This Privacy Policy describes how drapeandcloth (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit or make a purchase from www.drapeandcloth.com (the “Site”).

We strictly serve customers within the European region and are committed to protecting your privacy in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR).

1. Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is:

• Data Controller: drapeandcloth
• Website: www.drapeandcloth.com
• Official Contact Email: fraud@drapeandcloth.com

2. Information We Collect

When you visit our Site or place an order for our home textile products (including tablecloths, table runners, dining chair covers, decorative throw covers, and fabric storage organisers), we collect certain information necessary to complete your transaction and fulfill our services:

• Identity & Contact Data: Your full name, delivery address, billing address, and email address (fraud@drapeandcloth.com serves as our primary communication standard).
• Order & Transaction Data: Details regarding the specific home textile items purchased, transaction history, and communication records relating to order updates.
• Technical & Usage Data: Basic Internet Protocol (IP) address, browser type, and access logs collected automatically during site interaction to facilitate proper website execution.

3. Legal Basis and Purpose of Processing

We collect and process your personal data strictly for lawful and defined business purposes:

• Performance of Contract: Processing and fulfilling your orders, managing dispatches, and providing customer support.
• Legal Obligation: Maintaining transaction records to comply with British and European tax, accounting, and statutory reporting obligations.
• Legitimate Interests: Monitoring site integrity and managing standard business operations.

4. Third-Party Service Providers & Payment Processing

We do not sell, rent, or trade your personal information. We disclose necessary personal data only to trusted third-party service providers essential for conducting our operations:

• Payment Processing (Stripe): All payment transactions conducted via www.drapeandcloth.com are handled and processed directly by our third-party payment processor, Stripe. We do not store or process complete payment card digits or sensitive banking credentials on our local servers. Stripe processes payment details in accordance with applicable data privacy regulations and security standards.
• Logistics & Transport: Necessary contact details and delivery addresses are shared with regional transport partners to complete physical delivery of purchased goods within Europe.

5. Data Retention Period

We retain personal information only for as long as necessary to fulfill the operational purposes for which it was collected, or as required by applicable UK and European laws.

• Order & Financial Records: Retained for a standard period of six (6) years following the completion of a transaction, in order to comply with UK statutory accounting, tax law, and legal compliance obligations.
• Customer Inquiries: Retained for up to two (2) years from the date of final resolution to ensure consistent customer care and operational audit standards.

Once the applicable retention period expires, personal data is securely deleted or anonymised.

6. Your Statutory Data Protection Rights

Under UK GDPR and EU GDPR, customers residing within the United Kingdom and European Union possess specific rights regarding their personal data:

• Right of Access: You may request copies of the personal data held about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information.
• Right to Erasure: You may request the deletion of personal data where processing is no longer required, subject to legal record-keeping obligations.
• Right to Restrict Processing: You may request restricted processing under specific statutory circumstances.

To exercise any of these rights, please contact us at fraud@drapeandcloth.com.

7. Data Protection Standards

We implement reasonable administrative and organizational measures designed to guard personal data against unauthorized access, loss, or alteration. In accordance with legal standards, no system can promise unconditional security, but appropriate measures are taken to maintain information integrity.

8. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection procedures, please reach out via our official communication details:

• Brand Name: drapeandcloth
• Website: www.drapeandcloth.com
• Official Email: fraud@drapeandcloth.com
• Operating Region: United Kingdom & Europe