Privacy policy

This Privacy Policy describes how DRAPEHOUSE LTD (“DRAPEHOUSE”, “we”, “us” or “our”) collects, uses, stores and shares personal information when you visit, use our services, make a purchase from, or otherwise communicate with our online store (the “Store”).

This Privacy Policy should be read together with our Terms of Service and other policies available through the Store.

For the purposes of applicable data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, DRAPEHOUSE LTD is generally the controller of the personal information described in this Privacy Policy where we determine the purposes and means of processing that information.

1. CONTACT DETAILS

Trade name: DRAPEHOUSE LTD
Company number: 17439298
Physical address: 1 Mann Island, Liverpool, England, L3 1BP, United Kingdom
Email: info@drapehouse.shop

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your personal information, please contact us at:

info@drapehouse.shop

2. PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on how you interact with our Store and services.

We may collect the following categories of personal information.

Contact Information

This may include:

  • name;

  • billing address;

  • shipping or delivery address;

  • email address; and

  • telephone number, where provided.

Order and Transaction Information

This may include:

  • products ordered;

  • order number;

  • order date;

  • purchase price;

  • selected product options;

  • quantities;

  • delivery method;

  • billing and shipping information;

  • order status;

  • returns and refunds;

  • communications relating to your order; and

  • transaction information.

For made-to-measure curtains, blinds or other customised products, this may also include measurements, dimensions, fitting specifications, selected fabrics, colours, configurations and other information you provide in connection with your order.

Payment Information

Payments may be processed by Shopify and/or third-party payment providers.

Depending on the payment method used, payment providers may process information such as:

  • payment card details;

  • billing information;

  • payment account information;

  • transaction identifiers; and

  • payment authentication information.

We do not necessarily receive or directly store complete payment card information.

Account Information

If customer account functionality is available, we may process information including:

  • account name;

  • email address;

  • account credentials or authentication information;

  • saved addresses;

  • order history; and

  • account preferences.

Customer Service Information

When you contact us, we may collect information contained in your communication, including:

  • your name;

  • email address;

  • order number;

  • correspondence;

  • photographs;

  • product information;

  • return or refund information;

  • complaints; and

  • other information you choose to provide.

For example, if you report damaged curtains or blinds, you may send us photographs showing the product, packaging or installation area.

Device and Usage Information

When you access the Store, certain information may be collected automatically.

This may include:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • device identifiers;

  • pages viewed;

  • referring website;

  • interactions with the Store;

  • approximate location derived from technical information; and

  • dates and times of access.

Marketing Information

Where applicable, we may collect information about:

  • whether you have subscribed to marketing communications;

  • your marketing preferences;

  • interactions with marketing emails or messages;

  • advertising interactions; and

  • consent choices.

3. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information from several sources.

Directly from You

For example, when you:

  • browse our Store;

  • place an order;

  • create an account;

  • provide delivery information;

  • submit measurements for made-to-measure products;

  • contact customer support;

  • request a return or refund;

  • subscribe to marketing;

  • complete a form; or

  • otherwise communicate with us.

Automatically

Certain information may be collected automatically through cookies, pixels, tags, local storage and similar technologies when you use our Store.

From Service Providers

We may receive information from companies that provide services to us, including:

  • Shopify;

  • payment processors;

  • fulfilment providers;

  • warehouses;

  • suppliers;

  • delivery companies and carriers;

  • analytics providers;

  • advertising providers;

  • fraud prevention providers; and

  • customer service providers.

From Other Third Parties

Where permitted by law, we may receive information from advertising networks, social media platforms, business partners and other third parties.

4. HOW WE USE PERSONAL INFORMATION

We may use personal information for the following purposes.

Providing Products and Services

We use personal information to:

  • process orders;

  • take and verify payments;

  • confirm purchases;

  • prepare products for dispatch;

  • arrange delivery;

  • provide order updates;

  • fulfil made-to-measure orders;

  • communicate measurements or specifications necessary to manufacture or fulfil customised products;

  • process returns;

  • issue refunds;

  • manage exchanges;

  • provide customer support; and

  • otherwise perform our contractual obligations.

