Privacy Policy

1. Introduction

Welcome to Sky Furniture And Lighting (“we”, “our”, “us”).

We are committed to protecting your privacy and handling your personal information fairly, lawfully, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK privacy laws.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you:

• Visit our website;
• Create an account;
• Purchase furniture, lighting, or related products;
• Contact our customer support;
• Subscribe to marketing communications; or
• Otherwise interact with our website or services.

By using our website, you acknowledge that you have read this Privacy Policy.

2. Data Controller

For the purposes of the UK GDPR and the Data Protection Act 2018, the data controller is:

3. Personal Information We Collect

Depending on how you interact with our website, we may collect the following categories of personal information:

Contact Information

• Full name
• Billing address
• Delivery address
• Email address
• Telephone number

Account Information

If you register an account, we may collect:

• Username
• Securely encrypted password
• Saved addresses
• Account preferences
• Order history

Order Information

When you place an order, we collect:

• Products purchased
• Order number
• Order value
• Payment status
• Shipping details
• Delivery status
• Returns and refund records

Payment Information

Payments are securely processed by authorised third-party payment providers. We do not store your complete debit card or credit card information on our servers. Payment providers process payment information under their own privacy policies and security standards.

Technical Information

We may automatically collect:

• IP address, Browser type, Device type, Operating system
• Language preferences, Website usage data, Pages visited
• Time and date of access, Referral website
• Cookies and similar technologies

Communication Information

When you contact us, we may retain email correspondence, contact form submissions, customer support enquiries, live chat conversations (where available), and telephone enquiries.

4. How We Collect Information

We collect personal information:

• Directly from you when you place an order
• When you create an account or subscribe to our newsletter
• When you contact customer support
• Through cookies and similar technologies
• Through WooCommerce and WordPress functionality
• From payment service providers, delivery/courier partners, and fraud prevention providers where necessary

5. Legal Basis for Processing

Under UK GDPR, we process personal information on one or more of the following lawful bases:

• Performance of a contract
• Compliance with legal obligations
• Legitimate business interests
• Your consent (where required)
• Protection against fraud and unlawful activity

6. How We Use Your Information

We may use your information to:

• Process and fulfil orders, deliver products, and process payments
• Manage customer accounts and verify transactions
• Provide customer support and respond to enquiries
• Improve our website, services, and personalise your shopping experience
• Prevent fraud and maintain website security
• Comply with legal obligations
• Send marketing communications where you have provided consent (you may unsubscribe at any time using the link in our emails or by contacting us).

7. Cookies

Our website uses cookies and similar technologies to improve your browsing experience. Cookies may be used to:

• Keep your shopping basket functioning correctly
• Remember your preferences and save login sessions
• Improve website functionality, analyse traffic, and measure performance
• Help prevent fraudulent activity

Where required by law, we will request your consent before placing non-essential cookies. You can manage or disable cookies through your browser settings, though disabling certain cookies may affect website functionality.

8. Third-Party Services

We may use trusted third-party providers to operate our business and website, including payment processors, shipping/courier companies, web hosting providers, WooCommerce, WordPress, security tools, analytics providers, fraud prevention services, and marketing tools. Each third party processes personal information in accordance with its own privacy policy.

9. Sharing Your Personal Information

We only share personal information where necessary for legitimate business purposes. Your information may be shared with payment processors, delivery companies, hosting/IT support providers, analytics providers, professional advisers, fraud prevention services, and government authorities where legally required. We never sell your personal information.

10. International Data Transfers

Some of our service providers may process personal information outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR, including approved contractual protections where required.

11. Data Retention

We retain personal information only for as long as necessary to process orders, provide support, maintain accounts, meet accounting/tax obligations, comply with legal requirements, resolve disputes, and enforce agreements. When information is no longer required, it is securely deleted or anonymised.

12. Security

We use appropriate technical and organisational measures designed to protect your personal information against unauthorised access, disclosure, alteration, loss, or destruction. Although we take reasonable precautions, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

13. Your Rights

Under the UK GDPR, you may have the following rights:

• Right to access your personal information
• Right to rectify inaccurate information
• Right to request deletion of your information
• Right to restrict or object to processing
• Right to withdraw consent where applicable
• Right to data portability
• Right to lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us using the details provided below.

14. Automated Decision-Making

We do not carry out solely automated decision-making or profiling that produces legal or similarly significant effects on individuals.

15. Children’s Privacy

Our website is intended for users aged 16 years or older. We do not knowingly collect personal information from children. If we become aware that personal information relating to a child has been collected without appropriate consent, we will take reasonable steps to delete it.

16. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites. We encourage you to review the privacy policies of any third-party websites you visit.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal obligations, or services. Any updates will be published on this page together with the revised “Last Updated” date.