Privacy Policy

1. Introduction

Munro Upholstery Ltd (“we”, “us”, “our”) respects your privacy and collects, uses, and processes personal data in compliance with UK GDPR when you visit our website, request quotes, or engage our services.

2. Data Controller & Contact Details

Munro Upholstery Ltd
40 Beckenham Lane, Shortlands, Bromley, BR2 0DQ
📞 020 8464 1844 · 📱 07766 020266 · ✉️ enquiries@munroupholstery.co.uk
Family-run since 1981, covering Bromley, Beckenham, Sydenham and SE London.

3. Personal Data Collected

• Enquiry/booking forms: name, email, phone, address/work details, images (optional)

• Communications: details via phone, email, or messaging

• Website analytics: anonymised IP, device/browser data, pages visited, session duration—via essential and performance cookies only (no advertising or profiling cookies)

4. Purposes of Use

Your data is used to:

• Provide quotes, arrange collection/delivery, and perform re‑upholstery, restoration, repairs, and bespoke furniture projects

• Send confirmations, scheduling updates, and after‑care advice

• Improve our website using anonymised analytics

• Retain records for warranty, insurance, financial, and audit purposes

5. Legal Basis

Processing is based on:

• Contractual necessity: to fulfil your service requests

• Legitimate interests: to operate and enhance our services and website

• Consent: where provided for additional communications

• Legal obligations: to retain records (e.g. tax, warranty)

6. Data Sharing

We do not sell or rent your data. We may share it with:

• Service providers (hosting, email, analytics, delivery partners) under GDPR-compliant agreements

• Regulatory or insurance bodies, where required by law

7. Cookies & Analytics

• Essential cookies: required for forms and site functionality

• Performance: anonymised analytics (e.g. Google Analytics)
  No advertising, profiling, or third‑party tracking cookies used

8. Data Retention

• Enquiries and service records: up to 7 years for legal, financial, warranty, and insurance records

• Analytics logs: session data deleted after 24 months, aggregated data retained as required

9. Your Rights

Under UK GDPR, you have the right to:

• Access, correct, erase, restrict, or port your data

• Withdraw consent or object to processing
  Please contact us to exercise your rights; you may also lodge a complaint with the ICO.

10. Security

We use SSL encryption, secure hosting, access controls, and staff training. While no system is impervious, we adhere to industry best practice.

11. International Transfers

All personal data is processed and stored within the UK—no international transfers occur.

12. Policy Updates

We may update this policy periodically; the Effective Date reflects the latest version. Continued website use implies acceptance of updates.