General Data Protection Regulations Policy 2023


Privacy Statement

By agreeing to this Privacy Policy, you consent to Bella’s Interiors Limited processing your data and you warrant that all data provided by you is accurate.


What personal data do we hold?

We only collect and store the personal information that you have provided for the completion of your order. You may have given us information about yourself by filling in an online form or by corresponding with us by phone, e-mail or otherwise.  You may also have consented to us taking photographs of in-progress or finished work at your property.  These images may be used on our website or in other publications, but we do not publicise property locations or addresses.  You have the right to refuse such use.  We will store your personal data for the length of time that UK law requires. We do not retain credit or debit card receipts, nor any information contained therein, once the payment has cleared into our bank account.


Storage and use of personal information

All paper copies of customer records are securely stored at our Cheltenham premises. Members of staff have access to these records, but individual customer details are confidential and are used only in relation to the processing of that customer’s order(s).  


Security

We take every precaution to protect your information. All personal information stored online and in hard copy format is sufficiently protected and secure at all times.


Third Parties

We do not pass on any of your information to third parties.


Marketing

We do not use your personal information for marketing purposes at any time.


Data Request

You have the right to request a copy of any of your personal information from us and to request that we delete any personal information that we hold.


Your rights regarding your personal data

As a data subject you may have the right at any time to request access to rectification or erasure of your personal data and to complain to the UK’s data protection supervisory authority, the Information Commissioner’s Office, about the processing of your personal data.

Whilst this privacy notice sets out a general summary of your legal rights in respect of personal information, this is a very complex area of law. More information about your legal rights can be found on the Information Commissioner’s website at https://ico.org.uk/for-the-public/


Changes to this notice

As a data subject you are not obliged to share your personal data with Bella’s Interiors Limited. If you choose not to share your personal data with us we will not be able to process your order.

This privacy notice may be updated from time to time. When we change this notice in a material way, we will update the version date at the bottom of this page.  Where required by law we will seek your consent to changes in the way we use your personal information.


GDPR includes 7 rights for individuals

1) The right to be informed

Bella’s Interiors Limited needs to collect and manage certain data, namely: customers’ names, addresses, telephone numbers and email addresses. We process data in the following ways:


ALL cardholder copies of card receipts are posted out to the customer immediately, unless they have asked us to shred it.

ALL merchant copies of card receipts are shredded (using a cross-shredder) after 5 working days, once the money has cleared the bank.  In the meantime, they are kept in a locked cabinet, separate from any other paperwork bearing customer names or addresses.

No customer account or card details are stored in any way whatsoever, whether digitally or in paper form.

Customer names and addresses appear on the following documents in paper form:

o Customer order sheets

o Customer invoices (attached to customer order sheets once the job is complete)

Customer names and addresses appear on the following documents on the computer, accessed via the cloud:

o Customer orders sheets using Microsoft Excel

Computers are password protected, as are all spreadsheets containing customer details.

The cloud system is also password protected.


2) The right of access

At any point an individual can make a request relating to their data and Bella’s Interiors Limited are required to provide a response within 1 month. Bella’s Interiors Limited can refuse a request if we have a lawful obligation to retain data, but we will inform the individual of the reasons for the rejection. The individual will have the right to complain to the ICO if they are not happy with the decision.


3) The right to erasure

You have the right to request the deletion of your data where there is no compelling reason for its continued use. Bella’s Interiors Limited automatically destroys card receipts once the payment has cleared at the bank, but contact details are retained on invoice copies and order sheets etc., unless the customer requests erasure. Contact and order details enable us to quickly and efficiently action any follow-up orders from customers.


4) The right to restrict processing

Customers can object to Bella’s Interiors Limited processing their data. This means that records can be stored but must not be used in any way.  Bella’s Interiors Limited do not pass on customer contact details to any third parties and do not use the details for marketing purposes at any time.


5) The right to data portability

Bella’s Interiors Limited do not pass any customer details to other parties or persons. All hard copies are securely stored at our Cheltenham premises. All electronic data is stored on our secure local server and our secure cloud space.


6) The right to object

Customers can object to their data being used for certain activities, such as marketing or research. Bella’s Interiors Limited does not use customer data for such purposes.


7) The right not to be subject to automated decision-making including profiling

Automated decisions and profiling are used by marketing-based organisations. Bella’s Interiors Limited does not use personal data for such purposes.



Version 1.03 April 2023