Who we are
Bathurst & Co is a trading name of Reeve & Co (Bathrooms and Tiles) Ltd, registered in England and Wales under company number 07738560, at Stonham Road, Mickfield, Stowmarket, Suffolk IP14 5LS. We are the controller of the personal data described in this notice, which means we decide how and why it is used. Our registration number with the Information Commissioner’s Office is [CHECK: ICO registration number].
Questions about this notice or about your data can be sent to hello@bathurstandco.co.uk, or by post to the address above.
What we collect
Enquiries and design work
When you contact us we keep your name, email address, phone number and what you tell us about your project. If you use our bathroom design service, that can include the property address, drawings, measurements and photographs of the room, and the notes we make during a survey.
Orders
For an order we need your name, billing and delivery addresses, email address, phone number, the goods ordered and the payment record. We also keep delivery instructions, including access details and the name and number of anyone you ask us to deliver to, such as your builder. Card details are handled by our payment processors, and we do not keep full card numbers on our own systems. [CHECK: confirm how card data is handled online and at the showroom]
Website and trade accounts
If you open an account on our website, we keep your login details and order history. For a trade account we also keep your company name, registered address, company and VAT numbers, and the names and contact details of the people who order on the account.
Showroom visits
When you book a visit to the showroom, we keep your name, contact details, the time of your appointment and notes of what you were interested in, so we can follow up. [CHECK: whether CCTV operates at the showroom and, if so, its purpose and retention]
Using the website
Our website records technical information such as your IP address, browser type and the pages you visit. Cookies that are not essential to the website, including analytics cookies, are only set with your consent. Our cookie policy explains which cookies we use.
Why we use it, and our lawful bases
UK GDPR requires a lawful basis for each use of personal data. We rely on the following.
- Contract: to take and fulfil orders, arrange delivery, provide the design service, and handle returns and faulty goods, and to take the steps you ask for before an order, such as preparing a quotation.
- Legal obligation: to keep accounting and tax records, and to meet our obligations under consumer law.
- Legitimate interests: to answer enquiries, run and improve our business, keep our systems secure, prevent fraud, manage trade accounts, and keep in touch with trade customers about the range. We only rely on this where our interests are not outweighed by yours.
- Consent: for marketing emails to private customers and for optional cookies. Where the law allows, we may email existing customers about similar goods without separate consent. You can withdraw consent or unsubscribe at any time, using the link in each email or by contacting us.
Who we share it with
We do not sell personal data. We share it only where needed to run the business and supply your order. That includes payment processors that take card payments, and couriers and pallet carriers that deliver goods, who receive your name, address, phone number and delivery instructions. It also includes the providers of our website, hosting, email, accounting and other IT services, who process data on our behalf under contract.
Where your order includes made-to-measure furniture, the relevant details are shared with our joinery workshop, which is part of the same group of companies. We share information with your builder, architect or designer where you ask us to. We may also share data with our professional advisers and insurers, and with the police, HMRC or other authorities where the law requires it.
Some of our service providers may process data outside the UK. Where they do, we make sure the transfer is covered by UK adequacy regulations or by appropriate safeguards, such as the International Data Transfer Agreement.
How long we keep it
We keep personal data only as long as we need it for the purpose it was collected for. Order and accounting records are kept for as long as tax and company law require. Enquiries that do not lead to an order, design files, trade account records and marketing lists are kept for set periods and then deleted. [CHECK: retention periods]
Keeping it secure
Access to personal data is limited to the people who need it for their work. Our providers are bound by contract to keep data secure and to use it only on our instructions.
Your rights
Under UK GDPR you have the right to ask for a copy of the personal data we hold about you, and to have inaccurate data corrected. In some circumstances you can also ask us to erase your data, restrict how we use it, or send it to you or another organisation in a portable format. You can object to our use of your data where we rely on legitimate interests, and you can object to direct marketing at any time. Where we rely on consent, you can withdraw it at any time.
To use any of these rights, email hello@bathurstandco.co.uk. We may ask you to confirm your identity. We will respond within one month, which can be extended in some cases, and we will tell you if it is.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk or on 0303 123 1113.
Changes to this notice
We will update this notice when our use of personal data changes, and the current version will always be on this page. Last updated: [CHECK: date privacy notice approved]. You can also reach us through the contact page.