Cushions

INFORMATION ABOUT THIS TEMPLATE

The sections in yellow are optional and will depend on what the client does with the data or the level of information they provide.

The sections in grey should be retained but the details will need to be changed to reflect the types of data the client collects and uses.

DISCLAIMER

“The template privacy policy and information concerning technical legal or professional subject matter is for guidance only and to assist you in preparing your own policy. It does not constitute legal or professional advice and is not tailored to your specific or individual requirements. Vaimo assumes no responsibility for the information contained in this document and disclaims all liability in respect of such information.”

PRIVACY POLICY

This policy sets out how we use your information and provides you with information about the personal data we collect, how we keep it secure, how we ensure your privacy is maintained and your rights relating to the personal information we hold about you.

This policy applies to you if you purchase or use any of our products or services, if you visit our stores or shop online or use your mobile device and provides you with information about:

WHO WE ARE
THE TYPES OF PERSONAL DATA WE COLLECT
HOW WE USE PERSONAL DATA
WHO WE SHARE PERSONAL DATA WITH
TRANSFERS OF PERSONAL DATA
OUR USE OF COOKIES
HOW WE PROTECT PERSONAL DATA
HOW LONG WE KEEP PERSONAL DATA
YOUR RIGHTS
THE LEGAL BASIS FOR USING PERSONAL DATA
HOW TO CONTACT US
LINKS TO OTHER WEBSITES
POLICY UPDATES
WHO WE ARE

FULL COMPANY NAME is a company incorporated in COUNTRY OR STATE [and is part of the NAME OF GROUP which includes OTHER GROUP MEMBERS] (referred to as “we” or “us” in this policy).

We understand that privacy and the security of your personal information is extremely important and we are committed to maintaining the trust and confidence of the visitors to our websites and our customers by keeping your personal data secure and respecting your privacy rights.

We will always handle your data fairly and legally and are committed to being transparent about the data we collect and how we use it.

We don't rent or trade information about you with other organisations and businesses.

THE TYPES OF PERSONAL DATA WE COLLECT

We may collect the following information about you:

your name
your age or date of birth
your gender
your contact details (postal, billing and delivery addresses, telephone numbers and e-mail address)
details of your purchases and orders
information about any services we provide to you
your on-line browsing activities on our websites
your account login details, including user name(s) and password(s)
when you purchase or order products and services, your bank account or payment card details
your communication and marketing preferences
your interests, preferences, feedback and survey responses
your location
your IP address
your device ID and other details such as make and model and the apps you use
your correspondence and communications with us
publicly available personal data, including any you have shared via public platforms and social media.

Our websites are not intended for children and we do not knowingly collect data relating to children.

The types of data listed above is not exhaustive and, in some instances, we may need to collect additional data for the purposes set out in this policy or to provide you with certain products and services.

If shop with us using a credit or debit card, or if we take these details for payment authorisation, we will securely collect and store this information. We will ask if you want us to automatically store these details to speed up future payments. If you set up a direct debit payment, we will also collect bank details from you.

If you apply for credit, stage payments or other payment terms or forms of finance, we will take into account other information about you such as your employment details, financial position, identification documents details (such as your passport, national identify card or driving licence), insurance, criminal record and medical history as well as details about additional insured parties and cardholders or joint policyholders.

We may collect some of the above personal data directly from you, for example when you set up an account on our websites, or send an email to our customer services team. Other personal data is collected indirectly, for example your browsing or shopping activity. We may also collect personal data from third parties who have your consent to pass your details to us, or from publicly available sources.

HOW WE USE PERSONAL DATA

The information we collect may be used to:

provide products and services to you
process your orders
take payment from you or provide you with a refund
manage any account(s) that you hold with us
mange any reward or loyalty programs you participate in
verify your identity and ensure that our customers are genuine
detect and/or prevent crime or fraud, and related purposes
carry our statistical analysis
conduct market research
help us understand more about you as a customer
personalise your shopping experience
tailored our websites to you
improve our services, stores, apps and websites
contact you about products and services
provide online advertising
help answer your questions and solve any issues you have
manage customer service interactions with you

We will only use your personal data for marketing purposes with your consent. We may do this by post, email, text message, online or through social media, push notifications via apps, or other electronic means and will aim to update you only about those products and services you are interested in or which relevant to you.

