Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. By using our Service, you agree to the collection and use of information as described in this Privacy Policy.

We comply with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and applicable international privacy laws to protect your personal information.

1. Information We Collect

We may collect and process the following types of personal information:

• Personal Details: First name, surname, email address, and mobile number (optional).
• Log Data: When you visit our website, we may collect information such as your IP address, browser type, browser version, the pages visited, time and date of visit, time spent on pages, and other diagnostic data.
• Cookies and Tracking Data: We use cookies and similar tracking technologies to improve user experience and website functionality.

Additionally, if you submit information through our contact form, we collect the details you provide, including your first name, surname, email address, and optional mobile number.

2. Lawful Basis for Processing (UK & EU GDPR Compliance)

Under the UK GDPR and EU GDPR, we process your personal information based on at least one of the following lawful bases:

• Consent: When you provide explicit consent for processing your data (e.g., signing up for communications).
• Contractual Necessity: When processing is required to provide you with a service you have requested.
• Legal Obligation: When processing is necessary to comply with legal requirements.
• Legitimate Interests: When processing is required for our legitimate business interests, provided it does not override your rights.

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our Service.
• Respond to enquiries and customer support requests.
• Monitor website usage and enhance user experience.
• Ensure website security and detect potential fraudulent activity.
• Comply with legal and regulatory obligations.
• Send you marketing communications (only where you have opted in and provided consent).

4. Cookies and Tracking Technologies

Cookies are small files stored on your device that help us track and enhance your experience on our website. You can choose to disable cookies in your browser settings, but this may affect certain website functionalities.

Types of cookies we use:

• Essential Cookies: Required for website operation.
• Analytical Cookies: Help us analyse website traffic and performance.
• Functional Cookies: Improve usability and personalised experiences.

For more details, refer to our Cookie Policy.

5. Third-Party Service Providers

We may engage third-party companies to:

• Assist in providing our Service.
• Perform Service-related tasks on our behalf.
• Analyse website usage.

These third parties have access to personal information only for the purpose of fulfilling their services and are contractually obligated to maintain confidentiality and comply with relevant data protection laws.

6. International Data Transfers

If we transfer your data outside the UK, EU, or other jurisdictions with strict data protection laws, we ensure appropriate safeguards are in place. This includes:

• Standard Contractual Clauses (SCCs) approved by the European Commission or UK authorities.
• Adequacy decisions confirming an adequate level of protection in the destination country.
• Additional technical and organisational measures to protect your data.

7. Data Security

We take reasonable security measures to protect your personal information. However, no internet-based transmission or electronic storage method is entirely secure. While we strive to use commercially acceptable means to safeguard your data, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law. When data is no longer needed, we securely delete or anonymise it.

9. Your Rights Under GDPR & Global Privacy Laws

Depending on your location, you may have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request corrections to any inaccurate or incomplete data.
• Right to Erasure: Request the deletion of your data (subject to legal limitations).
• Right to Restrict Processing: Request to limit how we process your data.
• Right to Data Portability: Request a copy of your data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: If processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details provided below.

10. Links to Third-Party Websites

Our website may contain links to external websites not operated by us. We are not responsible for their privacy practices, and we encourage you to review their privacy policies when visiting those sites.

11. Children’s Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to remove such information.

12. Legal Compliance

We may disclose your personal information if required to do so by law, regulation, or legal process.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we encourage you to review it periodically. The revised policy will be effective from the date it is posted.

If you have any questions about this Privacy Policy, please contact us at:

Goldfinch Interior Design Ltd
Email: hello@goldfinchinteriordesign.co.uk
Website: https://goldfinchinteriordesign.co.uk

If you are within the UK or EU, you also have the right to lodge a complaint with your local data protection authority:

• UK: Information Commissioner’s Office (ICO) – https://ico.org.uk
• EU: Contact your national data protection authority – https://edpb.europa.eu

This Privacy Policy is compliant with UK GDPR, EU GDPR, and relevant international privacy laws to reflect our commitment to protecting your privacy.