CurtaIns UK

Privacy Policy

Effective Date: 19 February 2025

Company: The Nomad Curtains Limited

Address: 86–90 Paul Street, London, United Kingdom, EC2A 4NE

1. Introduction

This Privacy Policy explains how The Nomad Curtains Limited (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit our website or use our curtain design, delivery, and installation services.

We are committed to protecting your privacy and ensuring that your personal information is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect personal data that you provide to us directly or that we obtain automatically through our website.

a) Information you provide directly:

Name, phone number, and email address;
Delivery and installation address;
Window measurements and photos (if provided for quotation);
Payment information (processed securely through Stripe or Wise — we never store your full card details);
Any correspondence via email, WhatsApp, or our contact form.

b) Information collected automatically:

IP address, browser type, and device identifiers;
Cookies and usage analytics (via Google Analytics and Meta Pixel);
Referring website or ad source (for campaign tracking).

3. How We Use Your Information

We use your data for the following lawful purposes:

To provide quotes and process your orders;
To schedule measurement and installation appointments;
To process payments and issue invoices;
To communicate about your order, delivery, or aftercare;
To improve our website, marketing campaigns, and customer experience;
To comply with legal or tax obligations.

We do not sell or rent your personal information to any third parties.

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

Contractual necessity: processing data required to fulfil your order;
Legitimate interest: customer service, internal analytics, and fraud prevention;
Legal obligation: maintaining accounting and VAT records;
Consent: when you opt into our marketing communications.

5. Sharing Your Information

We only share personal data with trusted third parties essential to our operations:

Payment processors: Stripe, Wise;
Analytics providers: Google Analytics, Meta;
Delivery and installation partners: internal installation teams under confidentiality agreements;
Professional advisors: accountants, auditors, or legal representatives, when required by law.

All third parties are GDPR-compliant and only process your data under our instruction.

6. International Data Transfers

Your data may be transferred and stored outside the UK (for example, in secure cloud servers within the EEA or UAE).

When we transfer data internationally, we ensure that adequate protection mechanisms are in place — such as Standard Contractual Clauses (SCCs) approved by the UK ICO.

7. Data Retention

We retain personal information only as long as necessary for the purposes it was collected, including:

Order and invoice data: 6 years (for tax compliance);
Customer communication and project details: up to 3 years;
Marketing preferences: until you withdraw consent.

Once the retention period expires, your data is securely deleted or anonymised.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of access – request a copy of your personal data;
Right to rectification – correct inaccurate or incomplete data;
Right to erasure (“right to be forgotten”) – request deletion of your data;
Right to restrict processing – limit how your data is used;
Right to data portability – request transfer of your data to another service;
Right to object – stop receiving marketing messages at any time.

To exercise these rights, contact us at info@buycurtains.uk.

We will respond to all requests within 30 days in accordance with UK GDPR.

9. Cookies and Tracking Technologies

Our website uses cookies to improve performance and personalize your experience.

Cookies help us:

Remember your preferences and previous visits;
Measure traffic and ad performance;
Offer relevant promotions on platforms like Google and Meta.

You can manage or delete cookies through your browser settings at any time.

For more information, please refer to our Cookie Policy (optional link if you add it separately).

10. Data Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, or loss, including:

SSL encryption on all data transmissions;
Secure cloud storage with restricted access;
Regular system audits and password protection;
Compliance with PCI-DSS standards for payment processing.

11. Marketing Communications

You may choose to receive updates or promotions about our products and services.

You can unsubscribe at any time by clicking the “Unsubscribe” link in our emails or contacting us directly at info@buycurtains.uk.

We do not use automated profiling or decision-making.

12. Children’s Privacy

Our services are intended for adults.

We do not knowingly collect data from anyone under 18 years old.

If you believe a child has provided us with personal data, please contact us immediately to remove it.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be posted on our website, and the “Effective Date” will indicate the last revision.

14. Contact and Complaints

If you have questions or concerns about this policy or how your data is handled, please contact us at:

support@buycurtains.uk

The Nomad Curtains Limited

86–90 Paul Street, London, EC2A 4NE