You may amend your marketing preferences and have the right to opt out of receiving promotional communications at any time, by:

changing the marketing preferences on your account(s)
clicking the “unsubscribe” link in our emails or using the “STOP” number for texts
contacting us (see HOW TO CONTACT US)

We won't send you marketing messages if you tell us not to, but we will still need to send you occasional service-related messages.

As part of the registration process for our newsletter, we collect personal information. We use that information to: tell you about our offers, products and services; contact you if we need to obtain or provide additional information; check our records are correct and up-to-date; and make sure that you’re happy and satisfied with our services. To do so we use a third-party provider, [ADD NAME], to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our newsletter. For more information about this, please see [ADD NAME]’s privacy notice. You can unsubscribe from our newsletter at any time by clicking the unsubscribe link at the bottom of our emails or by contacting us (see HOW TO CONTACT US).

If you are a member of any of our reward or loyalty schemes we may collect data directly from you, as well as analysing your browsing and purchasing activity, both on-line and in store, and your responses to marketing communications. The results of this analysis, together with other demographic data, allows us to personalise the information and offers we send to you, make that are relevant to you and understand more about you as a customer. We use software and other technology (automated processing) to do this.

If you visit our websites, you may receive personalised advertisements whilst browsing other websites. Any such advertisements will relate to the products you have viewed whilst browsing our websites on your computer or other devices. These advertisements are provided by us through specialist providers using ‘cookies’ placed on your computer or other devices (further information on the use of cookies can be found here OUR USE OF COOKIES including information on how to change your browser setting and disable cookies.

When you visit our websites, we use service providers, like Google Analytics and Sumo Logic, to collect internet log information and details of visitor behaviour patterns. We do this to understand how visitors use our websites. This information is only processed in a way which does not identify anyone.

WHO WE SHARE PERSONAL DATA WITH

We may share your personal information with [NAME OF GROUP] from time to time so we can provide you with services across our group. That includes [ADD DETAILS].

We work with partners, suppliers, service providers and agencies and may need to share your personal information with them to provide certain services. However, we will only do so where they meet our standards for processing data and have confirmed that they have appropriate data protection and security controls in place. We will only share information with them that is necessary for them to provide services to us or directly to you and our contracts with them prevent them from using your personal information for any other purposes. These include:

Supplier Partners - trusted partners who supply products and services on our behalf
Delivery Partners - for you to receive the products you have ordered
Payment Providers - who take and manage payments
Credit Reference Agencies - to make sure you can manage the level of credit offered and prevent fraud
Marketing Companies - who help manage our electronic communications with you
IT Companies - who support our websites and information systems

We may also share your personal information with:

carefully selected retail partners, where you have consented to this
governmental bodies, regulators, law enforcement agencies, courts and insurers where we are required to do so to:

comply with our legal obligations
exercise our legal rights
prevent, detect and investigate crime and fraud
protect our employees and customers

our financial and legal advisors
purchasers or prospective purchasers of our business so they can evaluate that business and/or continue to provide services to you

We will not otherwise disclose your personal information to anyone else.

We will not sell or rent our customer data to other organisations for marketing purposes.

TRANSFERS OF PERSONAL DATA

If you place an order with us and you are outside of [COUNTRY] we will transfer your personal information to [COUNTRY].

Although your personal data will be held in [COUNTRY] data centres it is sometimes necessary for us to share your personal information outside of the European Economic Area (or the EEA), so that we can deliver products and provide services to you or to transfer your personal information to our group companies, suppliers or service providers based outside of the EEA for the purposes described in this policy. This will usually be the case when either you, your delivery address or our service providers are located outside the EEA.

If this happens, your personal information will continue to be subject to one or more appropriate safeguards set out in the law. We will ensure that the transfer will be compliant with data protection law and all personal information will be secure. Our standard practice is to use ‘standard data protection clauses’ for such transfers or ensuring that our suppliers sign up to an independent privacy scheme (like the US 'Privacy Shield' scheme). These methods have been approved by regulators to ensure adequate safeguards are in place.

OUR USE OF COOKIES

Our websites use cookies to collect information.

This includes information about browsing and purchasing behaviour by people who access our websites. This includes information about pages viewed, products purchased and the customer journey around our websites.

Detailed information is set out in our Cookie Policy.

HOW WE PROTECT PERSONAL DATA

We are committed to keeping your personal information safe and secure and use appropriate security measures to protect your information including:

encryption of data
security controls to protect our information systems from external attack
access controls to our information systems
logical separation of our systems and information
penetration testing of systems
internal information security policies
personal data and information security training for our employees
security assessments of all our service providers who may handle your personal information
never asking you for your passwords;
advising you never to enter your account number or password into an email or after following a link from an email.

