about what data we collect and store about you and why. It also tells you who we share this
information with, the security mechanisms we have put in place to protect your data and how
to contact us if you have a complaint. This policy is applicable when you enter into a contract
with us to purchase products or to supply us with products and services (whether on behalf
of an organisation or personally), make payment to us, make an enquiry to us, visit our
website at www.mandwfurniture.co.uk (regardless of where you visit it from) or otherwise.
Who we are
M&M Furniture LTD of Unit A&B, Oxcraig Street, 65 West Harbour Road, Edinburgh, EH5 1PW (being our registered office) collects, uses and is responsible for personal data about you. When we do this, we are the ‘controller’ of this information for the purposes of the General Data Protection Regulation and other applicable data protection laws. M&M Furniture LTD. respects your privacy and is committed to protecting your personal data and we have appointed a Data Privacy Manager and a Deputy Data Privacy Manager who are responsible for overseeing questions in relation to this privacy notice. The Data Privacy Manager can be contacted by email: email@example.com. The Deputy Data Privacy Manager is available in the Data
Privacy Manager absence.
The data we collect about you
When carrying out our services following you entering into a contract with us to purchase
products or to supply us with products or services (whether on behalf of an organisation or
personally), make payment to us, make an enquiry to us, visit our website at www.mnmfurniture.co.uk (regardless of where you visit it from) or otherwise, we collect,
use, store and transfer different kinds of personal data about you following personal data
that you provide to us as follows:
- Identity Data including first name, middle name(s), last name
- Contact Data including delivery address, email address and telephone numbers.
- Financial Data including bank account(s), payment card details.
- Technical Data including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website and systems.
- Profile Data including your purchases or orders made by you or with you, your interests, preferences, feedback and survey responses.
- Usage Data including information about how you use our website and services.
We may also collect, use and share Aggregated Data such as statistical or demographic
data for any purpose. Aggregated Data may be derived from your personal data but is not
considered personal data in law as this data does not directly or indirectly reveal your
identity. For example, we may aggregate your Usage Data to calculate the percentage of
users accessing a specific feature on our website and in order to help us to develop our website and services in the future. However, if we combine or connect Aggregated Data with
your personal data so that it can directly or indirectly identify you, we will treat the combined
provide such aggregate information to third parties. These statistics will not include
information that can be used to identify you.
If you fail to provide personal data
Where we need to collect personal data by law, or under the terms of a contract we have
with you, and, you fail to provide that data when requested, we may not be able to perform
the contract we have or are trying to enter into with you (for example, to provide you with
products). In this case, we may have to cancel a contract you have with us but we will notify
you if this is the case at the time.
How is your personal data collected
We may use different methods to collect data from and about you including through:-
- Direct Interactions – you may give us your Identity, Contact, Financial and Special
- Categories of Personal Data by corresponding with us by post, phone, email otherwise. This can include personal data that you provide when you:
subscribe to our newsletter;
enter a competition, promotion or survey; or give us some feedback.
- Automated technologies or Interactions – As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We may collect this personal data by using cookies, sever logs and other similar technologies.
- Third parties or publicly available sources – We may receive personal data about you form various third parties and public sources. We may also record phone conversations we have with you.
How we use your personal data
We will only use your personal data when the law allows us to. Most commonly, we will
use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Marketing and Promotions
We endeavour to provide you with choices regarding certain personal data uses,
particularly around marketing and advertising. We may use your Identity, Contact,
Technical, Usage and Profile Data to form a view on what we think you may want or
need, or what may be of interest to you. This is how we decide which services, offers
and other information (such as in respect of events we may run or news updates we may provide) may be relevant for you (this is what we call marketing). You may receive
marketing communications from us if you have requested information from us,
purchased products from us or supplied products or services to us, or if you provided us
with your details when you entered a competition or registered for a promotion. In each
case, you will only receive such marketing if you have opted-in to receive that marketing
and have not subsequently opted-out of receiving that marketing. We will also get your
express opt-in consent before we share your personal data with any company outside
website. This helps us to understand how our clients and potential clients use our
website so we can improve this in the future.
