Privacy Policy for Plume Drapes
At Plume Drapes, we are committed to protecting your privacy and handling your personal data in a transparent and secure manner. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you interact with our online platform and use our services related to made-to-measure curtains, custom tailoring, bespoke design, fabric consultation, installation, and motorised solutions.
Plume Drapes is located at: 17 Kingfisher Lane, Suite 3, Norwich, Norfolk, NR1 1PT, United Kingdom.
1. Information We Collect
We collect various types of information to provide and improve our bespoke curtain and home furnishings services.
- Personal Identifiable Information: This includes your name, address (for consultations, installations, and deliveries), email address, and phone number, which you provide when requesting a quote, making an enquiry, placing an order, or scheduling an appointment.
- Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data: This may include internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our online platform.
- Usage Data: Information about how you use our website, products, and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties and your communication preferences.
2. How We Use Your Information
We use your personal data for the following purposes:
- To Provide Services: To process your orders for made-to-measure curtains, manage your bespoke design projects, schedule consultations and installations, and deliver our products and services.
- To Communicate With You: To respond to your enquiries, provide customer support, send service-related messages (e.g., order confirmations, appointment reminders), and provide updates about our services.
- For Marketing: To send you marketing communications about our products, services, offers, and promotions that we believe may be of interest to you, where you have opted in to receive such communications.
- To Improve Our Services: To analyse how our online platform and services are used, identify trends, and improve our website functionality, product offerings, and customer experience.
- For Legal and Compliance Reasons: To comply with legal obligations, resolve disputes, and enforce our agreements.
3. Legal Basis for Processing Personal Data (GDPR)
We will only process your personal data where we have a lawful basis to do so under GDPR. These generally include:
- Performance of a Contract: When we need to process your data to fulfil our contractual obligations (e.g., processing your curtain order and arranging installation).
- Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., improving our services, preventing fraud).
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., sending you marketing emails).
- Legal Obligation: Where processing is necessary to comply with a legal or regulatory obligation.
4. Sharing Your Information
We may share your personal data with:
- Service Providers: Third parties who provide services on our behalf, such as payment processors, delivery companies for fabric and finished products, IT and system administration services, and installation teams. These providers only have access to the personal information necessary to perform their functions and are bound by contractual obligations to keep it confidential and secure.
- Advisors: Professional advisors including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
- Legal and Regulatory Authorities: When required by law or to respond to valid legal processes, such as a court order or government request.
- Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
We will not sell, rent, or trade your personal data to third parties for their independent marketing purposes.
5. Data Security
We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered, or disclosed. Access to your personal data is limited to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.
We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
6. Data Retention
We will retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.
7. Your Legal Rights (GDPR)
Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:
- Request access to your personal data (commonly known as a "data subject access request").
- Request rectification of the personal data that we hold about you.
- Request erasure of your personal data.
- Object to processing of your personal data.
- Request restriction of processing of your personal data.
- Request transfer of your personal data.
- Withdraw consent at any time where we are relying on consent to process your personal data.
If you wish to exercise any of these rights, please contact us using the details provided below. You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
8. Third-Party Links
Our online platform may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
9. Changes to This Privacy Policy
We may update this privacy policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you are happy with any changes.
10. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at:
Plume Drapes
17 Kingfisher Lane, Suite 3,
Norwich, Norfolk, NR1 1PT,
United Kingdom.