Privacy Policy

This privacy policy sets out how Casa Bella Furniture uses and protects any information that you give Casa Bella Furniture when you use this website. Casa Bella Furniture is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement. Casa Bella Furniture may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.

 

1. Introduction

1.1. Casa Bella Furniture ("we," "our," or "us") is committed to safeguarding the privacy of our website visitors and service users. This Privacy Policy outlines our practices regarding the collection, processing, and use of your personal information in compliance with UK data protection laws and regulations, including the General Data Protection Regulation (GDPR).

1.2 This policy pertains to the use of our website, www.casabellafurniture.co.uk, and the services we provide as an online furniture retailer and delivery service. Any terms not explicitly defined herein shall bear the meanings assigned to them in our Terms and Conditions.

1.3 By using our Services, you acknowledge and consent to our collection, processing, and use of your personal information as described in this Privacy Policy. If you disagree with any aspect of this policy, please refrain from using our Services. For enquiries regarding our privacy practices, please refer to the contact details provided below.

1.4 Our website incorporates privacy controls that affect how we process your personal data. You may use these controls to specify your preferences for receiving direct marketing communications and limiting the publication of your information, accessible via the My Account link.

 

2. Processing of Personal Data

2.1. In this Section 2, we set out the specifics of our personal data processing, including:

(a) The general categories of personal data We will process;

(b) The source and specific categories of data when obtained indirectly;

(c) The purposes for processing personal data; and

(d) The legal bases for such processing.

2.2 Usage Data: We will process data regarding your use of our website and services ("usage data"). This may include your IP address, geographical location, browser type, version, operating system, referral source, duration of visit, page views, website navigation paths, and information about the timing, frequency, and pattern of your service use. Usage data is sourced from our analytics tracking system and is processed to analyse website and service usage. The legal basis for this processing is our legitimate interests, including monitoring and enhancing our website and services.

2.3 Account Data: We will process your account data ("account data"), such as your name and email address. The source of account data is either you or your employer. We process account data to operate our website, provide our services, secure our website and services, maintain database backups, and communicate with you. The legal basis for this processing includes our legitimate interests in administering our website and business, performance of a contract between you and us, and taking steps, as requested, to enter into such a contract.

2.4 Profile Data: We will process information within your personal profile on our website, including your name, physical address, telephone number, email address, profile pictures, gender, and date of birth. The legal basis for this processing is our legitimate interests in administering our website and business, performing a contract between you and us, and taking steps, upon your request, to enter into such a contract.

2.5 Service Data: Information you provide during the use of our services ("service data"), such as information submitted by you, communication data, and notes, may be processed. The source of service data is you or your employer. Service data may be processed for operating our website, providing our services, securing our website and services, maintaining database backups, and communicating with you. The legal basis for this processing includes our legitimate interests, proper administration of our website and business, performance of a contract between you and us, and taking steps, at your request, to enter into such a contract.

2.6 Publication Data: Information posted for publication on our website or through our services ("publication data") may be processed to enable such publication and administer our website and services. The legal basis for this processing is the performance of a contract between you and us, and taking steps, at your request, to enter into such a contract.

2.7 Enquiry Data: Information submitted in any product or service-related enquiry you send to us ("enquiry data") may be processed for offering, marketing, and selling relevant products and/or services to you. The legal basis for this processing is consent.

2.8 Transaction Data: Information related to transactions, including purchases of goods and services made through our website ("transaction data"), may be processed. Transaction data may include your contact details, card details, and transaction details. Transaction data may be processed for supplying purchased goods and services and maintaining proper transaction records. The legal basis for this processing includes the performance of a contract between you and us, taking steps, at your request, to enter into such a contract, and our legitimate interests in properly administering our website and business.

2.9 Notification Data: Information provided to subscribe to our email notifications and/or newsletters ("notification data") may be processed for sending relevant notifications and/or newsletters. The legal basis for this processing is consent.

2.10 Correspondence Data: Information contained in or related to any communication you send to us ("correspondence data"), including communication content and associated metadata, may be processed for communication purposes and record-keeping. The legal basis for this processing includes our legitimate interests in properly administering our website and business, and communications with users.

2.11 Legal Obligations and Vital Interests: In addition to the specific purposes outlined in this Section 2, We will process any of your personal data when necessary for compliance with a legal obligation, to protect your vital interests, or those of another natural person.

