INTRODUCTION:

Plum & Co. Interiors (“I”, “me”, or “my”) is committed to protecting and respecting your privacy. This Privacy Policy explains how I collect, use, store, and share your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018. By using our services or visiting our website, you agree to the practices outlined in this policy

The type of personal information I collect :

I collect and process the following types of personal data:
A. Information You Provide Directly
This includes personal data voluntarily provided when you:
✔ Inquire about my services via my website, email, phone, or social media.
✔ Sign up for my newsletter or downloadable resources.
✔ Instruct Plum & Co. Interiors for design services.

The personal data collected may include:
Identity & Contact Information: Name, phone number, email, mailing and billing address.
Project Information: Property details, style preferences, budget, project timeframes, images, and drawings.
Payment Information: I process payments through Xero accounting software. (See their Privacy Policy: Xero Privacy Policy)

B. Information Collected Automatically
When you use my website, we may collect:
✔ Technical Data (IP address, browser type, device information, operating system).
✔ Usage Data (page visits, time spent, referral URLs).
✔ Cookies & Tracking Data (used for analytics and improving services).
You can manage your cookie settings through your browser.

C. Information from Third-Party Sources
We may receive personal data from:
✔ Social media platforms (Houzz, Instagram, Facebook, LinkedIn, BIID).
✔ Business directories or industry networks.

HOW I USE YOUR DATA:

I process your personal data for the following lawful purposes:
✔ To provide our interior design services. (Project administration, communication, quotes, purchases, and deliveries.)
✔ To send invoices and manage payments.
✔ To improve and personalise our services.
✔ For marketing purposes. (If you opt-in, we may send newsletters, promotions, or updates.)
✔ To comply with legal and tax obligations.
I do not process sensitive personal data (e.g., racial, religious, or biometric data).
Marketing Preferences:
I will only send marketing emails if you opt-in.
You can unsubscribe at any time via the link in my emails or by contacting me.

Data Sharing & Third-Party Providers:

I do not sell or share your personal data with third parties for marketing. However, I may share data with:

✔ Service providers (for essential business operations):
Google (Analytics, Email Services, forms) Privacy Policy
Xero (Invoicing & Payments) Privacy Policy
Zoom (Virtual Meetings) Privacy Policy
Programa (Design Management Software) Privacy Policy

✔ Project-related third parties:
Suppliers & Contractors (to arrange quotes, purchases, and deliveries).
Photographers & Marketing Agencies (for promotional materials, with client consent).

Legal Disclosure
I may disclose your data:
✔ If required by law (e.g., tax authorities, law enforcement).
✔ To enforce contractual agreements.

Data SECURITY

I implement appropriate security measures to protect personal data from unauthorised access, alteration, or disclosure, including:

✔ Password-protected computers and encrypted storage.
✔ Access restrictions (only essential personnel have access to client data).
✔ Secure third-party platforms (e.g., cloud storage, accounting software).

However, no internet transmission is 100% secure. We encourage clients to take precautions, such as using strong passwords and avoiding sharing sensitive data via unsecured emails.

Data RETENTION POLICY

I keep client records for 6 years after project completion, in line with legal and tax requirements. After this period, data will be securely:
✔ Deleted from electronic records.
✔ Anonymised if necessary for statistical purposes.
✔ Shredded if in physical format.
Data RETENTION POLICY

Your Data Protection Rights:

Under the UK GDPR, you have the right to:
✔ Access – Request a copy of your personal data.
✔ Rectification – Request corrections to inaccurate data.
✔ Erasure – Request deletion of your data (where legally applicable).
✔ Restriction – Request limits on processing.
✔ Objection – Object to data processing in certain cases.
✔ Portability – Request transfer of data to another service provider.

Response Time: We will respond to all requests within one month.
Contact: he***@pl*****************.uk

COMPLIANTS AND CONTACT INFORMATION:

If you have concerns about how I handle your data, please contact me first at
Kim Plummer
Plum & Co. Interiors
Email: he***@pl*****************.uk

If you are unsatisfied with our response, you can escalate the matter to:
UK Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ICO Website: https://www.ico.org.uk

Updates to This Policy

I may update this Privacy Policy from time to time. Changes will be posted on my website with a revised “Effective Date.”

Effective Date: February 2025
Reviewed By: Kim Plummer