Fulfilment and Delivery

DRAPEHOUSE LTD may use third-party suppliers, warehouses, fulfilment providers and logistics partners.

We may provide them with information reasonably necessary to fulfil an order, including:

  • customer name;

  • delivery address;

  • telephone number where necessary for delivery;

  • email address where necessary for delivery notifications;

  • products ordered;

  • product specifications;

  • measurements required for customised products; and

  • other information necessary to prepare or deliver an order.

These parties should only receive information reasonably necessary for the relevant service.

Customer Service

We use personal information to:

  • respond to questions;

  • investigate problems;

  • handle complaints;

  • process returns;

  • investigate damaged or missing orders;

  • communicate regarding products or orders; and

  • provide customer support.

Security and Fraud Prevention

We may process information to:

  • authenticate transactions;

  • detect suspicious activity;

  • prevent fraud;

  • protect customer accounts;

  • protect our Store;

  • investigate security incidents;

  • prevent misuse of our services; and

  • protect our legal rights.

Marketing and Advertising

Where permitted by law, we may use personal information to send or display information about:

  • products;

  • new collections;

  • promotions;

  • discounts;

  • offers; and

  • other DRAPEHOUSE LTD marketing communications.

Where consent is required, we will seek consent before sending the relevant electronic marketing.

You can unsubscribe from marketing communications using the unsubscribe option included in applicable communications or by contacting us.

Improving Our Store

We may analyse how customers use the Store to:

  • understand customer behaviour;

  • improve navigation;

  • improve product presentation;

  • improve customer experience;

  • identify technical problems;

  • measure Store performance; and

  • improve our products and services.

Legal and Compliance Purposes

We may process information where necessary to:

  • comply with legal obligations;

  • maintain accounting and tax records;

  • respond to lawful requests;

  • establish or defend legal claims;

  • enforce our terms and policies; and

  • protect our legal rights.

5. LEGAL BASES FOR PROCESSING

Under the UK GDPR, we rely on one or more lawful bases depending on the circumstances.

Contract

We may process your personal information where necessary to enter into or perform a contract with you.

For example, this includes processing information necessary to:

  • process your purchase;

  • manufacture or arrange manufacture of customised products;

  • collect payment;

  • deliver your order;

  • communicate about your purchase; and

  • process eligible returns or refunds.

Legal Obligation

We may process information where necessary to comply with a legal obligation, including accounting, tax, consumer protection and other regulatory requirements.

Legitimate Interests

We may process information where necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights and interests.

This may include:

  • operating and improving the Store;

  • preventing fraud;

  • protecting our business;

  • maintaining security;

  • understanding Store performance;

  • managing customer relationships; and

  • establishing or defending legal claims.

Consent

Where required, we may rely on your consent, for example for certain marketing communications or non-essential cookies.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. SHOPIFY

Our Store is hosted using Shopify.

Shopify provides the ecommerce infrastructure that enables us to operate the Store, process orders and provide our services.

As part of operating the Store, personal information may be processed through Shopify's systems and services.

Shopify may process information about your interactions with the Store in accordance with its own applicable privacy documentation and contractual arrangements with merchants.

The use of Shopify does not remove DRAPEHOUSE LTD's obligations under applicable data protection law where DRAPEHOUSE LTD acts as controller of your personal information.

7. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information where reasonably necessary to operate our business and provide our services.

Recipients may include:

Shopify

To host and operate our ecommerce Store and related functionality.

Payment Providers

To process payments, refunds and payment authentication and to help prevent fraudulent transactions.

Suppliers, Warehouses and Fulfilment Providers

To manufacture, prepare, package, store, inspect, dispatch or process products and returns.

This is particularly relevant where curtains, blinds or other products are dispatched directly from a supplier or third-party fulfilment location.

Delivery and Logistics Providers

To deliver orders and manage shipping.

Relevant information may include your name, delivery address and contact information necessary to complete delivery.

