GDPR Compliance

Last Updated: August 2024

Our Commitment to GDPR

Heritage Furniture Co is committed to compliance with the General Data Protection Regulation (GDPR). We process personal data lawfully, fairly, and transparently in accordance with data protection principles.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you submit an inquiry form or subscribe to communications
• Contract: When processing is necessary to fulfill a service agreement
• Legitimate Interest: For business administration and improving our services
• Legal Obligation: When required to retain records for tax or regulatory purposes

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request access to personal data we hold about you. We will provide a copy of this data in a structured, commonly used format.

Right to Rectification

If personal data we hold is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes it was collected, or if you withdraw consent on which processing is based.

Right to Restrict Processing

You may request restriction of processing in certain circumstances, such as when contesting the accuracy of data or objecting to processing.

Right to Data Portability

You have the right to receive personal data you provided to us in a portable format and to transmit it to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling in our business operations.

Data Protection Officer

For questions regarding data protection or to exercise your rights, please contact:

Heritage Furniture Co
42 Millwright Lane
Stow-on-the-Wold, Gloucestershire GL54 1BN
United Kingdom
Email: [email protected]

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

International Data Transfers

We do not transfer personal data outside the United Kingdom or European Economic Area. All data is stored and processed domestically.

Children's Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data properly:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

Updates to This Notice

We may update this GDPR compliance notice to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.