Who will we share your personal data with 3rd parties
We may have to share your personal data with the following third parties and for the
purposes stated in the “Purposes for which we will use your personal data” above:-
- Our suppliers. Only your postcode would be used as a form of reference to identify your order.
How long will we store your personal data
We will only retain your personal data for as long as necessary to fulfil the purposes we
collected it for, including for the purposes of satisfying any accounting, or reporting
requirements. To determine the appropriate retention period for personal data, we
consider the amount, nature and sensitivity of the personal data, the potential risk of
harm from unauthorized use or disclosure of the personal data, the purposes for which
we process your personal data and whether we can achieve those purposes through
other means, and the applicable legal requirements. Details of retention periods for
different aspects of your personal data are available from us by request. Please be
aware that, by law we have to keep basic information about our clients and suppliers
(including Contact, Identity, Financial and Transaction Data) for six years after the
delivery had taken place for tax purposes.
Whenever you give us personal data, you are consenting to its collection and use in
data on behalf of someone else, you are confirming that you have given them the
information in this privacy notice and that they have agreed for us to use their personal
Your Rights Under the General Data Protection Regulation, you have a number of
important rights that you can exercise free of charge. In summary, these rights are:
- Transparency over how we use your personal data and fair processing of your information;
- Access to your personal data and other supplementary information;
- Require us to correct any mistakes or complete missing information we hold on you;
- Require us to erase your personal data in certain circumstances;
- Receive a copy of the personal data you have provided to us or have this information be sent to a third party, this will be provided to you or the third party in a structured, commonly used and machine readable format;
- Object at any time to processing of your personal data for direct marketing;
- Object in certain other situations to the continued processing of your personal data;
- Restrict our processing of your personal data in certain circumstances;
Guidance from the Information Commissioner’s Office on Individual rights under the
GDPR or by clicking the link here https://ico.org.uk/for-organisations/guide-to-the-
If you want to exercise any of these rights, please:
- Email firstname.lastname@example.org, call 0131 629 4434 or write to our registered office.
- Provide another information so that we can identify you. We may need to contact you to request further information to verify your identity;
- Let us have proof of your identity and address;
- State the right or rights that you wish to exercise;
How to make a complaint
The General Data Protection Regulation (GDPR) also gives you the right to lodge a
complaint with a supervisory authority, in particular in the European Union (or European
Economic Area) state where you work, normally live or where the alleged infringement
of data protection laws occurred. The UK supervisory authority is the Information
Commissioner’s Office (ICO) who can be contacted by telephoning 0303 123 1113
between the hours of 9:00 am and 4:30 pm Monday to Friday or at https://ico.org.uk/concerns/ We would appreciate the opportunity to deal with your concerns before you approach the ICO and would ask that you contact our Data Privacy Manager in the first instance.
Please contact us if you have any concerns (see “who we are” above) for the contact details.
Third-party links on our website
Our website may include links to third-party websites, plug-ins and applications. Clicking
on those links or enabling those connections may allow third parties to collect or share
data about you. We do not control these third-party websites and are not responsible for
their privacy statements. When you leave our website, we encourage you to read the
privacy notice of every website you visit.
We have put in place appropriate security measures to prevent your personal data from
being accidentally lost, used or accessed in an unauthorized way, altered or disclosed.
In addition, we limit access to your personal data to those employees, agents,
contractors and other third parties who have a business need to know. They will only
process your personal data on our instructions and they are subject to a duty of
confidentiality. We have put in place procedures to deal with any suspected personal
data breach and will notify you and any applicable regulator of a breach where we are
legally required to do so.
We do not intend to process your personal data for any reason other than stated within
this privacy notice. If this changes, we will inform you either in writing or by email.
This privacy notice was published and last updated in May 2018. We constantly review
our internal privacy practices and may change this policy from time to time. When we do
we will inform you in writing or by email. It is important that the personal data we hold
about you is accurate and current. Please keep us informed if you personal data
changes during your relationship with us. Get in touch If you have any questions about
this privacy notice or the information we hold about you, please contact us (see “who we
are” above) for the contact details.
If it would be helpful to have this notice provided in another format for example: inanother language, audio, braille etc. please contact us (see ‘Get in touch’ above).
Copyright M&M Furniture LTD. Updated May 2018