Privacy policy
1. Who we are
[LEGAL NAME LTD] trades as [BRAND] and operates [WEBSITE]. We are the data controller for the personal data described here, which means we decide why and how it is used.
- Registered address: [LEGAL ADDRESS]
- Company number: [COMPANY NUMBER]
- Privacy contact: [EMAIL] or [PHONE]
2. What we collect
Ordering paint and wallpaper needs less data than most sites ask for, so we keep to five groups.
- Identity and contact data: your name, delivery address, billing address, email address and phone number.
- Order and payment data: the items you bought, colour recipes mixed for you, order history and confirmation that payment succeeded. Card numbers are handled by our payment provider and never reach our systems.
- Technical data: IP address, device and browser type, and cookie data.
- Messages: anything you send through the contact form, the colour consult form, email or phone.
- Marketing preferences: whether you asked for our emails, and when.
3. Why we use it, and our lawful basis
| What we do | Lawful basis under UK GDPR |
|---|---|
| Take payment, mix your colour, deliver the order and manage your account | Performance of a contract |
| Answer questions about coverage, batches, deliveries and returns | Contract, or our legitimate interest in supporting customers |
| Send marketing emails about new ranges | Your consent, or the soft opt-in if you have bought from us before |
| Prevent card fraud and keep the site secure | Our legitimate interest in protecting the shop |
| Measure how the site is used so we can improve it | Your consent, given through the cookie banner |
| Keep tax and accounting records | Legal obligation |
Where we rely on legitimate interests, we have weighed our interest against your rights and you can object at any time using the contact details above.
4. Who else sees it
We share data only with the suppliers who help us run the shop, and only the part of it they need:
- Payment processing, by Stripe and PayPal.
- Delivery, by Royal Mail and DPD, including pallet carriers for large masonry orders.
- Website hosting and the shop platform.
- Email and marketing tools, used to send order updates and, if you asked for them, newsletters.
- Website analytics, which only runs if you accept analytics cookies.
We also disclose data where the law requires it, such as a court order or a request from HM Revenue and Customs. We do not sell your personal data, and we do not pass it to advertisers.
5. Data sent outside the UK
Some of our suppliers store data outside the United Kingdom. Where that happens, the transfer is covered either by a UK adequacy decision or by appropriate safeguards, normally the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Ask us at [EMAIL] and we will tell you which applies to a given supplier.
6. How long we keep it
- Order and transaction records, including colour recipes: six years after the end of the tax year in which you ordered, to meet UK accounting rules.
- Account data: while your account is open, then 12 months after you close it.
- Marketing data: until you unsubscribe, and then a short suppression record so we do not email you again by mistake.
- Messages to our support address: 24 months.
- Cookie and analytics data: 14 months.
7. Your rights
Under UK GDPR you can ask us to give you a copy of your data, correct it, erase it, restrict how we use it, or send it to another provider. You can object to processing based on legitimate interests, and you can withdraw consent at any time without affecting what we did before you withdrew it.
Write to [EMAIL] with the request and your order number. We reply within one month and we may ask you to confirm who you are first. There is no charge.
8. Complaints
If something has gone wrong, tell us first at [EMAIL] and we will investigate and write back. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. Complaining to us first does not remove that right.
9. Cookies
Essential cookies keep your basket and your currency choice working, and they are set without consent because the site cannot function without them. Analytics and advertising cookies are set only after you accept them in the banner, and you can change your answer at any time from the link in the footer of every page.
10. Changes to this policy
We update this page when our suppliers or our practices change. The date at the top always shows the current version. If a change materially affects how we use your data, we will say so on this page and email anyone on our list before it takes effect.