Privacy policy.

We collect the following categories of personal information so we can respond to your enquiry and deliver our services.

• Enquiry information you give us: name, email, telephone number, postcode, project type and any details you share through our enquiry forms, by email, by phone, by WhatsApp or in conversation at the studio.
• Project information: layout drawings, photographs, room measurements, finish preferences and other materials you provide so we can prepare a design or quotation.
• Website information collected automatically: IP address, device and browser type, referrer URL and pages visited. Collected through our hosting infrastructure and the analytics tools described in our Cookie information.
• Marketing preferences: whether you have opted in to receive newsletters, brochure updates or studio invitations.
• Correspondence: copies of emails, messages and call notes exchanged with the studio.

We process your personal information under UK GDPR Article 6 on the following lawful bases.

• Contract: to respond to your enquiry, prepare quotations, manage your project, deliver and install your commission and provide aftercare.
• Legitimate interests: to operate, secure and improve our website, prevent fraud, communicate with existing clients about related services and develop our business. We balance these interests against your rights and would not process where your rights override ours.
• Consent: to send you marketing emails (where required), to set non-essential cookies and where you have specifically agreed for us to process information for a stated purpose. You can withdraw consent at any time.
• Legal obligation: to keep accounting and tax records, to comply with health and safety duties and to respond to lawful requests from regulators or law enforcement.

We do not sell your personal information. We share it only with:

• Trusted service providers acting as our data processors, including hosting, database, email, customer-support, payment and analytics providers, who are contractually bound to keep your information confidential and to use it only on our instructions.
• Professional advisers such as accountants, insurers and lawyers, where this is necessary for us to obtain advice or to defend a legal claim.
• Tradespeople and installers engaged to deliver your project, limited to what they need to complete the work.
• Regulatory authorities, courts or law enforcement where we are legally required to disclose information.
• A purchaser or successor in the event of a sale, merger or restructuring of the business, in which case we will inform you in advance.

We keep personal information only for as long as we need it for the purposes set out in this policy, or for as long as the law requires.

• Enquiry records that do not progress to a project: up to 24 months from last contact, after which we delete or anonymise the record.
• Active and completed project records: for the duration of the project and for 7 years afterwards, to meet accounting, warranty and product-liability obligations.
• Marketing preferences: until you ask us to stop or unsubscribe, plus a short suppression record to make sure we do not contact you again.
• Website analytics data: in aggregated form within our analytics provider's standard retention.

Some of our service providers process data outside the UK. Where that happens, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, to protect your information. A copy of the relevant safeguard is available on request.

Under UK GDPR you have the right to:

• Request access to a copy of the personal information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete information where we no longer have a lawful basis to keep it.
• Ask us to restrict how we use your information while a request is being resolved.
• Object to processing carried out on the basis of our legitimate interests, including direct marketing.
• Ask us to provide certain information in a portable, machine-readable format.
• Withdraw consent at any time where the processing is based on consent.

To exercise any of these rights, email info@poshdesignltd.co.uk. We will respond within one calendar month. There is no fee, although we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.

We take appropriate technical and organisational measures to protect your information against unauthorised access, loss, alteration or disclosure. These include access controls, encryption in transit, supplier due diligence and staff training. No system is completely secure, so we ask that you do not send sensitive financial or identifying information by email.

This website uses cookies and similar technologies. Please see our Cookie information for the categories used and how to control them.

This website is not directed at children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with information, please contact us so we can delete it.

We may update this policy from time to time. The version in force is the one published here, dated above. Material changes will be highlighted on the website or notified to active clients by email.

If you have any question about how we handle your information, write to info@poshdesignltd.co.uk, call 0121 446 6859 or post to Posh Design Ltd, Unit 5B, Waterside Business Park, 1651 Pershore Rd, Birmingham, West Midlands B30 3DR.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or by calling the ICO helpline on 0303 123 1113. We would appreciate the chance to address your concerns before you approach the ICO.