Contents
- Introduction
- What is personal data?
- Personal data we collect
- How we collect your personal data
- Purposes for which we use your personal data and the lawful bases
- Sharing your personal data
- International transfers
- How long we keep your personal data
- Security of your personal data
- Your rights
- How to complain
- How to contact us
1. Introduction
Sanderson Design Group Brands Limited, trading as Morris & Co. (“Morris & Co.”, “we, “our”) is committed to protecting the privacy and security of the personal data we collect about website users and users of our services (“you/your”).
The purpose of this privacy notice is to explain what personal data we collect about you when you visit and interact with our websites, correspond with us, sign up to our services or order samples and products. When we do this, we are the controller.
Please read this privacy notice carefully as it provides important information about how we handle your personal information and your rights. If you have any questions about any aspect of this privacy notice you can contact us using the information provided below or by emailing us at [email protected].
2. What is personal data?
‘Personal data’ is any information from which you can be identified, either directly or indirectly. For example, your name or an online identifier.
‘Special category personal data’ is more sensitive personal data and includes information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purposes of uniquely identifying someone, data concerning physical or mental health or data concerning someone’s sex life or sexual orientation.
3. Personal data we collect
We collect, use and are responsible for certain personal data about you. When we do so we are subject to the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018 and the General Data Protection Regulation (EU) 2016/679 (EU GDPR). The personal data we collect includes:
System Information (Website Visitors, Account Holders and Customers)
When you visit our websites, we may collect information about our use of the site including details of your browsing and buying habits, pages viewed, and any resources that you access. This information may include website traffic data, IP address, location data, browser and operating system, referral source, length of visit, clickstream data and other communication data.
This information is collected via the use of cookies and similar technologies which will only be used with your consent. For more information about the specific cookies we use on our site, please visit our Cookie Notice.
Identity Information (Account Holders and Customers)
When engaging with our websites or using our services as a customer, we will collect personal data that may include:
- Your full name, title, address, email address, telephone number and payment details.
- Details about your transactions with us.
- Your account details, such as your username, password and contact or other account preferences.
- Information included in your reviews or which you otherwise provide for display on our service.
- Contact or other information which you give us to use for newsletters of other marketing.
Correspondence Information
When corresponding with us the personal data we will collect will include the following:
- Full name, contact details such as email address or telephone number, records of your correspondence via email or telephone conversations and any details contained within these.
- We may record your phone calls with us for training, fraud detection and dispute resolution purposes.
Job Applicants - when you contact us in relation to employment opportunities within the Sanderson Design Group, we collect certain information as part of the recruitment process. You can learn more about this in our separate Job Applicant Privacy Statement.
4. How we collect your personal data
We collect most of this personal data directly from you—by email and/or via our . This includes, but is not limited to, when ordering a sample, a product , when signing up to our newsletters or when making an enquiry/complaint.
In addition to this, we also collect information from third parties who you have given your consent to, such as companies that provide media services or support us with corporate communications.
5. The purpose and lawful basis under which we process your personal data
When providing services to you, we may use your personal data for the following purposes and under the following lawful bases:
To provide our services and products:
As part of the provision of our services, we use the personal information that we collect from you to:
- To carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us.
- Where you have signed up for our newsletter, we will rely on your consent to send this to you. You can withdraw your consent at any time.
Where personal data is processed because it is necessary for the performance of a contract to which you are a party, we will be unable to provide our services without the required information.
Monitoring and administration of services and products:
We also use your personal information to help us to monitor our performance, administer and improve our service by:
- to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to improve our site to ensure that content is presented in the most effective manner for you and for your computer / device;
- to allow you to participate in interactive features of our service, when you choose to do so;
- as part of our efforts to keep our site safe and secure;
- to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you; and
- to make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them.
This processing is necessary for our legitimate interests (for running our business, the provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganization or group restructuring exercise). This processing may also be necessary for us to comply with a legal obligation.
