PRIVACY POLICY – EMPRESS BATHROOMS

Empress Building Centre Limited (trading as Empress Bathrooms)

Registered Address: 135–139 Long Lane, London N3 2HY

Company Number: 2420525

VAT Number: 421699833

Email: customersupport@empressbathrooms.co.uk

Phone: 0208 346 6669

This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data We Collect

We may collect and process the following categories of personal data:

- Identity data: name, title.

- Contact data: email address, phone number, postal address.

- Transaction data: order details, invoices, payment references.

- Communications: WhatsApp and SMS conversations, customer reviews, internal order notes.

- Technical data: IP address, browser type, device data.

- Marketing data: newsletter subscriptions, advertising engagement.

- Account data: wishlists or saved items (where applicable).

We do not store full or partial card numbers. All payments are processed securely by third-party providers.

2. How We Use Your Data

We use your data to:

- Process and fulfil orders.

- Provide customer support.

- Manage accounts and enquiries.

- Send marketing communications.

- Conduct advertising and audience targeting.

- Improve website functionality.

- Prevent fraud and ensure security.

- Comply with legal obligations.

3. Lawful Basis for Processing

We process personal data under the following lawful bases:

- Contract: to fulfil customer orders.

- Legal obligation: accounting and tax compliance.

- Legitimate interests: customer service, fraud prevention, analytics.

- Consent: marketing emails, SMS, cookies.

4. Marketing & Profiling

We may use customer data for:

- Email marketing.

- SMS marketing.

- Lookalike audiences.

- Advertising via Google, Meta and TikTok.

You can unsubscribe at any time using the links in communications or by contacting us.

5. Data Sharing

We may share data with:

- Shopify (website platform).

- Payment processors (Shopify Payments, Global Pay).

- Couriers (Royal Mail, APC).

- Advertising platforms (Meta, Google, TikTok).

- CRM tools (HubSpot or Klaviyo).

We never sell your personal data.

6. International Transfers

Some service providers (including Shopify) process data outside the UK.

We rely on:

- UK adequacy decisions.

- Standard Contractual Clauses (SCCs)

to safeguard international transfers.

7. Data Retention

We retain personal data for:

- Orders: 5 years.

- Support communications: 5 years.

- Marketing data: up to 10 years.

- Accounting records: as required by law.

8. Security Measures

We implement appropriate technical and organisational measures:

- Access limited to 3 authorised staff.

- Company email accounts only.

- Secure payment processing.

- Encrypted platforms and servers.

9. Your Rights

You have the right to:

- Access your data.

- Rectify inaccuracies.

- Request erasure.

- Restrict processing.

- Object to processing.

- Data portability.

- Withdraw consent.

Requests can be made to:

customersupport@empressbathrooms.co.uk

10. Complaints

You may complain to the Information Commissioner’s Office (ICO):

https://ico.org.uk

11. Updates

We may update this policy periodically. The latest version will always appear on our website.