1. Introduction
Welcome to the privacy policy of The Desk Warehouse Limited ("we", "us", or "our"). We operate the websites deskwarehouse.co.uk and deskwarehouse.ie (collectively, the "Site").
We are committed to protecting your privacy and ensuring your personal data is handled in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we collect, use, and protect your information when you visit our Site or purchase from us.
2. Who We Are (Data Controller)
The data controller responsible for your personal information is:
- Company Name: The Desk Warehouse Limited
- Registered Address: Owen O'Cork Mill, 288 Beersbridge Road, Belfast, BT5 5DX, United Kingdom
- Email: sales@deskwarehouse.co.uk
- Telephone: 028 9046 0055
3. The Data We Collect
We may collect, use, store, and transfer different kinds of personal data about you, including:
- Identity Data: First name, last name, username (if you create an account).
- Contact Data: Billing address, delivery address, email address, and telephone numbers.
- Financial Data: We do not store your full credit/debit card details. Payment transactions are processed securely by our third-party payment processor, Stripe. We only retain limited information (e.g., the last 4 digits of a card) for verification purposes.
- Transaction Data: Details about payments to and from you and other details of products you have purchased from us.
- Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and data regarding your interaction with our Site (collected automatically via cookies and analytics).
- Marketing Data: Your preferences in receiving marketing from us and your communication preferences.
4. How We Use Your Data
We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:
- Contractual Necessity: To process and deliver your order (e.g., sharing your address with our couriers).
- Legal Obligation: To comply with tax and accounting laws (e.g., retaining records for HMRC).
- Legitimate Interests: To manage our relationship with you, improve our website security, analyze website usage, and prevent fraud.
- Consent: To send you marketing communications where you have actively opted in.
5. Cookies & Analytics
We use cookies and similar tracking technologies to track the activity on our Site and store certain information.
- Essential Cookies: Required for the operation of our website (e.g., holding items in your shopping basket).
- Google Analytics: We use Google Analytics to help us understand how customers use the Site. Google Analytics collects information anonymously and reports website trends without identifying individual visitors. You can read more about how Google uses your personal information here. You can also opt-out of Google Analytics here.
6. Marketing Communications
- Newsletter: We may send you newsletters or promotional emails regarding our products if you have opted in to receive them (e.g., by ticking a box at checkout or entering your email in a signup form).
- Opting Out: You can ask us to stop sending you marketing messages at any time by following the "unsubscribe" link on any marketing message sent to you or by contacting us directly at sales@deskwarehouse.co.uk.
- Service Messages: Please note that opting out of marketing messages will not stop us from sending you essential service messages related to your orders (e.g., order confirmations and delivery updates).
7. Payment Processing (Stripe)
Our store uses Stripe to process payments. When you make a purchase, your payment data is transmitted directly to Stripe's secure servers. We do not have access to your full card number or security code (CVC).
- Stripe collects identifying information about the devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection.
- You can learn more about how Stripe handles your data by visiting Stripe’s Privacy Policy.
8. Sharing Your Personal Data
We may share your data with trusted third parties to help us run our business:
- Service Providers: Logistics and courier companies (to deliver your furniture).
- Professional Advisers: Lawyers, bankers, auditors, and insurers.
- IT & System Administrators: Companies that host our website and email systems.
- Regulators: HM Revenue & Customs (HMRC) and other authorities.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.
9. International Transfers
Our payment processor (Stripe) and analytics provider (Google) are headquartered in the US. We ensure that your data is protected by relying on adequacy decisions or specific contracts approved for use in the UK (such as the International Data Transfer Addendum) which give personal data the same protection it has in the UK.
10. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law, we must keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax purposes.
11. Your Legal Rights
Under the UK GDPR, you have rights including:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data (the "right to be forgotten"), subject to our legal retention duties.
- Object to processing of your personal data.
- Request restriction of processing your personal data.
- Request transfer of your personal data.
To exercise any of these rights, please contact us at
sales@deskwarehouse.co.uk.