We are Lee Longland & Co LTD (“Furniture Barn”, “we”, “us” or “the data controller”). Our company registration number is 898944, and our registered office address is 224 Broad Street, Birmingham B15 1AZ.
Please rest assured that we only collect your personal data for two reasons; for genuine business purposes, or where we are legally required to do so.
What personal data do we have about you?
We have personal information about you that you have given us, and which we have collected.
We collect the information you give us when you do any of the following; place an order in one of our showrooms, website or over the phone. You also give us information when vising our website, filling out forms on our website, subscribing to our services, setting up a members account, creating wish lists, engaging with us on social media, leaving customer reviews and general email correspondence with us. This data can be grouped as follows;
- Identity Data - first name, last name, title. Your image and car number plate may be recorded on CCTV when you visit a store or car park
- Contact Data - billing address, delivery address, email address, telephone numbers, social media username (only if you have interacted with us)
- Financial Data - bank account and payment card details
- Transaction Data - details about payments to and from you and other details of products you have purchased from us
- Technical Data - IP address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website
- Profile Data - purchases or orders made by you, feedback and survey responses.
- Marketing and Communications Data - your preferences in receiving marketing from us and our third parties and your communication preferences.
What will the data be used for?
We can only use your data if we have a proper reason to do so. Which include the following reasons;
- Performance of a contract - We must process your personal information in order to be able to provide you with one of our products (e.g. when you place an order with us)
- Consent - You have told us you are happy for us to process your personal information for a specific purpose (e.g. you have asked to receive information about our great marketing offers)
- Legitimate interests - The processing is necessary for us to conduct our business, but not where our interests are overridden by your interests or rights
- Prevention of fraud - Where we are required to process your data in order to protect us and our customers from fraud or money laundering
- Legal claims - The processing of your personal information is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity
- Legal obligation - We are required to process your personal information by law
What information do we share with others?
We may share your information with selected partners, suppliers or agencies, so that we can provide products and services from us to you. These third parties process your personal information on our behalf, meet our high standard of security and only process it for a specific reason, such as:
- Payment providers that are processing payments
- Estimators, logistics, delivery and installation partners that deliver goods you have ordered from us or quotes you have requested from us
- Our trusted furniture suppliers
- Companies that enable us to collect customer reviews
- Agencies that help analyse customer behaviour
- Email marketing companies
- Advertising companies that aid with marketing
- Various online platforms to show you products that might interest you while you're browsing the internet
- IT support
- Legal and other professional advisors
- Government and enforcement agencies, where required
We will not sell any of your personal data to any third party or pass your data onto third parties who wish to advertise to you – ever. This includes your name, email address, address or any other personal information.
When will we send marketing communications to you?
We will only send marketing communications to you when you have specifically consented to receive them unless there is a proven legitimate interest in so doing. If you consent to receiving marketing communications from us via SMS, e-mail or direct mail, we will tell you about special offers, current or new products, store events, competitions and prize draws via your chosen communication method.
In addition, we may also use your data to help create a profile to find potential customers like you.
For the purpose of advertising and marketing we may need to disclose your personal details to third party sub-contractors. However, your personal data will not be used by a third party for their marketing purposes, only to fulfil our contact regarding the type of advertising you may have opted into.
You have the right to withdraw consent at any time. This can be done in the following ways:
- If you have created an online member profile, you can update your preferences in the member area on the website
- By clicking on the "unsubscribe" link in any email communications that we send you
- Contacting us at;
ADDRESS: Data Protection, 224 Broad Street, Birmingham, B15 1AX
How do we protect your data?
We keep all of your data as secure as if it was our own. We have robust procedures in place that are under constant review;
- We encrypt data where possible
- Delete non-relevant data within a reasonable amount of time
- We restrict physical access to our buildings and user access to our systems, ensuring only the relevant processers see data
- We have strong controls on our information systems, such as firewalls and user verification
- We secure access to all transactional areas of our websites and apps using 'https' technology
How long do we keep your information?
We will take all possible steps to ensure data, is erased, securely destroyed or pseudonymised when it is no longer required. In most circumstances we will keep your personal data for 7 years in line with legal accounting practices. However, there can be situations where we will keep your information longer, for example if a product had a 15-year guarantee.
Do you want us to change how we are using your data?
As outlined above, there are a series of methods to opt out of marketing communications from us, this is known as withdrawing your consent. However under GDPR you also have a series of further rights as outlined below. However please bear in mind that in some cases there will be legitimate, legal or other official reasons for us to keep your data. These include but are not limited to;
- you have an ongoing matter with our Customer Service team
- you have an open order which has not yet been shipped or partially shipped
- you have an unsettled debt with us, regardless of the payment method
- you have made any purchase, in which case we are required to keep your personal data in connection to your transaction for accounting purposes, for 7 years
If you withdraw your consent, this may effect certain products or services that we can offer to you. We will advise you if this is the case at the time you withdraw your consent. With any such requests, we will endeavour to action them without undue delay.
Your Data Rights
- Request access to your personal data (commonly known as a "data subject access request").
- Request correction of the personal data that we hold about you.
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms.
- Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.
- Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.
If you have any further questions or would like to make a data request, please contact us via the following methods so we can help;
- EMAIL: firstname.lastname@example.org
- ADDRESS: Data Protection, 224 Broad Street, Birmingham, B15 1AX
You also have the right to complain to the Information Commissioners Office (ICO) which can be done by visiting: https://ico.org.uk We would always appreciate the chance to deal with your concerns before you approach the ICO so please feel free to contact us in the first instance.
There will be no fee to access your personal data (or to exercise any of the other rights). However, it may be appropriate to charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. If you make a request, we may need to request specific information from you to ensure we are handling the data securely. This may include confirming your identity to enable you to exercise any of the above rights.