Professional Advisers

Where necessary, information may be disclosed to accountants, legal advisers, insurers, auditors and other professional advisers.

Technology and Service Providers

We may use providers for:

  • website hosting;

  • ecommerce functionality;

  • email services;

  • analytics;

  • customer support;

  • fraud prevention;

  • security;

  • marketing; and

  • other business operations.

Government and Regulatory Authorities

We may disclose information where required by law, legal process, court order or lawful request from a competent authority.

Corporate Transactions

If DRAPEHOUSE LTD is involved in a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, personal information may be disclosed as reasonably necessary in connection with that transaction and subject to applicable law.

8. COOKIES AND SIMILAR TECHNOLOGIES

Our Store may use cookies and similar technologies.

Cookies are small files stored on your device that allow websites and services to recognise your browser or device and remember certain information.

Cookies may be used to:

  • operate essential Store functionality;

  • maintain shopping cart functionality;

  • remember preferences;

  • authenticate users;

  • prevent fraud;

  • understand Store usage;

  • measure performance;

  • support analytics; and

  • support advertising or marketing where permitted.

Some cookies are necessary for the Store to function.

Other cookies, such as certain analytics or advertising cookies, may require your consent under applicable law.

Where required, we provide controls allowing you to manage relevant cookie preferences.

You may also configure your browser to block or delete cookies. However, disabling essential cookies may prevent parts of the Store from functioning correctly.

9. MARKETING COMMUNICATIONS

Where permitted by law, we may send you marketing communications about DRAPEHOUSE LTD products, offers or promotions.

Where consent is required, we will only send such communications after obtaining the appropriate consent.

You can unsubscribe from email marketing at any time by using the unsubscribe link included in the relevant email.

You may also contact:

info@drapehouse.shop

to request that we stop sending applicable direct marketing communications.

Unsubscribing from marketing does not prevent us from sending transactional or service communications necessary for your order, such as order confirmations, shipping information or important customer service messages.

10. BEHAVIOURAL ADVERTISING AND ANALYTICS

Where permitted by law and subject to applicable consent requirements, we may use analytics and advertising technologies to understand how visitors interact with the Store and to measure or improve advertising.

These technologies may involve cookies, pixels or similar technologies provided by third parties.

Where applicable, information about your browser, device or interaction with the Store may be processed for measurement, analytics or advertising purposes.

Non-essential advertising or tracking technologies will be used in accordance with applicable UK privacy and electronic communications requirements.

11. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take steps designed to ensure that the transfer is made in accordance with applicable data protection law.

Depending on the destination and circumstances, safeguards may include:

  • UK adequacy regulations;

  • appropriate contractual safeguards;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to approved standard contractual clauses; or

  • another lawful transfer mechanism.

12. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, accounting, tax, regulatory and contractual requirements.

Retention periods may vary depending on the type of information.

For example, we may retain certain transaction and order information for longer periods where necessary to comply with accounting, tax or legal obligations.

When personal information is no longer required, we will take reasonable steps to delete, anonymise or otherwise dispose of it in accordance with applicable requirements.

13. DATA SECURITY

We use reasonable technical and organisational measures designed to protect personal information against:

  • unauthorised access;

  • unlawful processing;

  • accidental loss;

  • destruction;

  • alteration; and

  • unauthorised disclosure.

However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.

You should take reasonable steps to protect your own account credentials and devices.

If you believe your interaction with us is no longer secure, please contact us at:

info@drapehouse.shop

14. CHILDREN'S PRIVACY

Our Store and products are not directed specifically at children.

We do not knowingly seek to collect personal information directly from children where doing so would be inappropriate or unlawful.

If you believe that a child has provided us with personal information in circumstances where it should not have been collected, please contact us at info@drapehouse.shop.

We will review the request and take appropriate action where required.

15. YOUR UK DATA PROTECTION RIGHTS

Depending on the circumstances and applicable law, you may have rights concerning your personal information.

These may include:

Right of Access

You may request information about the personal data we hold about you and obtain a copy of that information.