2.12 Do Not Supply Others' Data: Please do not supply any other person's personal data to us unless specifically prompted to do so.

 

3. Utilisation of Personal Data

At Casa Bella (Imports) Limited, referred to as "Casa Bella," we are dedicated to the responsible and legitimate use of your personal data. Here, we outline how we employ your personal information:

 

3.1 Enhancing Our Website

Improving the Website Experience: Casa Bella uses your personal data to enhance your website interaction. This includes facilitating seamless online and in-store shopping, collaborating with our in-store teams to provide a superior shopping experience, and refining website user-friendliness.

Personalisation: We customise your website experience based on your preferences and interests.

Optimising Content: We assess and refine website content to ensure its effectiveness for you and other users.

Information and Product Provision: Casa Bella delivers requested information, products, or services while tailoring our communications to your preferences.

Store Location Services: We offer location-based information, directing you to the nearest Casa Bella store and providing store directions via SMS upon request.

 

3.2 Fulfilling Service Obligations

Contractual Commitments: We process your data to fulfil contractual obligations, such as product delivery and guarantees.

Product and Service Updates: Casa Bella promptly informs you of changes to products and services.

Payment Processing: We manage payments for products and services, ensuring a secure shopping experience. Please note that third-party payment providers manage payment details, subject to their privacy policies.

Payment Verification: We evaluate your ability to make payments for online or in-store orders.

Transaction Records: Casa Bella maintains accurate records of purchases, sales, and transactions to facilitate payment processing, deliveries, and forecasting. Payment details are managed by third-party payment gateways.

Post-Purchase Support: We provide post-sales services to enhance your overall experience.

 

3.3 Marketing

Direct Marketing: Casa Bella may contact you through various channels, including telephone, post, SMS, or email, regarding special offers and new products tailored to your preferences. You have the right to object to the use of your data for marketing purposes (details in the "Your Rights" section).

Competitions and Prize Draws: We engage with you regarding competitions, manage your competition entries, and share data with Casa Bella agents or subcontractors responsible for data collection on our behalf.

Advertising and Marketing: We promote our products, services, and business through digital advertising. Your data may be shared with agents or subcontractors for personalised advertising. We do not sell or disclose your data for third-party marketing.

Shopping Basket Emails: If you add products to your shopping basket, we may contact you via email to assist.

Analysis of Digital Advertising: We evaluate the effectiveness of digital advertising based on your interactions.

Sales Analysis: We analyse sales and product views for marketing and business development.

Personalised Email Communications: We send personalised email communications based on your browsing behaviour.

Customer Feedback: Feedback is collected through reviews and surveys, potentially shared on our website and in marketing materials.

 

3.4 Customer Services

Responding to Inquiries: We address your questions, suggestions, or complaints, whether submitted directly, on social media, or in the public domain.

Administrative Tasks: Administrative and statistical tasks include customer surveys and research.

Profiling for Enhanced Service: Profiling is used to improve automated live chat responses.

 

3.5 Enhancing Products and Services

Demand Prediction: Casa Bella forecasts demand for products and services to facilitate effective logistics planning.

Relevant Advertisements: Anonymous data on shopping habits is shared with organisations conducting online advertising to ensure relevance.

Website and App Analysis: We gather statistics on website and app usage to enhance user experiences.

 

3.6 Compliance

Monitoring for Abuse and Threats: We monitor website usage to identify abusive or threatening behaviour.

Preventing Criminal Activity: Data is employed to prevent criminal acts such as identity theft and fraud.

Premises Security: CCTV in stores is used to monitor premises and enhance security.

Record Keeping: Administrative and statutory records are maintained to understand business operations, including sales, pricing, and tax compliance.

Meeting Legal Obligations: Data supports compliance with legal and contractual obligations, including accident reporting.

 

3.7 Legitimate Business Interests

Effective Business Planning: Data assists in daily operational planning and management.

Market Research: We conduct market research to improve our products and services.

Evaluation of Marketing and Advertising: We assess the value of marketing and advertising efforts.

Process Improvement and Risk Management: Data contributes to process enhancements and risk assessment.

Email Newsletter: Subscribing and unsubscribing from our newsletters is possible on the Casa Bella website, as detailed in the "Your Rights" section.

