Privacy Policy

1. Who we are

Manor Carpets Colchester operates this website and sells carpets and flooring. For company details and how to contact us, see our Contact Us page. For the purposes of data protection, Manor Carpets Colchester is the data controller in respect of the personal data we collect through this website.

2. What data we collect

We may collect and process the following types of personal data:

• Account information: If you create an account (e.g. name, email address, password). We store your password in an encrypted form.
• Order and checkout information: Name, email, billing and delivery address, phone number, and order details (products, quantities, payment status). We do not store your full card number; card payments are processed by Stripe.
• Contact and enquiries: If you contact us via the website (e.g. contact form or email), we keep your name, email and message content.
• Reviews: If you submit a review, we store the name and content you provide, and we may link it to your order or product for verification purposes.
• Technical and usage data: IP address, browser type, device information, and how you use the site (e.g. pages visited). We may use cookies and similar technologies as described in section 8 below.

3. How we use your data

We use your personal data to:

• Process and fulfil your orders and send order confirmations and delivery updates.
• Manage your account and authenticate you when you sign in.
• Respond to your enquiries and provide customer support.
• Display reviews (with the name and content you provide) on our website.
• Improve our website, services and security (including fraud prevention).
• Comply with legal and regulatory obligations.

We will not use your personal data for marketing (e.g. promotional emails) unless you have given your consent or we are otherwise allowed to do so by law. You can opt out of marketing at any time.

4. Legal basis for processing

We process your personal data only where we have a lawful basis under UK GDPR, including: (a) to perform a contract with you (e.g. processing your order); (b) where necessary for our legitimate interests (e.g. running the business, improving the site, fraud prevention), provided those interests are not overridden by your rights; (c) where you have given consent (e.g. optional marketing); and (d) where we have a legal obligation to process the data.

5. Who we share your data with

We may share your personal data with:

• Payment providers: We use Stripe to process card and other payments. Stripe receives the payment details you provide at checkout. Their privacy policy applies to their processing: stripe.com/gb/privacy.
• Hosting and technology: Our website and data may be hosted or processed by service providers (e.g. cloud or server providers) who act on our instructions and are bound by confidentiality and data protection obligations.
• Delivery and logistics: Where relevant, we may pass your name, address and contact details to carriers to deliver your order.
• Authorities: We may disclose data where required by law or to protect our rights, safety or property.

We do not sell your personal data to third parties.

6. How long we keep your data

We keep your data only for as long as necessary for the purposes set out in this policy or as required by law. For example, we typically retain order and account information for a number of years for accounting, tax and warranty purposes. Contact form and enquiry data may be kept for a limited period after we have responded. You can ask us to delete or restrict your data earlier where we are not legally required to keep it (see "Your rights" below).

7. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. This includes secure connections (HTTPS), restricted access to data, and careful choice of service providers. No method of transmission over the internet or electronic storage is 100% secure; we cannot guarantee absolute security but we work to maintain a high level of protection.

8. Your rights

Under UK data protection law you have rights including:

• Access: To request a copy of the personal data we hold about you.
• Correction: To ask us to correct inaccurate or incomplete data.
• Erasure: To ask us to delete your data in certain circumstances.
• Restriction: To ask us to restrict how we use your data in certain circumstances.
• Objection: To object to processing based on legitimate interests or for direct marketing.
• Data portability: In some cases, to receive your data in a structured, machine-readable format.

To exercise any of these rights, please contact us using the details on our Contact Us page or at info@manorcarpetsuk.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) if you are concerned about how we handle your data: ico.org.uk.

9. Cookies and similar technologies

Our website may use cookies and similar technologies (e.g. local storage) to:

• Keep you signed in and remember your preferences (e.g. session and authentication cookies).
• Remember your basket and checkout progress.
• Understand how the site is used (e.g. analytics) so we can improve it.

You can control or delete cookies through your browser settings. Blocking or disabling certain cookies may affect how the website works (for example, you may need to sign in again or your basket may not persist).

10. Changes to this policy and contact

We may update this Privacy Policy from time to time. The current version will always be on this page with the date of the last update. We encourage you to check this page periodically. By continuing to use the website after changes, you accept the updated policy.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us via our Contact Us page or at info@manorcarpetsuk.co.uk.