PRIVACY POLICY (UK)
Effective Date: 22 October 2019

Your privacy is important to Rugs For Good Ltd (referred to as “Rugs For Good”, “we”, “our”, or “us”).

This Privacy Policy applies to the products and services we provide through our website www.rugsforgood.co.uk, and our social media channels. It explains how we collect, hold, use, and disclose personal data, and how we comply with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy forms part of our Website Terms & Conditions. It does not apply to information you submit on third-party websites or platforms (for example Instagram, Facebook, Pinterest, X, or YouTube), which are governed by their own privacy policies.

You can contact us with privacy-related questions at: hello@rugsforgood.co.uk

Our commitment to privacy

We respect your privacy and are committed to protecting your personal data. We only use personal information in accordance with UK data protection laws and applicable guidance issued by the UK Information Commissioner’s Office (ICO).

Our role in your privacy

If you are a customer, subscriber, or visitor to our website, this Privacy Policy applies to you.

We are the data controller for the personal data collected through our website and services. This means we determine how and why your personal data is processed.

We do not sell or rent your personal data to third parties.

Your responsibilities

• Please read this Privacy Policy and our Terms & Conditions carefully.
• If you provide us with personal data relating to a third party, you confirm that you have the authority to do so and that the data may be processed in accordance with this Privacy Policy.

When and how we collect personal data

We collect personal data when you interact with us, including when you:

• Visit or browse our website
• Make a purchase or redeem a gift card
• Create an account
• Sign up to newsletters or marketing communications
• Contact us via email, forms, chat, or social media
• Participate in promotions, competitions, surveys, or giveaways
• Accept cookies or similar tracking technologies
• Voluntarily provide information for any reason

Some data is provided directly by you, and some is collected automatically through your use of the website.

Types of personal data we collect

This may include:

• Contact information: name, address, email address, telephone number
• Transaction information: products purchased, order history
• Payment information: processed securely by third-party payment providers (we do not store full card details)
• Technical data: IP address, browser type, device identifiers, operating system, time zone, and location data
• Usage data: pages viewed, links clicked, time spent on pages, and interactions with our website

How and why we use your personal data

Under UK data protection law, we must have a lawful basis for using your personal data. We process personal data for purposes including:

• Operating and maintaining our website
• Providing products and services to you
• Processing payments and orders
• Customer support and communications
• Managing accounts and purchase history
• Fraud prevention and security
• Improving our website, products, and services
• Market research and customer feedback
• Sending marketing communications (where you have given consent)
• Monitoring compliance with our Terms & Conditions

Disclosure of personal data

We may share your personal data where necessary, including:

• With service providers who help us operate our business (e.g. payment processors, delivery partners, IT and hosting providers)
• Within our business and related entities
• Where required by law or regulatory authorities
• With your consent
• For fraud prevention and security purposes

All third parties are required to process personal data securely and in accordance with applicable law.

Marketing communications

We will only send you marketing communications where you have consented or where permitted by law.

You can opt out of marketing communications at any time by:

• Using the unsubscribe link in our emails
• Contacting us at hello@rugsforgood.co.uk

Opting out of marketing does not affect transactional or service-related communications (such as order confirmations).

Cookies and tracking technologies

We use cookies and similar technologies to:

• Enable core website functionality
• Analyse website usage and performance
• Support advertising and remarketing activities

You can manage or disable cookies via your browser settings. Please note that disabling cookies may affect website functionality.

For more information about cookies, visit: https://www.allaboutcookies.org

Google Analytics and social media platforms

Google Analytics

We use Google Analytics to understand how visitors use our website. Google may collect information such as IP address and browsing behaviour. You can opt out of Google Analytics tracking by using Google’s opt-out tools.

Social media platforms

We use analytics tools provided by platforms such as Facebook and Instagram to understand engagement with our content. These platforms process personal data in accordance with their own privacy policies.

Sensitive data

We do not knowingly collect sensitive personal data. Sensitive data includes information about racial or ethnic origin, religious beliefs, political opinions, health data, or sexual orientation.

Your rights under UK GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data (where applicable)
• Restrict or object to certain processing
• Withdraw consent at any time
• Lodge a complaint with the UK Information Commissioner’s Office (ICO)

Requests can be made by emailing hello@rugsforgood.co.uk. We may need to verify your identity before responding.

Data security

We take reasonable technical and organisational measures to protect your personal data, including:

• Secure systems and access controls
• Reputable third-party hosting and payment providers
• Limiting access to personal data to authorised personnel only

While no system can be guaranteed to be completely secure, we take data protection seriously.

International data transfers

Some of our service providers may be located outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as contractual protections or recognised adequacy mechanisms.

Data retention

We retain personal data only for as long as necessary for the purposes it was collected, including legal, accounting, and tax requirements. When data is no longer required, it is securely deleted or anonymised.

Children

Our website is not intended for individuals under the age of 18, and we do not knowingly collect personal data from children.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal, regulatory, or operational requirements. The effective date will always be displayed at the top of this page.

Contact us

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us at: hello@rugsforgood.co.uk

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).