External Links: Casa Bella disclaims responsibility for the content of external linked websites.

Social Media: Interactions on social media platforms are subject to the terms and privacy policies of each respective platform. We advise prudent use of social media and refrain from sharing private personal information unless explicitly requested.

 

4. Providing Personal Data to Others

4.1. We will disclose your personal data to any member of our group of companies, including our subsidiaries, ultimate holding company, and all its subsidiaries, as reasonably necessary for the purposes stated in this policy.

4.2. We may disclose your personal data to our insurers and/or professional advisers as required for obtaining and maintaining insurance coverage, risk management, obtaining professional advice, and managing legal disputes.

4.3. Additionally, we will, if necessary, disclose your personal data to comply with a legal obligation or to protect your vital interests or those of another natural person.

 

5. International Transfers of Your Personal Data

5.1. This Section 5 provides information about circumstances under which your personal data may be transferred to countries outside the European Economic Area (EEA).

5.2. Our website's hosting facilities are located in the UK and the United States. In the event of the transfer of personal information outside the EEA, we are committed to ensuring that your privacy rights receive comprehensive protection in strict adherence to the applicable data protection regulations. These protective measures may encompass the use of the European Union (EU) Standard Contractual Clauses or reliance on an adequacy decision issued by the European Commission. If you require further information concerning these protective measures, please do not hesitate to contact us.

5.3. You acknowledge that personal data you submit for publication through our website or services may be accessible worldwide via the internet. We cannot prevent the use (or misuse) of such personal data by others.

 

6. Retaining and Deleting Personal Data

6.1. This Section 6 outlines our data retention policies and procedures designed to ensure compliance with legal obligations regarding the retention and deletion of personal data.

6.2. Personal data processed for any purpose or purposes shall not be kept longer than necessary for that purpose or those purposes.

6.3. We will retain and delete your personal data as follows:

(a) Profile data containing personal data will be retained for two years following your last login; if no login occurs for more than two years, we will delete your profile data.

(b) In some cases, personal data may be retained for up to 10 years following the date of receipt of the data to comply with legal obligations. After this period, the data will be deleted from our systems.

6.4. In cases where specific retention periods cannot be predetermined, the period of retention for personal data will be determined based on industry practice.

6.5. Notwithstanding other provisions in this Section 6, We will retain your personal data where necessary to comply with a legal obligation or to protect your vital interests or the vital interests of another natural person.

 

7. Amendments

7.1. We will update this policy in line with internal and regulatory updates and will publish a new version on our website.

7.2. You should check this page periodically to ensure you are satisfied with any policy changes.

7.3. We will notify you of policy changes via email or through the private messaging system on our website.

 

8. Your Rights

8.1 Your personal information is subject to certain rights under the General Data Protection Regulation (GDPR) and other applicable data protection laws. These rights include:

  • Right to Access: You have the right to request access to the personal information we hold about you. We will provide you with a copy of this information, along with details of how and why we process it, in a clear and concise manner. There is no fee unless the request is manifestly unfounded or excessive.
  • Right to Rectification: If any of the personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. We will promptly amend any inaccuracies to ensure the data we hold is accurate and up to date.
  • Right to Erasure (Right to be Forgotten): You have the right to request the erasure of your personal information in certain circumstances. We will delete your data if it is no longer necessary for the purpose for which it was collected or if you withdraw your consent and there is no other legal basis for processing it.
  • Right to Restriction of Processing: You may request the restriction of processing of your personal information in specific situations, such as when you contest the accuracy of the data or when the processing is unlawful, but you do not wish for your data to be erased.
  • Right to Data Portability: The right to have your personal data transferred to a third party in certain circumstances.
  • Right to Opt-out: The right to opt out of direct marketing.
  • Right to Complain: The right to lodge a complaint with the Information Commissioner's Office, responsible for data privacy supervision in the UK.

We will diligently adhere to any requests you make to exercise these rights, in accordance with applicable data protection laws. However, it is important to note that there may be limitations to these rights, and there might be circumstances where we are unable to comply with your request.

To submit requests concerning your personal information, or if you have inquiries or concerns regarding the handling of your personal data, please use the contact details provided within Section 14. You also retain the right to contact the United Kingdom's supervisory authority for data protection, the Information Commissioner's Office (ICO), or your local supervisory authority.

You can exercise these rights by contacting us using the details provided in the Contact Information section.

