Privacy Policy

We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:

• Where we need to perform a contract we have entered into with you.
• Where we need to comply with a legal obligation.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

We may also use your personal information in the following situations, which are likely to be rare:

• Where we need to protect your interests (or someone else's interests).
• Where it is needed in the public interest or for official purposes.

We use your information to:

• Make our products or services available to you;
• Process your orders;
• Carry out our obligations arising from any contracts entered into by you and us;
• Take payment from you or give you a refund;
• Help us to prevent fraud;
• Personalise your shopping experience, for example by understanding your location or how you use our websites to provide you with personalised offers or shopping ideas;
• Conduct market research, either ourselves or with reputable agencies, to improve services;
• For statistical analysis to help us understand more about you as a customer, the products and services you consume, the way you consume them and how, and where, you shop so we can serve you and other customers like you better;
• Improve our services, showrooms and websites;
• Where you have given your consent (if necessary), contact you about our products and services, including seeking your views or comments on the products and services we provide;
• Notify you of changes to our Services;
• Provide for the safety and security of our colleagues and customers, for example via CCTV;
• Help answer your questions and solve any issues you have; and
• Process a job application.

We will not sell or rent your information to third parties.

We will not share your information with third parties for their marketing purposes.

We work with partners, suppliers, insurers and agencies for the purposes of completing tasks and providing services to us, or to you on our behalf (for example the provision of delivery of our products or services).

However, when we use third-party service providers, we only share the personal information that allows them to provide their services to us or to facilitate them providing their services to you. We also have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes.

Please be reassured that we will not release your information to third parties for them to use for their own direct marketing purposes, unless you have requested us to do so, or we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.

We may transfer your personal information to other organisations in certain scenarios. For example:

• We may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation;
• If we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or we are asked to do so by a public or regulatory authority such as the Police or the Department for Work and Pensions;
• If we need to do so to exercise or protect our legal rights, users, systems and Services;
• In response to requests from individuals (or their representatives) seeking to protect their legal rights or the rights of others.

We will take steps with the aim of ensuring that your privacy rights continue to be protected.

The security measures that we have in place to protect against the loss, misuse or alteration of your personal information are as follows:

• Limiting access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality;
• Anonymising or pseudonymising of data as appropriate;
• Making use of encryption technologies as appropriate;
• Limiting access to our buildings to those that we believe are entitled to be there (by use of passes, key card access and other related technologies);
• Implementing access controls to our information technology, such as firewalls, ID verification and logical segmentation and/or physical separation of our systems and information;
• Making use of system, data, transmission and access controls and technologies as appropriate;
• Monitoring our systems for possible vulnerabilities and attacks;
• Implementing robust data backup processes and procedures;
• Never asking you for your passwords. It is your responsibility to keep your passwords secure; you should never share them with anyone else. Account passwords are encrypted, which means we cannot see your passwords. Forgotten passwords cannot be resent; they can only be reset.