We will never ask you for your passwords or to confirm your credit card or payment details via email.

We recommend that you:

keep your account passwords private
change your password often
do not use the same password for multiple accounts or websites
do not enter your account number or password into an email or after following a link from an email
security controls to protect our information systems from external attack
access controls to our information systems
logical separation of our systems and information

HOW LONG WE KEEP PERSONAL DATA

Unless we are required to by law, we will not retain your data for longer than necessary for the purposes set out in this policy.

Different retention periods apply for different types of data, however the longest we will normally hold any personal data for is 6 years.

YOUR RIGHTS

You have the right to:

access your personal information

You can ask us to confirm what personal information we hold about you and how we use it, where we are obliged to provide copies of this personal information we will do so free of charge.

rectify your personal information

You can ask us to update and correct any out-of-date or incorrect personal data that we hold about you.

erase your personal information

You can ask us to delete information that we hold about you if you have withdrawn your consent, if that information is no longer needed for the purposes for which it was collected, if we are processing it unlawfully or in certain other circumstances.

stop or limit our processing of your personal information

You can object to us processing your personal information if we are not entitled to use it any more or if the processing is based on our legitimate interest (including profiling) where this does not override your rights, to have your information deleted if we are keeping it too long or have its processing restricted where you have contested the accuracy of the data, opposed the erasure of the data, you want us to retain the data so you can establish, exercise or defend legal claims, or you have objected to the processing, whilst a decision on overriding legitimate interests is pending.

withdraw consent

Where you have consented to us processing your personal information you may withdraw this consent at any time, including the right to opt-out of marking communications.

data portability

Where you have provided us with information in a structured, commonly used and machine-readable format which we process by automated means, you can receive this in a standard form or ask us to move or transfer that data to another service provider.

not be subject to automatic decision making

You may not to be subject to a decision based solely on automated processing, including profiling, unless this is necessary for entering into, or performance of, a contract with us, it is authorised by the regulators or it is based on your explicit consent.

If you have any questions about your rights or wish to exercise any of them, please contact us (see HOW TO CONTACT US).

Before providing personal information to you or another person on your behalf, we may ask for proof of identity and sufficient information about your interactions with us that we can locate your personal information.

You also have the right to lodge a complaint with a data protection regulator where your personal information has or is being used in a way that you believe does not comply with data protection law. Usually this would be in the country where you live or where your legal rights have been infringed. Our lead authority is [ADD NAME AND CONTACT DETAILS].

THE LEGAL BASIS FOR USING PERSONAL DATA

We are required to set out the legal basis for our ‘processing’ of personal data.

We collect and use your personal data because is it necessary:

for our legitimate interests (as set out below)
to fulfil our contractual obligations to supply products and services
to exercise our contractual rights and remedies
to comply with our legal obligations

In general, we only rely on consent as a legal basis for using your personal data in relation to sending direct marketing communications to you via email or text message. You have the right to withdraw consent at any time and, where consent is the only legal basis for processing your personal information, we will cease to process data after consent is withdrawn.

Normally, the legal basis for using your personal information is that it is necessary for our legitimate interests. This includes:

selling and supplying products and services to our customers
processing orders and dealing with enquiries from our customers
managing returns and refunds
protecting our customers, employees and other individuals
promoting, marketing and advertising our products and services
sending promotional communications which are relevant and tailored to individual customers
administering reward or loyalty schemes
understanding our customers’ behaviour, activities, preferences, and needs;
improving existing products and services
developing new products and services
complying with our legal and regulatory obligations;
preventing, investigating and detecting crime, fraud or anti-social behaviour
handling customer contacts, queries, complaints or disputes
managing insurance claims by customers
taking appropriate legal action against third parties
handling legal claims or regulatory enforcement actions taken against us
fulfilling our duties to our customers, colleagues, shareholders and other stakeholders

HOW TO CONTACT US

If you would like to exercise your rights (see YOUR RIGHTS for further information) or you have a question or a complaint about this policy, the way your personal information is processed, please contact us by one of the following means:

By email: [ADD EMAIL]
By post: Data Protection Officer [ADD ADDRESS]

LINKS TO OTHER WEBSITES

We may partner with trusted service providers to make additional products and services available to you and may sometimes provide you with links to other websites that are not under our control.