 

9. Third-Party Websites

9.1. Our website includes hyperlinks to, and details of, third-party websites.

9.2. We have no control over, and are not responsible for, the privacy policies and practices of third parties.

 

10. Personal Data of Children

10.1. Our website and full services are intended for persons over the age of eighteen.

10.2. If we have reason to believe that we hold the personal data of a person under eighteen in our databases, we will delete that personal data.

 

11. Updating Information

11.1. Please inform us if the personal information we hold about you needs correction or updating.

 

12. Data Controller Responsibilities

12.1. Data Controller Status

For the purpose of the Data Protection Act 1998 (the Act) and from 25th May 2018, the EU General Data Protection Regulations 2016/679 (the “GDPR”) the data controller is Casa Bella (Imports) Ltd registered in the United Kingdom under registration number 7677225 and our registered office is at 25 The Pastures, Lower Westwood, Bradford-on-Avon, Wiltshire, BA15 2BH.12.2.

12.2 Responsibilities as Data Controller

In its role as Data Controller, Casa Bella assumes specific responsibilities, including but not limited to:

(a) Purpose Determination: Casa Bella is responsible for defining the purposes for which personal data is processed, ensuring that each purpose is lawful and clearly communicated to data subjects.

(b) Lawful Basis: Casa Bella must identify and apply the lawful basis for processing personal data, ensuring it complies with data protection regulations and respects data subject rights.

(c) Data Minimization: Casa Bella is obligated to collect and process only the personal data that is strictly necessary for the defined purposes. Unnecessary data should not be collected or retained.

(d) Data Accuracy: Casa Bella must take reasonable steps to ensure the accuracy of the personal data it holds and rectify inaccuracies promptly when identified.

(e) Data Security: Casa Bella is responsible for implementing appropriate security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction.

(f) Data Subject Rights: Casa Bella should facilitate the exercise of data subject rights, including the right to access, rectify, erase, or restrict processing of their personal data, as well as the right to data portability and the right to object to processing.

(g) Data Protection Impact Assessments (DPIAs): Casa Bella may be required to conduct DPIAs for high-risk data processing activities, assessing the impact on data protection, and implementing mitigating measures.

(h) Records of Processing Activities: Casa Bella must maintain records of its data processing activities, including the purposes, categories of data, recipients, and retention periods, as required by data protection regulations.

(i) Data Breach Notification: In the event of a data breach, Casa Bella is responsible for promptly notifying the relevant authorities and data subjects, when necessary, in accordance with data protection laws.

(j) Data Protection Officer (DPO): Casa Bella may appoint a Data Protection Officer if required by data protection regulations, whose responsibilities include advising on compliance and acting as a point of contact for data protection matters.

(k) International Data Transfers: If transferring data internationally, Casa Bella must ensure that adequate safeguards are in place to protect the data, as required by data protection regulations.

(l) Cooperation with Regulatory Authorities: Casa Bella should cooperate with and respond to inquiries from data protection regulatory authorities, such as the Information Commissioner's Office (ICO) in the UK.

(m) Accountability and Documentation: Casa Bella must demonstrate compliance with data protection regulations by maintaining comprehensive documentation of its data protection practices.

 

12.3. Learn More

12.3. To further understand the specific responsibilities of a Data Controller, please refer to the Information Commissioner's Office (ICO) website, which provides detailed guidance on the obligations of Data Controllers. Visit the ICO's Data Controllers' Responsibilities page here.

 

13. Cookie Policy

 

13.1 Definition of Cookies

In the simplest terms, a "cookie" signifies a diminutive file that our website stores on your computing device, thereby enabling it to recognize you upon your subsequent visits and retain certain information for future reference.

 

13.2 Categories of Cookies Utilized by Casa Bella

13.2.1 Strictly Necessary Cookies

These cookies are indispensable for the functionality of our website. They encompass, among other things, cookies that facilitate your access to your Casa Bella account and enable you to review your offers. These cookies typically cannot be switched off; however, certain browsers can block or alert you about these cookies. Be aware that blocking these cookies will affect site functionality.

13.2.2 Analytical/Performance Cookies

Analytical/performance cookies afford us the capability to identify and quantify the number of visitors to our website, as well as their navigation patterns. This assists us in optimizing the efficacy and user-friendliness of our website, ensuring that users can seamlessly locate their desired content.

