Last updated 15 February 2024

This privacy notice for RM Carpets Limited ('we', 'us', or 'our'), outlines how and why we might collect, store, use, and/or share ('process') your information when you use our services ('Services'), for example when you:

• Visit our website at www.rmcarpets.org.
• Engage with us in other related ways, including any sales, marketing, or events.

What information do we collect?

When you visit our website, we may collect and process the following types of personal information:

• Names
• Phone numbers
• Email addresses
• Mailing addresses
• Billing addresses
• Debit/Credit card numbers

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such information.

How do we process your information?

We may use the collected information for the following purposes:

• To deliver and facilitate delivery of our services
• To respond to enquiries via the website or other means
• To send you information about our services
• To manage and complete orders and payments for our services
• To save or protect an individual’s vital interest

What legal bases do we rely on to process your information?

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent
• Performance of a Contract
• Legal Obligations
• Vital Interests

When and with whom do we share your information?

We may need to share your personal information in the following situations:

• Business Transfers
• Business Partners

Do we use cookies and other tracking technologies?

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookies page: www.rmcarpets.org/cookies/.

How long do we keep your information?

We will only keep your information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information.

How do we keep your information safe?

We implement reasonable security measures to protect the confidentiality and integrity of your information.

However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

What are your privacy rights?

• Individuals have the right to be informed about the collection and use of their personal data. This includes information about the purposes of processing, the retention period, and the recipients of the data.
• Individuals can request access to their personal data and information about how it is being processed. This is commonly known as a subject access request.
• Individuals can request the correction of inaccurate or incomplete personal data.
• Individuals have the right to request the deletion of their personal data under certain conditions.
• Individuals can request the restriction of the processing of their personal data under certain circumstances.
• Individuals have the right to receive their personal data in a structured, commonly used, and machine-readable format.
• Individuals can object to the processing of their personal data, including for direct marketing purposes.
• Individuals have rights when automated decisions are made about them, including the right to human intervention.
• Data controllers are required to implement appropriate technical and organisational measures to ensure the security of personal data.
• The UK GDPR regulates the transfer of personal data outside of the UK.

If you believe we are unlawfully processing your personal information, you also have the right to complain to the UK data protection authority.

You can withdraw your consent at any time by contacting us by using the contact details provided in the section 'How can you contact us about this notice?' below.

Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.

For further information, please see our Cookies page: www.rmcarpets.org/cookies/.

If you have questions or comments about your privacy rights, you may email us at info@rmcarpets.org.

Do we make updates to this notice?

We may update this privacy notice from time to time. The updated version will be indicated by an 'Latest' date at the beginning of this privacy notice and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at info@rmcarpets.org or contact us by post at:
RM Carpets Limited
2-4 Heathland Street
Aldershot
Hampshire
GU11 1NS

How can you review, update, or delete the data we collect from you?

You have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please email us at info@rmcarpets.org.