Privacy Policy

1. Who we are

This website is operated by [COMPANY_LEGAL_NAME] (“DECORA”, “we”, “us”), registered at [REGISTERED_ADDRESS], registration number [REG_NUMBER]. We are the data controller for the personal data described here.

You can reach us at [CONTACT_EMAIL] or by post at [COMPANY_LEGAL_NAME], [REGISTERED_ADDRESS].

2. What data we collect

We only collect data you choose to give us, plus limited technical data needed to run the site:

• Enquiry and sample forms: your name, email, company, project details, and — for samples — a delivery address.
• Newsletter: your email address, if you subscribe.
• Technical and analytics data: anonymised usage statistics via Google Analytics, collected only after you accept analytics cookies.
• Server logs: standard request data (IP address, browser type) kept briefly for security and troubleshooting.

3. How we use your data

• To respond to your project enquiries and provide quotes or information.
• To fulfil and ship the samples you request.
• To send you the newsletter, where you have subscribed (you can unsubscribe at any time).
• To protect the site against spam and abuse.
• To understand and improve how the site is used (analytics, with consent).

4. Legal basis for processing

We rely on the following legal bases under the GDPR: your consent (newsletter, analytics cookies); the performance of a contract or steps taken at your request (responding to enquiries, sending samples); and our legitimate interests (site security and improvement), balanced against your rights.

5. Cookies and analytics

We use a small number of cookies. Non-essential and analytics cookies load only after you accept them in the consent banner. For details, see our Cookie Policy.

6. Who we share data with

We do not sell your data. We share it only with service providers who help us run the site, under contract and only as needed:

• Our website host and email provider, to deliver the site and your form submissions.
• Google Analytics, for anonymised usage statistics (only with your consent).
• Authorities, where we are legally required to disclose data.

7. International transfers

Some providers may process data outside your country. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

8. How long we keep it

We keep enquiry and sample data for as long as needed to handle your request and for a reasonable period afterwards for our records, then delete it. Newsletter data is kept until you unsubscribe.

9. Your rights

Subject to law, you have the right to access, correct, delete, restrict, or object to our processing of your data, and to data portability. Where processing is based on consent, you can withdraw it at any time. You also have the right to complain to your local data protection authority.

To exercise any of these rights, contact us at [CONTACT_EMAIL].

10. Security

We use appropriate technical and organisational measures — including encryption in transit (HTTPS) and access controls — to protect your data. No method of transmission is completely secure, but we work to protect your information.

11. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the date it was last updated shown above.

12. Contact

You can reach us at [CONTACT_EMAIL] or by post at [COMPANY_LEGAL_NAME], [REGISTERED_ADDRESS].