Disallowing these cookies negatively affects our ability to improve our product and services.

13.2.3 Functionality Cookies

Functionality cookies serve to recognize you upon your return to our website. This facilitates the personalization of our content, enables personalized greetings by name, and remembers your preferences, such as the retention of the number plate you entered on Casa Bella to obviate the need for repeated entries.

If these cookies are disabled, some or all of these features may be adversely affected.

 

13.2.4 Targeting Cookies

Targeting cookies document your interactions with our website, encompassing the pages you visited and the links you followed. We employ this data to augment the relevance of our website content and the advertisements displayed, aligning them more closely with your interests. For this purpose, we will also share such information with third parties.

 

13.2.5 Third-Party Cookies

These cookies are typically categorized as analytical/performance or targeting cookies. These cookies may be set through our site by our advertising partners, advertising networks and providers of external services such as web traffic analysis services. Those companies may use them to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

 

13.3 Managing Your Cookie Preferences

While the continued use of the Casa Bella website implies adherence to our prevailing cookie policy, you possess the prerogative to amend your privacy settings at any juncture.

Opting out of cookies is straightforward, yet the method may be contingent upon the web browser you employ. For comprehensive guidance on disabling cookies, please consult the most reliable resource accessible at:

https://ico.org.uk/for-the-public/online/cookies/

 

Cookies that we use

The table below lists the cookies we collect and what information they store.

 

COOKIE NAME

COOKIE DESCRIPTION

CART

The association with your shopping cart.

CATEGORY_INFO

Stores the category info on the page, which allows us to display pages more quickly.

COMPARE

The items that you have in the Compare Products list.

CURRENCY

Your preferred currency

CUSTOMER

An encrypted version of your customer id with the store.

CUSTOMER_AUTH

An indicator if you are currently logged into the store.

CUSTOMER_INFO

An encrypted version of the customer group you belong to.

CUSTOMER_SEGMENT_IDS

Stores the Customer Segment ID

EXTERNAL_NO_CACHE

A flag, which indicates whether caching is disabled or not.

FRONTEND

You session ID on the server.

GUEST-VIEW

Allows guests to edit their orders.

LAST_CATEGORY

The last category you visited.

LAST_PRODUCT

The most recent product you have viewed.

NEWMESSAGE

Indicates whether a new message has been received.

NO_CACHE

Indicates whether it is allowed to use cache.

PERSISTENT_SHOPPING_CART

A link to information about your cart and viewing history if you have asked the site.

POLL

The ID of any polls you have recently voted in.

POLLN

Information on what polls you have voted on.

RECENTLYCOMPARED

The items that you have recently compared.

STF

Information on products you have emailed to friends.

STORE

The store view or language you have selected.

USER_ALLOWED_SAVE_COOKIE

Indicates whether a customer allowed to use cookies.

VIEWED_PRODUCT_IDS

The products that you have recently viewed.

WISHLIST

An encrypted list of products added to your Wishlist.

WISHLIST_CNT

The number of items in your Wishlist.

               

13.4 Cookies used by our service providers

13.4.1 Our service providers use cookies, and those cookies may be stored on your computer when you visit our website.

13.4.2 We use Google Analytics to analyse the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google's privacy policy is available at: https://www.google.com/policies/privacy/. The relevant cookies are: __utma, __utmb, __utmc, __utmt, __utmz, _ga, _gat.

13.4.3 Google Analytics will collect visitation information and associate it with Google information from accounts of signed-in users who have consented to this association for the purpose of ads personalisation. This Google information may include end user location, search history, YouTube history and data from sites that partner with Google – and is used to provide aggregated and anonymised insights into cross-device behaviours.

 

14. Our details

14.1 This website is owned and operated by Casa Bella (Imports) Ltd

14.2 We are registered in the United Kingdom under registration number 7677225 and our registered office is at 25 The Pastures, Lower Westwood, Bradford-on-Avon, Wiltshire, BA15 2BH.

14.3 Our principal place of business is at Units 3-5 Northlands Industrial Estate, Copheap Lane, Warminster BA12 0BG

14.4 You can contact us:

(a) by post, using the postal address above

(b) by telephone, using the contact number published on our website; or

(c) by email, using [email protected]

 

15. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us directly - see our contact details in section 14.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk