Privacy Policy

Last updated: [Insert Date]

1. Introduction BlueOak Living Interiors ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, purchase our furniture products, or otherwise interact with us in England.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Who We Are BlueOak Living Interiors is a furniture company based in England, providing furniture and related interior products and services to customers in the United Kingdom.

3. Information We Collect We may collect and process the following categories of personal data:

3.1 Information you provide to us directly

• Contact details: name, billing and delivery address, email address, phone number
• Account details (if applicable): username, password
• Order information: items purchased, payment method (limited details), delivery preferences
• Communication data: emails, messages, reviews, and any other correspondence you send to us

3.2 Information collected automatically When you visit our website, we may automatically collect:

• Technical data: IP address, browser type and version, device type, operating system
• Usage data: pages visited, time and date of visit, time spent on pages, links clicked, referring website
• Cookie data: information collected through cookies and similar technologies (see the Cookies section below)

3.3 Information from third parties We may receive your personal data from:

• Payment processors (e.g., confirmation of payment status)
• Delivery and courier companies (e.g., delivery updates)
• Advertising and analytics providers (e.g., aggregate usage statistics, marketing performance data)

4. How We Use Your Information We use your personal data for the following purposes:

   • To process and fulfil your orders, including delivery and returns
   • To manage your customer account and provide customer support
   • To communicate with you about your orders, enquiries, and our services
   • To provide you with marketing communications (where permitted by law and your preferences)
   • To personalise and improve our website, products, and services
   • To conduct analytics and understand how our website is used
   • To detect, prevent, or investigate fraud, security issues, or misuse of our services
   • To comply with legal obligations and respond to lawful requests from authorities

5. Legal Bases for Processing (UK GDPR) Where the UK General Data Protection Regulation (UK GDPR) applies, we process your personal data on the following legal bases:

   • Performance of a contract: to process your orders, provide our services, and manage your account
   • Legitimate interests: to improve our services, secure our website, prevent fraud, and manage our business (where such interests are not overridden by your rights)
   • Consent: for certain marketing activities, use of optional cookies, and where otherwise required by law
   • Legal obligation: to comply with applicable laws, regulations, and court orders

6. Cookies and Similar Technologies We use cookies and similar technologies on our website to:

   • Enable core site functionality (e.g., shopping basket, account login)
   • Remember your preferences and improve your browsing experience
   • Analyse site traffic and performance
   • Support advertising and marketing activities

You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality and performance of the website. For more information, please refer to our Cookie Policy (if provided separately) or contact us using the details below.

7. How We Share Your Information We may share your personal data with:
   • Service providers and business partners who assist in operating our business, such as:
   • Payment processors
   • Delivery and courier companies
   • IT, hosting, and website service providers
   • Marketing, advertising, and analytics partners
   • Professional advisers, such as lawyers, accountants, or auditors, where necessary
   • Law enforcement authorities, regulators, courts, or other public bodies, where required by law or to protect our rights
   • Any third party in connection with a business transaction, such as a merger, acquisition, or sale of assets, in which case we will take steps to ensure your rights are protected

We require third parties who process personal data on our behalf to respect the security of your data and to treat it in accordance with the law. They may only process your personal data on our instructions and for specified purposes.

8. International Transfers Where we transfer your personal data outside the United Kingdom or the European Economic Area (EEA), we will ensure that appropriate safeguards are in place, such as:
   • Transfers to countries deemed to provide an adequate level of data protection by the UK government; or
   • Use of standard contractual clauses or other legally recognised transfer mechanisms.

You can contact us for more information about the specific safeguards applied to the transfer of your personal data.

9. Data Security We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

10. Data Retention We retain your personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including for:

    • Providing and supporting the services you have requested
    • Satisfying any legal, accounting, or reporting requirements
    • Resolving disputes and enforcing our agreements

The specific retention period may vary depending on the type of data and legal requirements. When personal data is no longer needed, we will securely delete or anonymise it.

11. Your Rights (UK Residents) If you are located in the United Kingdom, you have the following rights under the UK GDPR, subject to certain conditions and exceptions:
    • Right of access: to request a copy of the personal data we hold about you
    • Right to rectification: to have inaccurate or incomplete data corrected
    • Right to erasure: to request deletion of your personal data in certain circumstances
    • Right to restriction: to request that we limit the processing of your data in certain circumstances
    • Right to data portability: to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible
    • Right to object: to object to processing based on our legitimate interests or for direct marketing
    • Rights in relation to automated decision-making and profiling: to request human intervention and to challenge a decision where we use automated processing that has legal or similarly significant effects on you

To exercise any of these rights, please contact us using the details in the Contact Us section below. We may need to verify your identity before responding to your request.

12. Marketing Communications We may send you marketing communications about our furniture products, special offers, or services if you have requested such information or otherwise consented, or where we are permitted to do so under applicable law.

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email; or
• Contacting us using the details below.

Even if you opt out of marketing, we may still send you non-marketing messages related to your orders, account, or other essential services.

13. Third-Party Links Our website may contain links to third-party websites, plug-ins, or services. We are not responsible for the privacy practices of such third parties. We encourage you to read the privacy policies of every website you visit and every service you use.

14. Children’s Privacy Our services are not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe that a child under 16 has provided us with personal data, please contact us so that we can delete such information.

15. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The updated version will be indicated by the "Last updated" date at the top of this page and will be effective as soon as it is made available. We encourage you to review this Privacy Policy periodically.

16. Contact Us If you have any questions about this Privacy Policy, our privacy practices, or if you wish to exercise your data protection rights, please contact us at:

BlueOak Living Interiors [Insert Postal Address] Email: [Insert Contact Email] Telephone: [Insert Contact Number]

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your personal data. Further information is available on the ICO website at https://ico.org.uk.