Privacy Policy - Joanne Lees Interiors

1. Who we are Joanne Lees Interiors (“we”, “us”, “our”) is the controller of personal data collected via joanneleesinteriors.co.uk. If you have any questions, contact: Email: JO@JOANNELEESINTERIORS.CO.UK Telephone: 07557 819772 Postal address: CASTLE COTTAGE, HOWE STREET, FINCHINGFIELD, ESSEX, CM7 4JB, United Kingdom

2. What this policy covers This policy explains how we collect, use, store and share your personal data when you use our website, contact us, enquire about services, or become a client. It also includes our Cookie Policy. Our approach follows UK data protection law, including the UK GDPR and the Data Protection Act 2018, and cookie rules under PECR.

3. The personal data we collect We may collect and process: Identity and contact data: name, email address, telephone number, postal address. Enquiry and project data: details you provide about your project, property, preferences, budget ranges, timescales, and messages sent to us. Website usage data: pages viewed, approximate location (city/region), device and browser information, referral source, and interactions with our site (typically collected via cookies or similar technologies). Communications data: emails, messages, call notes, and correspondence history. Client and transactional data (if you become a client): invoices, payments, service deliverables, project schedules, supplier details required to fulfil your instructions. We do not intentionally collect special category data (for example health information). If you choose to share sensitive information, please only share what is necessary.

4. How we collect your data We collect data when you: Fill in a contact or enquiry form. Email, call, or message us directly. Book a consultation (if applicable). Use our website, which may collect usage data via cookies and similar technologies.

5. Why we use your data and our lawful bases We only use your data where we have a lawful basis under UK GDPR. Enquiries and quotes: To respond to enquiries and provide quotes or information you request. Lawful basis: Contract (pre-contract steps) and/or Legitimate interests. Delivering services: To plan, manage and deliver design services, procurement, project support, and client communications. Lawful basis: Contract. Admin and accounting: To keep records, issue invoices, take payments, and comply with tax and legal obligations. Lawful basis: Legal obligation and Contract. Improving our website: To understand how visitors use our site and improve content, performance, and user experience. Lawful basis: Consent for non-essential cookies and Legitimate interests for essential operational activity. Marketing: If you ask to receive updates, or if we have a relevant existing relationship, we may send service updates or content. Where required, we will ask for consent and you can opt out at any time. Lawful basis: Consent and/or Legitimate interests (where permitted).

6. Who we share your data with We may share personal data with trusted third parties where necessary to run our business and deliver services, such as: Website hosting and website administration providers. Email and communications providers. Analytics providers (for example Google Analytics) where enabled and consented. Payment and accounting providers (for invoicing and bookkeeping). Professional advisers (legal, accounting, insurance) where necessary. Contractors and suppliers involved in your project (only the information needed to deliver the work you have requested). We require suppliers to handle personal data securely and only for the agreed purpose.

7. International transfers Some providers may process data outside the UK. Where this happens, we use appropriate safeguards (such as adequacy regulations or standard contractual clauses) to protect your information.

8. How long we keep your data We keep personal data only as long as necessary for the purpose it was collected, including legal, accounting, or reporting requirements. Typical retention periods may include: Enquiries that do not become clients: usually up to 12 months, unless you ask us to keep details for longer. Client project records: usually up to 6 years after the end of the financial year for tax and accounting, plus longer where required for warranties, disputes, or insurance. Website analytics data: retained according to the settings of the analytics platform and our internal review schedule.

9. Your rights Under UK GDPR you have rights including: The right to be informed, access, rectification, erasure, restriction, data portability, objection, and rights relating to automated decision-making. Where we rely on consent, you can withdraw it at any time. You also have the right to complain to the Information Commissioner’s Office (ICO). To exercise your rights, contact us using the details in section 1.

10. Security We use appropriate technical and organisational measures to protect your data, including access controls and secure systems. No method of transmission is completely secure, but we work to protect personal information and limit access to those who need it.

11. Children’s privacy Our website and services are not intended for children, and we do not knowingly collect personal data from children.

12. Links to other websites Our website may include links to third-party sites (for example social platforms). We are not responsible for their privacy practices. Please review their privacy policies separately.

13. Updates to this policy We may update this policy from time to time. The latest version will always be published on our website with an updated effective date. Cookie Policy (part of this Privacy Policy)

14. What cookies are Cookies are small text files stored on your device when you visit a website. We may also use similar technologies such as pixels, tags, or local storage. Cookie rules require that we clearly explain cookies and obtain consent for non-essential cookies.

15. How we use cookies We use cookies to: Make the website work properly (essential cookies). Understand and improve how our website is used (analytics cookies, where enabled). Remember your preferences (functional cookies, where enabled). Support marketing or social features (marketing cookies, where enabled).

16. Types of cookies we may use Essential cookies: Required for the website to function, such as security and basic page functionality. These do not require consent where they are strictly necessary. Analytics cookies: Help us understand website usage and improve performance (for example pages visited, time on site). These require your consent. Functional cookies: Remember choices you make, such as preferences, where enabled. These may require consent depending on what they do and whether they are strictly necessary. Marketing cookies: Used to measure or tailor advertising, or to embed third-party features that track users. These require consent.

17. Managing your cookie choices When you first visit our website, you will be shown a cookie banner (where enabled) that lets you accept or reject non-essential cookies. You can also change your cookie settings at any time by: Using the cookie settings link on our website (if available). Adjusting your browser settings to block or delete cookies. Please note that blocking some cookies may affect site functionality. Consent for non-essential cookies must be a clear affirmative action, and you can withdraw consent at any time.

18. Cookie list Because cookies can change depending on website plugins and tools, we recommend maintaining a live cookie list on the website that updates automatically (or reviewing it regularly). The cookie list should include: cookie name, provider, purpose, type, and expiry. If you tell me what platform you are using (for example WordPress plus which cookie banner plugin, and whether Google Analytics is installed), I can produce an exact cookie table for your current set-up.

19. Contact If you have questions about this Privacy Policy or Cookie Policy, contact Joanne Lees Interiors using the details in section 1.