DATA PRIVACY STATEMENT
On this webpage you will find out how we store your information, for what purposes and your rights around your personal information.
It is important you read this page as it will tell you everything you need to know.
What is GDPR?
GDPR is the General Data Protection Regulation. It comes into effect from 25 May 2018. It sets out a series of new EU laws concerning how data is processed and used. The objective of the regulation is to strengthen and standardise data protection laws for all EU citizens. These regulations will apply to any organisation that controls and/or processes data on behalf of an individual or group of individuals. Those responsible for adhering to these regulations include employees of the organisation, including contractors, consultants, agents and third parties who have access to data either directly or indirectly.
Who we are
When we talk about “Lahoma,”, or “us” or “we” on our Data Protection Notice and this website, we are talking about Lahoma Ltd. and its subsidiaries, affiliates and their respective parent and subsidiary companies. We share your information within Lahoma to help us provide our services, comply with regulatory and legal requirements, and improve our products.
How we collect information about you
We collect personal information from you, for example:
Our websites will sometimes use ‘cookie’ technology. A cookie is a little piece of text that our server places on your devices when you visit any of our websites or apps. They help us make the site work better for you.
What information do we collect about you
This is some of the information we collect and hold about you when enquiring for and using our services or purchasing our products:
How we use your information
We use information about you to:
To provide our products and services under the terms and conditions we agree between us, we need to collect and use your personal information. If you do not provide this personal information, we may not be able to provide you with our product or services.
We sometimes analyse the information that we collect on you through your use of our products and services and on our social media, apps and websites. This helps us understand your behaviour, how we interact with you and our position in a market place.
For direct marketing, we need your consent to make you aware of products and services which may be of interest to you. We may do this by phone, post, email, text or through social media.
You can decide how much direct marketing you want to accept when you enquire for new products and services.
As part of our direct marketing, we analyse the information that we collect on you through your purchase of our products and services and on our social media, apps and websites. This helps us understand your behaviour, how we interact with you and our position in a market place. This enables us to personalise your experience and provide you with the most suitable products and services.
If we ever contact you to get your feedback on ways to improve our products and services, you will always have the choice to opt out.
Sometimes we need your consent to use your personal information.
We have controls to ensure that you are informed when making your decision and that you are aware that you can remove your consent at any time by contacting us. Our consent requests are built on the following principles:
You can change your mind wherever you have given us your consent, such as for direct marketing. By contacting us at firstname.lastname@example.org, you can request that we no longer process data we require your consent for.
How we keep your information safe
We protect your information with security measures under the laws that apply and we meet international standards. We keep our computers, files and buildings secure.
Lawful Basis for processing
To use your information lawfully, we rely on one or more of the following legal bases:
To help you better understand where these lawful bases may apply, these are some examples for each lawful basis. In some cases, the same information is processed under more than one lawful basis:
Performance of a contract – Processing your information is necessary for us to provide your products and services.
Providing relevant products and services
We provide our customers with recommendations for products such as, Furniture and accessories. Our services include on-line design consultations, over the phone consultations and project presentations which include design proposals using CGI. We process your information to identify and authenticate you to use our products and services.
Maintaining and monitoring your products and services
We must continually monitor and update information to ensure your data is safe, accurate and up to date. This ensures we keep your personal details accurate when providing to our retailer partners ensuring you get the best customer service.
Our legitimate interests – Legitimate interest means the interests of Lahoma in conducting and managing our business when providing products and services. The core legitimate interests of Lahoma Interiors are to provide the best customer service, introduce innovative products and services, and to protect our customers, employees and shareholders. We will always assess whether the legitimate interest of Lahoma will adversely impact the rights and freedoms of the data subject prior to processing. We implement safeguards to ensure that the processing remains fair and balanced. Our risk assessments help us understand what information we need, our business requirements, the impact on our customers and employees, alternative options for processing and how long we hold the information for.
Manage our relationship with you
We keep our records up to date to contact you when required and provide the best customer service.
Analyse information and research your experiences dealing with us
We want to continually improve and better understand our customers. By collecting and analysing data from multiple sources, we can better understand the requirements of our customers and how we can improve products and service offerings. This analysis also helps us run our business more efficiently and effectively.
Identify ways we can improve our products and services
We are always working to develop new products and innovative ways of bringing these to you. We analyse the market and our customer base to better understand what people like and what people want from our interior design company. We do this by collecting data on your purchases, services, interactions with our website, staff and social media and using customer surveys. We use this information to provide a more personalised service to our customers and improve their experience working with us. The information is internal management information.
Internal management information
We produce internal management information through our Enterprise Resource Planning system, to run our business and better understand customer needs. This information enables us to make informed decisions and develop our strategy.
Your consent – We require your consent for processing certain information such as special category data.
We ensure your consent is obtained under the following principles:
Directly contact you about new products and services. With your consent, we will let you know what products or services you might like. You can select how you prefer to be contacted on our application forms or by contacting us.
Protecting the vital interests of you or others
Assessing your personal information
You can ask us for a copy of the personal information we hold and further details about how we collect, share and use your personal information. You can request the following information:
Updating or correcting your personal details
If you want to update or correct any of your personal details, please contact us at email@example.com, or call into a showroom.
Your information and third parties
For example to:
Third parties we share information with can include:
Deleting your information (Right to be forgotten) – New GDPR right introduced from May 25th 2018. You may ask us to delete your personal information or we may delete your personal information under the following conditions:
Moving your information (your right to Portability) New GDPR right introduced from May 25th 2018
Where possible we can share a digital copy of your information directly with you or another organisation. We will provide this information in a structured, commonly used and machine-readable format. Note, we can only share this information where it has been processed automatically (hard copy documents are excluded for portability) and was processed under your consent or performance of a contract
We do not share information processed under legal obligation or our legitimate interest for portability, in line with GDPR guidance.