that we collect from third parties about you. We use this information for the purposes set out above.

The personal information collected in this way is held on file for as long as necessary to provide the products and fulfil the transactions you have requested, or for other essential purposes such as complying with our legal obligations, resolving disputes and enforcing our agreements.

Your interests

When we process your personal information for our legitimate interests, we will consider and balance any potential impact on you and your rights under data protection and any other relevant law. Our legitimate business interests do not automatically override your interests – we will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

How do we store your data? Any personal data that is provided to us is stored on our secure servers. Any download of information relating to any transactions entered on our site will be encrypted to help ensure its safety. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share passwords with anyone.

Eco Furniture will only retain personal data for as long as is necessary to provide the products and fulfil the transactions you have requested, or for other essential purposes such as complying with our legal obligations. If you have any questions relating to our retention or destruction of your data, please contact us.

In accordance with the General Data Protection Regulations (EU 2016/679), we employ strict physical, electronic and administrative security measures to protect your information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage both on-line and off-line. The transmission of information via the internet is, however, not secure (e.g. email) and therefore we cannot guarantee the security of data sent to us electronically by you. Any transmission of such data is therefore entirely at your own risk. Where we send data to third parties via the internet (e.g. emails) for the processing of a service, all of the data is sent securely and password protected.

Legal obligations

You should be aware that if we are requested by the police or any other regulatory or government authority investigating suspected illegal activities to provide your personal information, we may be obliged to do so.

We may disclose your personal data to the prospective or actual seller or buyer of such business or assets.

Where we are legally required to disclose your information in order to enforce or apply our terms and conditions or other agreements; or to protect our rights, property, or safety or those of our customers or other third parties, we may be obliged to do so.

Third-party links

Microsites: We have partnered with various trusted third parties to provide services to you. Such services can be accessed through links on our website, email and text links to the third-party company’s microsite. A microsite is a website which is operated by a third-party company and may be dwell branded or not.

These microsites are governed by their own terms and conditions and privacy policies. When you apply for a service from one of our chosen providers by going to their microsite, your personal information will be collected and used by the provider under the terms of their privacy policy.

We are not responsible for their policies or the way they use your data or cookies, and we will not be liable for any loss, damage or distress you may suffer or incur as a consequence.

Access to information and other rights

The GDPR gives you the right to:

• Access information that we hold about you. If you wish to exercise your right of access, you must submit a written request and provide proof of your identity before we supply the information to you.
• Ask us to prevent processing that is causing or is likely to cause you substantial damage or distress.
• Require us not to make certain decisions automatically if they significantly affect you.
• Ask us to make any necessary changes to the personal data we hold about you in order to ensure that it is accurate and up to date.
• Ask us to have your personal data erased and to prevent processing in specific circumstances outlined below:

1. Where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed.
2. When the individual withdraws consent.
3. When the individual objects to the processing and there is no overriding legitimate interest for continuing the processing.
4. The personal data was unlawfully processed (i.e. otherwise in breach of the GDPR).
5. The personal data has to be erased in order to comply with a legal obligation.

We may refuse to comply with a request for erasure when personal data is processed for the following reasons:

• To exercise the right to freedom of expression and information.
• To comply with a legal obligation for the performance of a public interest task or exercise of official authority.
• For public health purposes in the public interest.
• Archiving purposes in the public interest, scientific research historical research or statistical purposes.
• The exercise or defence of legal claims.

Please contact us if you have questions regarding any of these matters.

Contact us

If you have any questions or concerns with how Eco Furniture process your personal information, please do not hesitate to contact us via our website or by email on sales@ecofurnishings.co.uk.

This Privacy Policy was last updated in March 2021.