Privacy Policy

Privacy Policy

Last updated: May 2025

This Privacy Policy explains how Refurbished Office Furniture UK (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website at refurbishedofficefurniture.co.uk or make a purchase from us. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What Data We Collect

When you browse our website, place an order, or contact us, we may collect the following personal data:

  • Identity data: First name, last name, company name (if applicable)
  • Contact data: Email address, phone number, delivery address, billing address
  • Transaction data: Details of products purchased, payment amounts, and order history
  • Technical data: IP address, browser type, device information, pages visited, time on site (collected via cookies and analytics tools)
  • Communication data: Emails and messages you send us

2. How We Collect Your Data

  • Directly from you: When you place an order, fill out a contact form, or email us
  • Automatically: Via cookies and analytics tools when you browse our website
  • From payment processors: We use Shopify Payments and other PCI-DSS compliant payment providers. We do not store your card details.

3. How We Use Your Data

We use your personal data to:

  • Process and fulfil your order
  • Send order confirmations and delivery updates
  • Respond to your enquiries and provide customer support
  • Improve our website and product offerings
  • Comply with legal obligations
  • Send marketing communications, only where you have given consent or where we have a legitimate interest (you can opt out at any time)

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract: To fulfil your order and provide our services
  • Legal obligation: To comply with tax, accounting, and regulatory requirements
  • Legitimate interests: To improve our services and communicate with existing customers
  • Consent: For marketing emails (you can withdraw consent at any time)

5. Data Sharing

We do not sell your personal data. We may share it with:

  • Delivery partners: To fulfil and track your order
  • Payment processors: Shopify Payments and connected providers (PCI-DSS compliant)
  • Analytics providers: Google Analytics (anonymised data) to understand website usage
  • Legal authorities: If required by law or to protect our legal rights

6. Data Retention

We retain personal data only for as long as necessary:

  • Order and transaction data: 7 years (UK tax law requirement)
  • Marketing data: Until you unsubscribe or withdraw consent
  • Contact enquiry data: 2 years from last contact

7. Your Rights Under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Erase your data (where no legal obligation to retain applies)
  • Restrict or object to processing
  • Portability — receive your data in a structured, machine-readable format
  • Withdraw consent for marketing at any time

To exercise any of these rights, contact us at our contact page. We will respond within 30 days.

8. Cookies

We use cookies to improve your browsing experience, analyse site traffic, and personalise content. By continuing to use our website, you consent to the use of cookies in accordance with this policy. You can manage cookie preferences through your browser settings at any time.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses SSL/TLS encryption. Payment data is handled exclusively by PCI-DSS compliant processors and is never stored on our servers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available at this URL. We will notify you of significant changes by email where we hold your contact details.

11. Contact & Complaints

For privacy-related queries, contact us via our contact page. If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.