Privacy Policy

Last updated: 27 September 2024

1. Background

1.1 This Privacy Policy explains how Bristol Carpets Ltd (“we”, “us” or “our”) looks after your personal data when you visit our website at https://www.bristolcarpets.co/ (the Website) or interact with us in another way, for example as a customer, supplier, or service provider.

1.2 It sets out what information we collect, how we use it, who we share it with, and your rights under data protection law.

1.3 We may update this Privacy Policy from time to time to reflect changes in our services, business practices, or legal obligations. Please check this page periodically for updates.

2. Who We Are

2.1 We are Bristol Carpets Ltd, registered in England and Wales with company number 12213099.

Our registered office is at:
102–104 Henleaze Road
Henleaze
Bristol
BS9 4JZ
United Kingdom

2.2 For visitors to our Website and for individuals purchasing goods or services from us, we act as the data controller. This means we decide how your personal data is collected and used.

3. Contact Details

If you have questions about this Privacy Policy or how we handle your data, please contact:

Data Protection Officer
– Name: John Gibbs
– Telephone: 0117 9517717
– Email: bristolcarpetman@gmail.com

4. The Information We Collect

We may collect and process the following categories of personal data:

Identity Data – name, title.
Contact Data – email, phone number, postal address.
Technical Data – IP address, browser type, operating system, device type, time zone settings.
Usage Data – how you use our Website and services.
Location Data – your device location (if enabled).
Feedback Data – responses to surveys, reviews, or other feedback you provide.

5. How We Use Your Data

We use your personal data only when we have a lawful basis to do so. These include:

Contract – to provide goods or services you have requested, process payments, and send order or delivery updates.
Legal Obligation – to meet regulatory or tax requirements.
Legitimate Interests – to improve our Website, prevent fraud, ensure security, and protect our business operations (only where your rights are not overridden).
Consent – where you agree, e.g. to receive marketing updates.

If you do not provide necessary information, we may not be able to fulfil your order or provide services.

6. Who We Share Your Data With

We may share your personal data with:

Our staff – who are bound by confidentiality obligations.
Suppliers and service providers – e.g. payment processors, delivery partners, IT service providers.
Regulatory bodies – such as HMRC.
Professional advisers – including accountants, auditors, or legal advisers.
Potential buyers – if we sell or restructure the business.

If required by law or court order, we may also disclose data after taking appropriate legal advice.

7. Where Your Data is Stored

Data is primarily stored on secure servers in the UK.
If transferred outside the UK or EEA, we will ensure protection using legal safeguards (such as contracts approved by the ICO).
If you access our Website abroad, data may be processed in your local region.

8. How We Protect Your Data

We use robust measures to safeguard your information, including:

Password protection and access controls
Encrypted data storage and secure networks
Regular security testing and monitoring
Staff training on data handling and confidentiality
Breach detection, reporting, and recovery processes

If a personal data breach occurs, we will notify the regulator and affected individuals where legally required.

9. How Long We Keep Your Data

We retain personal data only as long as necessary for the purpose collected, considering legal, business, and operational requirements.

Customer and contract records – up to 7 years after the relationship ends (to comply with accounting/tax requirements).
Analytics data – retained only as long as necessary for Website performance monitoring.
Marketing data – kept until you unsubscribe or request deletion.

10. Your Rights

Under UK data protection law, you have the right to:

Access – request a copy of your personal data.
Correction – ask us to correct inaccurate or incomplete data.
Deletion – request deletion where we have no legal reason to keep your data.
Restriction – ask us to limit how we use your data.
Objection – object to processing, including direct marketing.
Portability – request transfer of your data in a portable format.
Complain – to the ICO or another supervisory authority if you are unhappy with how we use your data.

We aim to respond to valid requests within one month. To exercise your rights, please contact us at bristolcarpetman@gmail.com