In these instances, we will not be liable to you for any issues with their use of your personal information, the website content or the products and services offered or provided to you by these websites.

These websites are not owned and operated by us and they are responsible for processing personal data in accordance with their own privacy policies. We recommend that you consult the privacy policy and terms and conditions on each website to see how your personal information will be used.

POLICY UPDATES

This Policy was last updates in [ADD MONTH AND YEAR].

COOKIE POLICY

WHAT ARE COOKIES?

Our websites, like most others, uses cookies to collect information.

Cookies are data files containing small amounts of information which are placed on your computer or other devices through your web browser when you visit our websites. This is then sent back to our websites by your browser and is used to “remember” your computer or device.

Cookies are used on all versions of our websites and in our website applications.

Cookies are designed to enable your computer or device to remember something you have done within that website (such as remembering that you have logged in, or which buttons you have clicked) and are essential for the effective operation of our websites and to help you shop online. They are also used to tailor the products and services offered and advertised to you, both on our websites and elsewhere.

To make full use of our websites and shop online, cookies need to be enabled on your web browser. If you do not accept, or disable, cookies then certain features on our websites will not work. You will still be able to browse our websites but will not be able to shop online.

The cookies stored on your computer or other device when you visit our websites are either designed by us, or on our behalf, and are necessary to enable you to a make purchases on our websites or by third parties who participate with us in marketing programmes or who provide web banner advertisements or other services to you on our behalf.

Please see our COOKIE POLICY for more information.

WHAT INFORMATION IS COLLECTED?

Some cookies collect information about browsing and purchasing behaviour when you visit our websites. This includes information about pages viewed, products purchased and your journey around a website.

To help you understand cookies better we have outlined some of the main types below:

Authentication Cookies

These cookies are used to identify If you are logged in as a user, or not. They are important for our websites to know what information to show you or remind you to log in.

Session Cookies

These cookies only last for as long as your browsing session on the website and are normally deleted automatically when you close your web browser.

Persistent Cookies

These cookies remain after you have finished browsing, so if you visit a website and then return to it sometime later, the website will “remember” you.

First-Party Cookies

These cookies are set by the domain (or sub-domain) for our websites in your web browser.

Third-Party Cookies

These cookies are set by a different domain to the website you are visiting and are used for a variety of reasons.

We do not use cookies to collect or record information about your name, address or other contact details or credit cards.

We do not control what information is collected and stored by Third-Party Cookies, or how they are set and we do not accept any liability in connection with these cookies, you should check the relevant website for more information about what they do with cookies and how you can manage them. These may include social networking sites, like Facebook and Twitter. If you share content in this way, the social network may send cookies to your browser.

For details of the Third-Party Cookies we use please see our COOKIE LIST.

HOW LONG IS THIS INFORMATION KEPT?

Generally, we only keep cookies for the duration of your visit to websites.

Please see our COOKIE LIST for more information.

HOW ARE COOKIES MANAGED?

You have different options to manage the cookies on your computer or device.

You can change your browser settings to prevent cookies from being accepted, or, depending on which browser you are using, you might be able to receive an alert when a website is trying to place one on your browser.

With most browsers, you can allow First-Party Cookies to be set but refuse to accept Third-Party Cookies.

WHAT ARE COOKEIS USED FOR?

The main purposes we use cookies for are:

to recognise customers and understand and facilitate their browsing and shopping behaviour
to complete orders and fulfil online transactions
for technical purposes relating to the operation of our websites and navigation
to improve our websites and you online shopping experience
to provide you with personalised content, web banner advertisements and targeted updates
to monitor the success of our online campaigns, sales, promotions and competitions
to meet our contractual obligations to third parties and manage the relationship with our partners

HOW DO I DISABLE OR DELETE COOKIES?

If you want to disable cookies you need to change your website browser settings.

This will depend on the browser you use and your browser’s 'help' menu should tell you how to disable cookies or change your cookie settings.

We have included instructions on how to do this for the most popular browsers below:

Microsoft Internet Explorer:

Choose the menu “tools” then “Internet Options”
Click on the “privacy” tab
Select the setting the appropriate setting

Google Chrome:

Choose Settings> Advanced
Under "Privacy and security," click “Content settings”
Click “Cookies”

Safari:

Choose Preferences > Privacy
Click on “Remove all Website Data”

Mozilla Firefox:

Choose the menu “tools” then “Options”
Click on the icon “privacy”
Find the menu “cookie” and select the relevant options

You can also delete cookies stored in your browser by using the functions in your browser. This will not disable cookies or prevent your browser from collecting them in the future. Deleting cookies on one browser or one device does not automatically clear them on another.

