Privacy Policy

1 INTRODUCTION

1.1 This privacy policy sets out how Fou Limited collects, uses and is responsible for certain personal information about you. When we do so, we are regulated under the Data Protection Act 2018 (and, until the United Kingdom ceases to be a member of the European Union, the General Data Protection Regulation 2016) (Data Legislation) and we are responsible for that personal information for the purposes of Data Legislation.

1.2 We are committed to ensuring the privacy of our customers and will only use information you have provided to us in the process of making an enquiry with us or placing an order with us for the provision of the services in accordance with this policy.

2 PERSONAL DATA THAT WE COLLECT AND USE

2.1 We collect the following personal information when you provide it to us:

Purpose/Activity Type of data Lawful basis for processing including basis of legitimate interest
To respond to your enquiry which you may rise through our website or other social media platforms like Facebook, Instagram, LinkedIn or Twitter and to sign you up to receive our newsletter

(a) Identity

(b) Contact

Responding to your enquiry or request to our marketing information like newsletter
To register you as a new customer and creating and maintaining a user account

(a) Identity

(b) Contact

Performance of a contract with you

To process and deliver your order including:

(a) Delivering the goods to you in accordance with your order

(b) Manage payments, fees and charges

(c) Collect and recover money owed to us

(a) Identity

(b) Contact

(c) Financial

(d) Transaction

(e) Marketing and Communications

(a) Performance of a contract with you

(b) Necessary for our legitimate interests (to recover debts due to us)

To manage our relationship with you which will include:

(a) Notifying you about changes to our terms or privacy policy

(b) Asking you to leave a review or take a survey

(a) Identity

(b) Contact

(c) Profile

(d) Marketing and Communications

(a) Performance of a contract with you

(b) Necessary to comply with a legal obligation

(c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)

To enable you to partake in a prize draw, competition or complete a survey

(a) Identity

(b) Contact

(c) Profile

(d) Usage

(e) Marketing and Communications

(a) Performance of a contract with you

(b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)

To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

(a) Identity

(b) Contact

(c) Technical

(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)

(b) Necessary to comply with a legal obligation

To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you

(a) Identity

(b) Contact

(c) Profile

(d) Usage

(e) Marketing and Communications

(f) Technical

Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
To use data analytics to improve our website, products/services, marketing, case studies, customer relationships and experiences

(a) Usage

(b) Technical

Necessary for our legitimate interests (to define types of customers for our product solutions and services, to keep our website updated and relevant, to develop our business and to inform our marketing and business development strategy)

We group different kinds of personal data about you as follows:

  • Identity Data includes first name, maiden name, last name, username or similar identifier and title.
  • Contact Data includes billing address, delivery address, email address and telephone numbers.
  • Financial Data includes bank account and payment card details.
  • Transaction Data includes details about payments to and from you and other details of products you have purchased from us.
  • Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
  • Usage Data includes information about how you use our website, products and services.
  • Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

2.2 We also collect, use and share aggregated datasuch as statistical or demographic data for any purpose. aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

2.3 We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

2.4 Generally, we do not rely on consent as a legal basis for processing your personal data although we will get your consent before sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.

2.5 This website is not intended for childrenand we do not knowingly collect data relating to children.

2.6 Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

2.7 Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our cookie policy for further details.

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. Further information can be found at www.aboutcookies.org or www.allaboutcookies.org. You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. In a small number of cases, some of the functions of our website may not function as a result.

2.8 Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:

  • Technical IT data from analytics and search information providers such as Google based outside the EU or advertising networks such as Facebook based outside the EU;
  • Identity and contact data from publicly availably sources such as Companies House based inside the EU and social media platforms such as LinkedIn, Twitter and Facebook based outside the EU.
  • Contact, Financial and Transaction Data from providers of technical, payment and delivery services such as Stripe based outside the EU.

2.9 We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).You will receive marketing communications from us if you have requested information from us or purchased services from us and you have not opted out of receiving that marketing.

We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.

You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you. Where you opt outof receiving these marketing messages, this will not apply to personal data provided to us as a result of a product/service purchase, product/service experience or other transactions.

2.10     We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

3 WHO WE SHARE YOUR PERSONAL INFORMATION WITH

3.1 We may share your personal data with the parties set out below for the purposes set out in the table above.

Our third party service providers who process data on our behalf, or who facilitate or are outsourced one or more aspects of the operation of the website or business, such as warehouse management, delivery services provider, website host and related services providers, IT services providers, accounting and auditing, building customer profiles for marketing purposes.
Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

3.2 We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

4 TRANSFER OF YOUR INFORMATION OUT OF THE EEA

Many of our external third parties are based outside the EEA so their processing of your personal data may involve a transfer of data outside the EEA such as our payment services provider.

These transfers are subject to special rules under Data Legislation and whenever we transfer your personal data out of the EEA, we ensure that the transfer complies with that legislation and that all personal information will be secure.

5 DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

6 HOW LONG WILL YOU USE MY PERSONAL DATA FOR

6.1 We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

6.2 We will hold your contact details and transaction history for seven years (or such other period as may be required for legal, insurance or regulatory purposes) after the end of your contract with us, if you are receiving our marketing communications relating to our products or our e-newsletter, in which case we will retain your contact details after such period unless and until you opt out of receiving such communications from us. We do not hold any payment details which are processed by third parties. In unlikely event we gather nay payment information, we intend to delete the details within 30 days of receipt.

6.3 To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

6.4 In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

7 YOUR LEGAL RIGHTS

7.1 Under the Data Legislation, you have a number of important rights free of charge. In summary, those include rights to:

  • Fair processing of information and transparency over how we use your use personal information;
  • Access to your personal information and to certain other supplementary information that this privacy policy is already designed to address;
  • Require us to correct any mistakes in your information which we hold;
  • Require the erasure of personal information concerning you in certain situations;
  • Receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations;
  • Object at any time to processing of personal information concerning you for direct marketing;
  • Object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you;
  • Object in certain other situations to our continued processing of your personal information;
  • Otherwise restrict our processing of your personal information in certain circumstances.

7.2 For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the Data Legislation.

7.3 If you would like to exercise any of those rights, please:

  • Email, call or write to us (contact details are at the bottom of this page);
  • Let us have enough information to identify you (e.g. full name, company details or purchase order (if relevant));
  • Let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill);
  • Let us know the information to which your request relates.

7.4 If you would like to unsubscribe from any marketing email communications you can also click on the ‘unsubscribe’ button at the bottom of the marketing email.

7.5 You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

7.6 We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

8 HOW TO COMPLAIN

8.1 We hope that we can resolve any query or concern you raise about our use of your information.

8.2 You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues who may be contacted at https://ico.org.uk/concerns/ or telephone: 0303 123 1113. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

9 EXTERNAL WEBSITES

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

10 AMENDMENTS

We may change this policy from time to time, when we do, we will inform you via email.  This privacy policy was published on 27/08/2020 and last updated on 27/08/2020.

11 HOW TO CONTACT US

11.1 Please contact us if you have any questions about this privacy notice or the information we hold about you.

11.2 If you wish to contact us, please send an email to info@foufurnishings.com, write to : Fou Limited at The Downshire, 71 Baldwins Lane, Croxley Green, Rickmansworth, Herts, United Kingdom, WD3 3LT.

 

How we use cookies 

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Google Analytics

We use the service – Google Analytics, to collect standard internet log information and details of web site visitor behaviour patterns. We do this to understand information such as the number of visitors and visitor traffic to different parts of the web site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.