Privacy Policy

Effective Date: 15 September 2025

Rugs of Dorset (“we”, “our”, “us”) is committed to protecting your privacy and ensuring your personal data is handled responsibly and transparently. This Privacy Policy explains what personal information we collect, how we use it, your rights under UK data protection law, and how to contact us.

  1. Information We Collect

When you interact with our website or services, we may collect the following types of information:

  • Personal Information you provide directly:
    • Name
    • Email address
    • Phone number
    • Billing and delivery address
    • Payment details (processed securely through third-party payment providers – we do not store card details)
  • Automatically collected information:
    • IP address
    • Browser type and version
    • Device information
    • Website usage data (via cookies and analytics tools)

  1. How We Use Your Information

We use your information for:

  • Processing and fulfilling your orders
  • Responding to your enquiries and providing customer support
  • Sending service updates and order notifications
  • Improving our website, products, and services
  • Complying with legal obligations

We do not sell or rent your personal data to third parties.

  1. Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

  • Contractual necessity – to process your orders and deliver goods
  • Legitimate interests – to improve our website and services
  • Consent – where required (e.g., for marketing emails)
  • Legal obligation – to comply with tax, fraud prevention, and other laws

  1. Sharing Your Information

We may share your data with trusted third parties, such as:

  • Payment processors (e.g., Stripe, PayPal)
  • Delivery and courier services
  • IT and website hosting providers
  • Analytics providers (e.g., Google Analytics)

All third parties are required to handle your data securely and only for the purposes agreed.

  1. Cookies and Tracking

Our website uses cookies and similar technologies to:

  • Ensure the website functions correctly
  • Remember your preferences
  • Analyse site traffic and improve user experience

You can manage or disable cookies in your browser settings. For more details, please see our Cookie Policy.

  1. Data Retention

We only keep your personal data for as long as necessary:

  • Customer records – up to 6 years (for tax/legal purposes)
  • Marketing data – until you withdraw consent
  • Website analytics – typically 14–26 months, depending on provider

  1. Your Rights

Under the UK GDPR, you have the following rights:

  • Access – request a copy of the personal data we hold about you
  • Rectification – request corrections to inaccurate or incomplete data
  • Erasure – request deletion of your data where legally permissible
  • Restriction – request limited processing of your data
  • Portability – request transfer of your data to another provider
  • Objection – object to certain processing, including direct marketing
  • Withdraw consent – where we rely on consent, you may withdraw it at any time

To exercise your rights, please contact us (see Section 9).

  1. Data Security

We use appropriate technical and organisational measures to protect your data, including:

  • SSL encryption on our website
  • Secure payment processing via trusted providers
  • Restricted access to personal data

However, no method of transmission over the Internet is 100% secure.

  1. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Rugs of Dorset
Address: 181 Bridport Road, Poundbury, Dorset, DT1 3AH
Phone: 07860 654 553
Email: info@rugsofdorset.co.uk

  1. Complaints

If you are unhappy with how we handle your data, please contact us first.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

www.ico.org.uk
0303 123 1113

This Privacy Policy is aligned with the UK GDPR and Data Protection Act 2018.