Right to Rectification

You may request correction of inaccurate personal information and completion of incomplete information.

Right to Erasure

In certain circumstances, you may request deletion of your personal information.

This right is not absolute. We may need to retain information where required by law or where another lawful basis permits continued retention.

Right to Restriction

In certain circumstances, you may request that we restrict how your personal information is processed.

Right to Data Portability

Where applicable, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format and/or request that it be transmitted to another controller.

Right to Object

In certain circumstances, you may object to processing based on legitimate interests.

You also have the right to object to the processing of your personal information for direct marketing purposes.

Rights Relating to Automated Decision-Making

Where applicable, you may have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

Right to Withdraw Consent

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect processing lawfully carried out before withdrawal.

16. EXERCISING YOUR RIGHTS

To exercise an applicable data protection right, contact:

info@drapehouse.shop

Please describe your request and provide sufficient information for us to identify the personal information concerned.

We may need to verify your identity before completing certain requests.

We will respond within the timeframe required by applicable data protection law.

You will not normally be required to pay a fee to exercise your rights. However, applicable law may permit us to charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive.

17. COMPLAINTS

If you have concerns about how DRAPEHOUSE LTD handles your personal information, please contact us first so that we have an opportunity to investigate the matter.

Email: info@drapehouse.shop

You also have the right to lodge a complaint with the UK's data protection supervisory authority, the Information Commissioner's Office (ICO).

You are not required to contact us before exercising your right to complain to the ICO.

18. THIRD-PARTY WEBSITES AND SERVICES

Our Store may contain links to websites, applications or services operated by third parties.

We do not control the privacy practices of independent third-party websites or services.

If you follow a third-party link, you should review that party's privacy information before providing personal information.

The inclusion of a link does not necessarily mean that DRAPEHOUSE LTD endorses or controls the relevant third-party service.

19. SOCIAL MEDIA

If you interact with DRAPEHOUSE LTD through social media platforms, the relevant platform may independently collect and process information about you.

Your use of those platforms is also governed by their own privacy policies and settings.

Information you make publicly available through social media may be visible to other users.

20. MADE-TO-MEASURE PRODUCTS

Where we offer made-to-measure curtains, blinds or similar customised products, additional information may be necessary to fulfil your order.

This may include:

  • window measurements;

  • curtain or blind dimensions;

  • selected fitting type;

  • fabric selection;

  • colour selection;

  • lining options;

  • configuration information; and

  • other custom specifications.

We use this information primarily to process and fulfil your order.

Where necessary, relevant specifications may be provided to a supplier, manufacturer or fulfilment partner responsible for producing or preparing the customised product.

We only intend to provide information reasonably necessary for the relevant service.

21. FULFILMENT PARTNERS

DRAPEHOUSE LTD may operate using third-party fulfilment arrangements.

Products may therefore be stored, prepared, packaged, dispatched, returned or inspected by suppliers, warehouses, fulfilment providers or logistics partners.

Where necessary to fulfil an order or provide customer service, relevant personal information may be provided to these parties.

For example, a fulfilment partner may receive:

  • your name;

  • shipping address;

  • delivery contact details;

  • products ordered;

  • order reference;

  • product specifications; and

  • measurements necessary to prepare a custom product.

Our use of fulfilment providers does not change your relationship with DRAPEHOUSE LTD as described in the terms applicable to your purchase.

22. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

  • changes to our business;

  • changes to our Store;

  • changes to the services we use;

  • legal or regulatory developments; or

  • changes to our privacy practices.

When we update this Privacy Policy, we may change the “Last updated” date displayed at the beginning of this Policy.

Where required by law, we will provide additional notice of material changes.

23. CONTACT US

For privacy questions, requests or complaints, contact:

DRAPEHOUSE LTD
Company number: 17439298

1 Mann Island
Liverpool
England
L3 1BP
United Kingdom

Email: info@drapehouse.shop

For the purposes of applicable UK data protection law, DRAPEHOUSE LTD is the controller of personal information described in this Privacy Policy where it determines the purposes and means of processing that information.