Privacy Policy
How we collect, use, and protect your personal information
Rattan Luxe Ltd ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, place an order, or interact with us in any other way.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website or services, you consent to the practices described in this policy.
1. Data Controller
The data controller responsible for your personal information is:
Rattan Luxe Ltd
Registered in England & Wales
Company Number: 16753050
Registered Address: 128 City Road, London EC1V 2NX
Email: [email protected]
2. Information We Collect
We may collect the following types of personal information:
2.1 Information You Provide
- Contact Information: Name, email address, phone number, delivery address, billing address
- Account Information: Username, password, account preferences
- Payment Information: Card details (processed securely via our payment providers), billing details
- Order Information: Products purchased, order history, delivery preferences
- Communications: Enquiries, feedback, reviews, customer service correspondence
- Warranty Registration: Product details, purchase date, serial numbers
2.2 Information Collected Automatically
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent on site, click patterns, referral sources
- Cookies and Similar Technologies: See our Cookies Policy section below
2.3 Information from Third Parties
- Payment verification from payment processors (Stripe, PayPal, Klarna)
- Delivery confirmation from logistics partners
- Marketing data from advertising platforms (with your consent)
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Order Fulfilment (Contractual Necessity)
- Processing and fulfilling your orders
- Arranging delivery and installation
- Processing payments and refunds
- Sending order confirmations and delivery updates
- Managing returns and exchanges
3.2 Customer Service (Contractual Necessity / Legitimate Interest)
- Responding to your enquiries and requests
- Providing after-sales support
- Managing warranty claims
- Resolving complaints and disputes
3.3 Marketing (Consent / Legitimate Interest)
- Sending promotional emails and newsletters (with consent)
- Personalised product recommendations
- Targeted advertising on social media platforms
- Informing you about new products, offers, and events
3.4 Website Improvement (Legitimate Interest)
- Analysing website usage and performance
- Improving user experience and functionality
- Conducting research and analysis
- Preventing fraud and security threats
3.5 Legal Compliance (Legal Obligation)
- Complying with tax and accounting requirements
- Responding to legal requests and court orders
- Protecting our legal rights and interests
4. Legal Basis for Processing
Under UK GDPR, we process your personal data based on the following legal grounds:
- Contract: Processing necessary to fulfil our contract with you (e.g., processing orders)
- Consent: Where you have given clear consent for us to process your data (e.g., marketing emails)
- Legitimate Interest: Where processing is necessary for our legitimate business interests, provided your rights are not overridden
- Legal Obligation: Where we are required to process data by law
5. Data Sharing
We may share your personal information with:
5.1 Service Providers
- Payment Processors: Stripe, PayPal, Klarna for secure payment processing
- Delivery Partners: Courier companies to deliver your orders
- IT Service Providers: Hosting, maintenance, and technical support
- Marketing Platforms: Email marketing and advertising services
- Analytics Providers: Website analytics and performance monitoring
5.2 Legal and Regulatory Bodies
We may disclose your information to comply with legal obligations, enforce our terms, or protect our rights, property, or safety.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
We do not sell your personal information to third parties.
6. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected:
- Order and Transaction Data: 7 years (for tax and accounting purposes)
- Warranty Registration: Duration of warranty period plus 1 year
- Marketing Preferences: Until you withdraw consent
- Account Information: Until you request deletion or account closure
- Website Analytics: 26 months (standard analytics retention)
After the retention period, we securely delete or anonymise your data.
7. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Request limitation of how we process your data
- Right to Data Portability: Receive your data in a structured, commonly used format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at [email protected]. We will respond within one month.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): www.ico.org.uk
8. Cookies Policy
We use cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and personalise content.
8.1 Types of Cookies We Use
- Essential Cookies: Required for the website to function properly (e.g., shopping cart, login sessions)
- Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics)
- Marketing Cookies: Used to deliver relevant advertisements (e.g., Facebook Pixel, Google Ads)
- Preference Cookies: Remember your settings and preferences
8.2 Managing Cookies
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
Most browsers allow you to:
- View what cookies are stored and delete them individually
- Block third-party cookies
- Block cookies from particular websites
- Block all cookies
- Delete all cookies when you close your browser
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
- SSL/TLS encryption for all data transmission
- Secure payment processing through PCI-DSS compliant providers
- Regular security assessments and updates
- Access controls and staff training
- Secure data storage and backup procedures
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
10. International Transfers
Your personal data may be transferred to and processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the ICO
- Transfers to countries with adequate data protection laws
- Binding Corporate Rules for intra-group transfers
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any website you visit.
12. Children's Privacy
Our website and services are not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