WHAT HAPPENS IF I DISABLE COOKIES?

This depends on which cookies you disable, but in general the website may not operate properly if cookies are not accepted. However, you will still be able to browse around our websites, although some functions will not be available, for example you will not be to purchase products, set up a new account or access an existing one.

If you only disable Third-Party Cookies, you will not be prevented from making purchases on our websites.

If you disable ALL cookies, you will be unable to complete a purchase on our websites.

LAST UPDATED: DATE

COOKIE LIST

This list is intended to help you understand how we use cookies on our websites.

We will update this list as we make changes to the shopping experience on our websites and as we gather more information on such cookies or as any cookies change. Whilst we intend to update this page regularly, there may occasionally be some cookies missing from the list.

NAME	TYPE	DESCRIPTION

Third-Party Cookies

The following Cookies are all used for analytical and targeting purposes:

NAME

Google Tag Manager

Google Analytics

Yahoo Analytics

Bing Ads

DoubleClick

Facebook Connect

Facebook Custom Audiences

Sumo Logic

LAST UPDATED: DATE

Commercial Privacy Policy

The Lounge Co. ("We") are committed to protecting and respecting your privacy.

This policy (together with our Cookie Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. We are committed to safeguarding the privacy of our website visitors and service users. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.

The Lounge Co. of Hampton Business Park, Melksham, Wiltshire, SN12 6GU, United Kingdom is the Data Controller for the purpose of the General Data Protection Regulation (GDPR) and any national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK and any successor legislation to the GDPR or the Data Protection Act 1998.

You can contact us by emailing dataprotectionofficer@sofabrands.com

1. What is Personal Data?

"Personal Data" means any information relating to an identified or identifiable natural person, known as a "data subject", who can be identified directly or indirectly. It may include names, addresses, email addresses, telephone numbers, IP addresses, location data and other similar information. It may also include "special categories of personal data" such as racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union memberships, genetic data, biometric data for the purpose of uniquely identifying a data subject, data concerning health or data concerning a natural person's sex life or sexual orientation.

2. The information we collect from you and how we collect it

We will collect and process the following Personal Data about you:

2.1. Information you give us

This is information about you that you give us, either about yourself or other data subjects e.g individuals whose details are included in any materials provided by you to us, by filling in forms on our site www.theloungeco.com (our site) or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you complete an order, complete an enquiry form, order a swatch or click the chat function, correspond with us and if you report a problem with our site. The information you give us may include your name, address, e-mail address, phone number, gender, date of birth and financial and credit card information.

2.2 Information we collect about you

With regard to each of your visits to our site we will automatically collect the following information:

Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;

Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our customer service number.

3 Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use, the purposes for which we use them, and how you can disable them, please see our Cookie policy.

4 Uses made of the information

In this section we have set out:

The general categories of Personal Data that we may process;
The purposes for which we may process that Personal Data; and
The legal basis for the processing of that Personal Data.

Service Data – we may process your Personal Data that is provided in the course of the use of our services. The Service Data may include your name, address, email address, and telephone number. The Service Data may be processed for the purposes of operating our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases, notifying you about changes to our service, and communicating with you. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. Where we are processing Personal Data for the purpose of marketing our current or future products or services to you, the basis for this is consent.

Enquiry Data - we may process information contained in any enquiry you submit to us regarding services. The Enquiry Data may be processed for the purposes of offering, marketing and selling relevant products and/or services to you. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. Where we are processing Personal Data for the purpose of marketing our current or future products or services to you, the basis for this is consent.

Transaction Data - we may process information relating to transactions, including purchases of goods and services that you enter into with us and/or through our website and for making payment of any services that you provide to us. The Transaction Data may include your contact details and your card details or invoicing details. The Transaction Data may be processed for the purpose of supplying the purchased goods and services or making payment to you for the services you have provided and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely our interest in the proper administration of our website and business.

Correspondence Data - we may process information contained in or relating to any communication that you send to us. The Correspondence Data may include the communication content and metadata associated with the communication. Our website will generate the metadata associated with communications made using the website contact forms. The Correspondence Data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and communications with users.

