GDPR Compliance

1. Introduction

Unique Kitchen and Bedroom Ltd ("we", "us", "our") is committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). This page explains how we meet our obligations under data protection law.

Unique Kitchen and Bedroom Ltd is a company registered in England and Wales (Company number 14079842) with our premises at Bury Ave, Hayes, UB4 8LF. For full details on what data we collect and how we use it, please read our Privacy Policy.

2. Data Controller

Under the UK GDPR, a data controller determines the purposes and means of processing personal data. Unique Kitchen and Bedroom Ltd is the data controller for personal data collected through our website and in the course of providing our services.

You can contact us about any data protection matter:

• Email: info@uniquekitchenandbedroom.co.uk
• Telephone: 07438 451309
• Post: Unique Kitchen and Bedroom Ltd, Bury Ave, Hayes, UB4 8LF, England

3. Lawful Bases for Processing

We only process your personal data when we have a lawful basis to do so. Under Article 6 of the UK GDPR, the lawful bases we rely on are:

3.1 Performance of a Contract (Article 6(1)(b))

We process your data when it is necessary to fulfil a contract with you or to take steps at your request before entering into a contract. This includes managing your kitchen or bedroom project, from initial consultation through to installation and aftercare.

3.2 Consent (Article 6(1)(a))

We obtain your explicit consent before processing data for certain purposes, including:

• Setting analytics and marketing cookies on your device
• Sending you marketing communications and newsletters

You can withdraw your consent at any time by adjusting your cookie preferences via the "Cookie Settings" link in our footer, or by contacting us directly.

3.3 Legitimate Interests (Article 6(1)(f))

We may process your data where it is in our legitimate business interests, provided these do not override your rights. This includes:

• Improving our website and services based on usage patterns
• Protecting against fraud and maintaining security
• Internal administration and record-keeping

3.4 Legal Obligation (Article 6(1)(c))

We process certain data to comply with legal obligations, such as tax and accounting requirements, consumer protection law, and health and safety regulations.

4. Your Rights Under UK GDPR

As a data subject, you have the following rights under the UK GDPR. We are committed to facilitating the exercise of these rights:

• Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you. We will respond within one month of receiving your request.
• Right to Rectification (Article 16): You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure (Article 17): You can request deletion of your personal data where there is no compelling reason for continued processing. This is also known as the "right to be forgotten".
• Right to Restrict Processing (Article 18): You can request that we limit the processing of your personal data in certain circumstances.
• Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Article 21): You can object to processing based on legitimate interests or for direct marketing purposes.
• Rights Related to Automated Decision-Making (Article 22): You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making.

5. How to Exercise Your Rights

To exercise any of your data protection rights, you can:

• Submit a request through our Data Subject Rights Request page
• Email us at info@uniquekitchenandbedroom.co.uk
• Write to us at: Unique Kitchen and Bedroom Ltd, Bury Ave, Hayes, UB4 8LF, England

We will respond to all legitimate requests within one month. Occasionally, it may take longer if your request is complex or you have made multiple requests, in which case we will notify you and keep you updated.

We may need to verify your identity before processing your request. We will not charge a fee for handling your request unless it is clearly unfounded or excessive.

6. Data Protection Measures

We implement appropriate technical and organisational measures to ensure the security of your personal data, including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Access controls limiting data access to authorised personnel only
• Regular security assessments and monitoring
• Secure hosting infrastructure with data stored within the UK/EEA where possible
• Staff training on data protection obligations

7. Data Breach Procedures

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach
• Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms
• Document the breach, its effects, and the remedial action taken

8. International Transfers

Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place as required by the UK GDPR. This includes transfers to countries with UK adequacy decisions or the use of Standard Contractual Clauses (SCCs) approved by the Secretary of State.

9. Cookies and Consent

We comply with the Privacy and Electronic Communications Regulations 2003 (PECR) alongside the UK GDPR. We obtain your consent before setting any non-essential cookies on your device. For full details, see our Cookie Policy.

10. Complaints

If you are unhappy with how we have handled your personal data, we encourage you to contact us first so we can try to resolve your concern. You also have the right to lodge a complaint with the UK supervisory authority:

• Information Commissioner's Office (ICO)
• Website: ico.org.uk
• Telephone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

11. Related Policies

This GDPR compliance page should be read alongside:

• Privacy Policy — how we collect, use, and protect your data
• Cookie Policy — how we use cookies and similar technologies
• Data Subject Rights Request — exercise your rights

12. Contact Us

For any questions about our GDPR compliance or data protection practices, please contact us:

• Email: info@uniquekitchenandbedroom.co.uk
• Telephone: 07438 451309
• Address: Unique Kitchen and Bedroom Ltd, Bury Ave, Hayes, UB4 8LF, England