DOORPrivacy policy
This policy explains what personal data Doorcase collects, how we use it and what rights you have over it. It applies to visitors and customers in the UK and the EU.
Who is responsible for your data
Doorcase Ltd is the data controller. We are a company registered in England and Wales, company number [COMPANY NUMBER], registered office [REGISTERED OFFICE ADDRESS]. For any question about your data, or to exercise your rights, contact us at hello@doorcase.org.
What we collect
- Information you give us when you order or enquire: your name, email address, the measurements and requirements for your plan, the photos of your door and room that you send with your brief, your town and postcode (which we use to point you to suppliers near you), and any messages you send us.
- Payment information: your payment is processed by Stripe. We do not see or store your full card details.
- Technical information: basic logs kept by our website host when you visit. We do not use third-party analytics. [Update if you add any.]
Cookies
We keep cookies to a minimum. Our payment provider may set cookies on its own pages during checkout. If we later add analytics or marketing cookies, we will ask for your consent first through a cookie banner, as the law requires.
Why we use your data and our legal basis
- To prepare and deliver your plan and manage your order: necessary to perform our contract with you.
- To answer your enquiries and provide customer service: our legitimate interest in responding to you, or steps taken at your request before a contract is made.
- To meet our legal and tax obligations, such as keeping sales records: to comply with a legal obligation.
- We do not send marketing without your consent. If you give it, you can withdraw it at any time.
Who we share your data with
We use a small number of trusted providers to run the business, and share only what they need:
- Stripe, to process payments.
- Zoho, which provides our email service, so we can correspond with you.
- Netlify, which hosts our website and handles form submissions.
We do not sell your personal data. Each provider has its own privacy policy governing how it handles data.
Transfers outside the UK and EEA
Some of our providers may process data outside the UK or the European Economic Area. Where they do, we rely on safeguards permitted by law, such as approved adequacy decisions or standard contractual clauses, to keep your data protected. [Confirm each provider's data location and update this section.]
How long we keep your data
We keep the information relating to your order for as long as we need it to fulfil the order and to meet our legal and tax record-keeping obligations, which in the UK are generally six years. Information about an enquiry that does not lead to an order is kept for a reasonable period and then deleted.
Your rights
Under UK and EU data protection law, you have the right to ask us for a copy of your data, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable format. Where we rely on your consent, you can withdraw it. To exercise any of these rights, write to hello@doorcase.org. We will respond within the time the law allows.
Complaints
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) in the UK, or to your country's data protection authority if you live in the EU.
Changes to this policy
We may update this policy from time to time. This version is effective from [DATE].