Usage Data - we may process data about your use of our website and services. The Usage Data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the Usage Data is our analytics tracking system. This Usage Data may be processed for the purposes of analysing the use of the website and services. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services, troubleshooting and as part of our efforts to keep our site safe and secure. Please see our Cookie Policy for further information on this.

In addition to the specific purposes for which we may process your Personal Data set out above, we may also process any of your Personal Data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

5 Disclosure of your information

We may share your Personal Data with:

5.1 any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006, insofar as is reasonably necessary for the purposes set out in this policy.

5.2 our insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining and maintaining insurance cover, managing risks, obtaining advice and managing legal disputes.

5.3 our business partners, third party suppliers and sub-contractors for the performance of any contract we enter into with them or you;

5.4 analytics and search engine providers that assist us in the improvement and optimisation of our site;

5.5 third party review websites in order to obtain customer feedback on our products and services;

5.6 any prospective buyer of our business or assets, or any prospective seller of another business or business assets that we are interested in buying. We may transfer your Personal Data to a third party to process on our behalf in countries outside of the European Economic Area (EEA) in accordance with the purposes set out above. Such countries do not have the same data protection laws as the UK or EEA. If this is the case, we will ensure that your privacy rights are adequately protected by appropriate technical, organisational and contractual means and any such transfer is made in compliance with the GDPR (or any national implementing law) requirements for external transfer. Please contact us by emailing dataprotectionpolicy@sofabrands.com if you would like further details of the safeguards we have in place.

5.7 Where you would like to obtain finance for our products and we provide your personal data to third party finance providers they will carry out a credit check on you so that they can make credit decisions about you; and to prevent fraud and money laundering. Their search will be recorded on the files of the credit reference agencies and fraud prevention agencies.

In addition to the specific disclosures of Personal Data set out in this Section 5, we may also disclose your Personal Data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

6 Where we store your personal data

The hosting facilities for our website are situated in the EEA.

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

7 Your rights

In this section we have summarised the rights that you have under data protection law. Some of the rights are complex, and not all of the details have been included in our summary. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.

Your principal rights under data protection law are:

the right to access;
the right to rectification;
the right to erasure;
the right to restrict processing;
the right to object to processing;
the right to data portability;
the right to complain to a supervisory authority; and
the right to withdraw consent.

You have the right to request information as to whether or not we process your Personal Data and, where we do, access to the Personal Data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of Personal Data concerned and the recipients of the Personal Data. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your Personal Data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee. Provision of such information will be subject to you supplying us with appropriate evidence of your identity.

You have the right to ask us not to process your Personal Data for marketing purposes. You can exercise your right to prevent such processing by unsubscribing at any time. You can also exercise the right at any time by contacting us at privacy@hgem.com. We do not share your Personal Data with third parties for marketing purposes.

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

7 Retention and deletion of Data

This section sets out our data retention procedure, which is designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of Personal Data.

Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes. We may keep an anonymised form of your Personal Data, which no longer refers to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.

We will hold information in relation to the order for the length of the guarantee period.

Notwithstanding the other provisions of this section, we may retain your Personal Data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

Changes to our privacy policy

Any changes we make to our privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy policy.

Contact

Questions, comments and requests regarding this privacy policy should be addressed to dataprotectionofficer@sofabrands.com

Cookie Policy

1. Our Website www.theloungeco.com uses cookies (as defined below).This is how most websites operate as cookies are essential for delivering a great website and shopping experience for our customers.

2. A cookie is a small data file that the website will place on your computer or device. For example, we use cookies to track your clicks as you go through Our Website, to keep track of items you put into your basket, to tell us whether you have visited Our Website previously, and to help us determine whether you came to Our Website from a particular Internet link or banner advertisement.

3. By using Our Website, you consent to cookies being used. If you do not consent, please disable the cookies in your browser. However, if you use your browser settings to block all cookies (including cookies required for the operation of Our Website, for example, which enable you to log into secure areas or to use a shopping cart) you may not be able to access all or parts of Our Website. If you have any questions about our cookies please contact us by email, by telephone, or by post. You can contact us easliy here.

4. Please note that third parties (for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control.

5. We work with Sub2 Technologies Limited ("Sub2") in relation to digital display advertising on our website. Sub2 drops cookies onto your device when you visit our website. Data from these cookies is used to serve you with advertising that is relevant to you, based on your previous browsing habits. The data is also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. For further details on Sub2's cookies and use of cookie data, please click here.