6. Sharing your personal data
We will not share your personal information with third parties unless it is with:
- your consent;
- another company in the Sanderson Design Group (which shall include subsidiaries as defined in section 1159 of the UK Companies Act 2006;
- other people who supply us with services, e.g., other companies in our group who provide part of our service (e.g., measurement / installation services), delivery / warehouse companies, website hosting and management, payment providers, customer service providers, telephony providers that help us manage phone call recordings, email distribution, e-commerce, online advertising, analytics, review management, live chat etc.;
- any users who may encounter your reviews, if these contain your personal data;
- law enforcement or government authorities, or if we believe it is necessary for legal or public safety reasons; and
- any new owner of the Sanderson Design Group company (or the company’s assets) in the event of a sale, or proposal of a sale.
7. International Transfers
When we collect your personal data, it may be processed outside the UK. This is because the organisations we use to provide our services to you are located in other countries.
We have taken appropriate steps to ensure that where personal data processed outside the UK, it has an essentially equivalent level of protection as it has within the UK. We do this by ensuring that:
- Your personal data is only processed in a country which the Secretary of State has confirmed has an adequate level of protection (an adequacy regulation); or
- We enter into either International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs) (with the UK Addendum) with the receiving organisations and ensure that supplementary measures are also applied, where necessary.
8. How long we keep your personal data
We will retain your personal data for as long as is necessary to provide you with our services and for a reasonable period thereafter to enable us to meet our contractual and legal obligations and to deal with complaints and claims.
At the end of the retention period, your personal data will be securely deleted or anonymised.
9. Security of your personal data
We have implemented appropriate technical and organisational measures to safeguard your personal data and protect it from accidental or unlawful destruction, loss or alteration and from unauthorised disclosure or access.
10. Your rights
You have certain rights in relation to the processing of your personal data, including to:
- Request access to your personal data (commonly known as a “Subject Access Request”). This enables you to receive a copy of the personal data we hold about you.
- Request rectification of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. If you object to us using your personal data for marketing purposes we will stop sending you marketing material.
- Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data, for example if you want us to establish its accuracy or the reason for processing it.
- Request the transfer of your personal data to another party (data portability).
- Automated decision-making. You have the right not to be subject to a decision based solely on automated processing which will significantly affect you. We do not use automated decision-making.
Right to withdraw consent
In the circumstances where you have provided your consent to the processing of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we are permitted by law to do so.
How to exercise your rights
You will not usually need to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances. If you wish to exercise your rights, please contact us at [email protected].
11. How to complain
You have the right to lodge a complaint with the supervisory authority, if you believe we are infringing the UK data protection laws or you are concerned about the way in which we are handling your personal data. The supervisory authority in the UK is the Information Commissioner’s Office who can be contacted online at:
- Contact us | ICO
- Or by telephone on 0303 123 1113
12. How to contact us
If you wish to contact us in relation to this privacy notice or if you wish to exercise any of your rights outlined above, then please address your correspondence to:
Data Protection
Sanderson Design Group
Voysey House
Sandersons Lane
London
W4 4DS
Alternatively, you can email us at [email protected].
We have also appointed a Data protection Officer (“DPO”). Our DPO is Evalian Ltd and can be contacted by emailing [email protected] or via our postal address. If sending correspondence to our postal address, please mark the envelope to the ‘Data Protection’.
13. What about cookies?
13.1 We and/or other companies use cookies and other tracking technologies on our website. A cookie is an identifier (a small file of letters and numbers) that is sent to your web browser. Cookies are widely used to make websites work, or work more efficiently, as well as to provide information to the website owner or others. Some are session temporary “session” cookies that remain in the cookie file of your browser only until your browser is closed. Whereas persistent cookies stay for longer (depending on the lifetime of the specific cookie). For further information on cookies, including how to use your browser to block them and how to delete existing cookies, visit: allaboutcookies.org. Our site’s functionality will be limited if you configure your browser to reject cookies.
13.2 We or other companies place the following types of cookies on our website (or may do so in future):