FM Decorating Privacy Policy
We take your privacy seriously and will only use your personal information to administer your account and to provide the products and services you have requested from us. We will never sell, share or use your personal information other than as described here.
About This Privacy Policy
This policy sets out how we will use and share the information that you give us. This policy describes your relationship with FM Decorating.
Who this privacy policy applies to
FM Decorating (FMD) is a website and stationary design and print company. Hosting of websites, domain names and email accounts is controlled by Forest Design Ltd on behalf of FMD. This policy relates to users of FMD. Processing of your data is required in order to offer you these services. This policy applies to individuals who have enquired or registered with FMD or in any other capacity.
What this policy applies to
This section describes the lawful basis for processing your data and applies to the information about yourself that you choose to provide us with or that you allow us to collect. This includes, as a customer, information you provide relating to purchases and other transactions and information given and stored as part of our ongoing relationship.
Scope of Consent
By submitting your personal data to us, you are affirming your explicit consent for such information to be used in accordance with this privacy policy. You will be able to withdraw that consent at any time by the methods described.
Opting out at a later date
Once you have given your consent, you can amend or withdraw your consent at anytime. You can also choose to object to processing at anytime. We respect all user rights as defined in GDPR. If you have any comments or wish to complain please visit FMD or contact us anytime.
How we store and process your data
Your account data will be collected stored and processed in the UK only. We use recognised third parties to take payment, manage our company accounts and provide banking services. We will store transactions, payment and order data for up to 7 years or for as long as required by UK financial and company regulations. These third parties may operate outside the EU.
Our obligations
We are a data controller. In relation to the information that you provide to us, we are legally responsible for how that information is handled. We will comply with the Data Protection Act 1998 and the GDPR (2018) in the way we use and share your personal data. Among other things, this means that we will only use your personal data:
> Fairly and lawfully
> As set out in the legislation and this policy
> To the extent necessary for these purposes
We will process your personal data ourselves as the data processor. We will take reasonable precautions to safeguard the personal information that you supply.
FMD may from time to time use your information for marketing, account management or relationship management purposes. The main purpose of this is to provide you with information about goods and services which we think may be of interest to you and/or to maintain any existing relationship we may have with you.
Third Parties
Your data is not shared with any third parties other than as described here.
Security
We will report any breaches or potential breaches to the appropriate authorities within 24 hours and to anyone affected by a breach within 72 hours. If you have any queries or concerns about your data usage please contact us.
Legitimate Interests
Under the Data Protection Act, we are also permitted to share some information with third parties who use such data for non-marketing purposes (including credit and risk assessment and management, identification and fraud prevention, debt collection and returning assets to you).
Contacting us, exercising your information rights and Complaints
If you have any questions or comments about this Privacy Policy, wish to exercise your information rights in connection with the personal data you have shared with us or wish to complain, please contact: The Data Protection Officer at FMD. We will process Subject Access Requests (SAR) within 20 days. SAR responses are usually free but we reserve the right to charge for excessive or unfounded requests. We fully comply with Data Protection legislation and will assist in any investigation or request made by the appropriate authorities.