Privacy Policy
We collect only what we need to sell you a rug and get it to your door. We do not sell your personal information to anyone.
Last updated: August 2026. This policy explains what personal information Prestige Rug House collects, why we collect it, and what you can do about it. If you have any questions, contact us at info@prestigerughouse.co.uk.
1. Who We Are
Prestige Rug House is the data controller for the personal information described in this policy. That means we decide what information is collected and how it is used.
- Trading name: Prestige Rug House
- Registered company name: Prestige Rug House Ltd
- Company registration number: 17164552
- Registered in England and Wales
- Contact: info@prestigerughouse.co.uk
We are not required to appoint a Data Protection Officer. Privacy questions go to the email address above and are handled by the business owners.
2. What Information We Collect
Information you give us
- Your name, email address, delivery address, billing address, and telephone number when you place an order
- Your email address when you sign up to our newsletter or enter your details in a signup form on the site
- The content of any message you send us, including returns and delivery enquiries
Information collected automatically
- Pages you view, links you click, and how you move through the site
- Your approximate location (derived from IP address), device type, browser, and referring website
- Cookie and similar identifiers, as described in section 4
Payment information
We do not see, handle, or store your full card details. Payments are processed by our payment provider and card data goes directly to them. We receive only a confirmation that payment succeeded, along with the last few digits and card type for order reference.
3. Why We Use It, and Our Legal Basis
Under UK GDPR we must have a lawful basis for using your personal information. Ours are set out below.
| What we do | Information used | Lawful basis |
|---|---|---|
| Process and deliver your order, and handle returns and refunds | Name, contact details, delivery and billing address, order history | Performance of a contract with you |
| Answer your enquiries | Name, email, message content | Legitimate interests (responding to customers) |
| Send marketing emails about new rugs and offers | Name, email, engagement history | Consent, which you can withdraw at any time |
| Understand how the site is used and improve it | Usage and device data, cookie identifiers | Consent for non-essential analytics cookies |
| Advertise to people likely to be interested | Usage data, cookie identifiers | Consent for advertising cookies |
| Keep accounting and tax records, and prevent fraud | Order and transaction records | Legal obligation, and legitimate interests in preventing fraud |
4. Cookies and Analytics
Cookies are small files stored on your device. We use them in three ways.
- Essential cookies. These make the shop work: keeping items in your basket, letting you check out, and keeping the site secure. They cannot be switched off.
- Analytics cookies. We use Google Analytics and PostHog to understand which pages people visit and where they run into difficulty. This tells us what to fix.
- Advertising cookies. Where we run paid advertising, these help measure whether an advert led to a visit or a sale.
You can block or delete cookies at any time through your browser settings. If you would like us to stop using non-essential cookies in connection with your visits, email us at info@prestigerughouse.co.uk and we will action it. Blocking essential cookies will stop the shop working properly.
5. Marketing Emails
We send marketing emails only to people who have asked for them. Every email includes an unsubscribe link, and unsubscribing takes effect immediately.
If you have bought from us, we may email you about similar rugs on the basis of our legitimate interests, as permitted by the Privacy and Electronic Communications Regulations. You can opt out of these in exactly the same way.
Unsubscribing from marketing does not stop transactional messages such as order confirmations, dispatch notices, and delivery updates, which we need to send to fulfil your order.
6. Who We Share Your Information With
We do not sell your personal information. We share it only with the service providers we need to run the shop, and only so far as they need it to do their job for us.
| Provider | What they do for us | Where data is processed |
|---|---|---|
| Shopify | Runs our online shop, checkout, and order records | EU and USA |
| Shopify Payments | Processes card payments, including Shop Pay, Apple Pay, and Google Pay | EU and USA |
| Klaviyo | Sends our marketing and automated emails | USA |
| Google (Analytics and Ads) | Site analytics and advertising measurement | EU and USA |
| PostHog | Product analytics, so we can see where the site is hard to use | European Union |
| FedEx | Delivers your rug | United Kingdom |
We may also disclose information where we are required to by law, or to establish or defend legal claims.
7. Sending Information Outside the UK
Some of the providers above process data in the United States. Where information leaves the UK, we rely on the UK government's adequacy regulations, the UK Addendum to the International Data Transfer Agreement, or the UK Extension to the EU-US Data Privacy Framework, depending on the provider. The purpose is to give your information a level of protection comparable to UK law.
8. How Long We Keep It
- Order and transaction records: six years after the end of the relevant tax year, which is the period HMRC requires.
- Marketing contacts: until you unsubscribe, or after a prolonged period of no engagement, whichever comes first.
- Enquiries: up to two years after the matter is closed.
- Analytics data: retained according to each provider's standard retention window, typically no more than 26 months.
9. Your Rights
Under UK data protection law you have the right to:
- Ask for a copy of the personal information we hold about you
- Have inaccurate information corrected
- Ask us to delete your information, where we have no continuing reason to keep it
- Ask us to restrict how we use it while a concern is resolved
- Receive your information in a portable format, or have it sent to another provider
- Object to processing we carry out on the basis of legitimate interests
- Withdraw consent at any time, where consent is what we rely on
To exercise any of these, email info@prestigerughouse.co.uk. We will respond within one month. There is no charge, and we may ask you to confirm your identity before we act.
10. Complaints
If you are unhappy with how we have handled your information, please tell us first so we have a chance to put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator.
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
11. Children
Our shop is intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has given us their information, contact us and we will delete it.
12. Changes to This Policy
We may update this policy as the business changes or the law changes. The version on this page is always the current one, and the date below tells you when it last changed. If we make a significant change, we will make that clear on the site.
13. Contact Us
- Email: info@prestigerughouse.co.uk
This policy was last updated in August 2026. Prestige Rug House reserves the right to update this policy at any time. The most current version will always be available on this page.