Privacy Policy

Azar Rugs Ltd (“we”, “us”) is the data controller for the personal data described here. That means we decide why and how it is used. We are a company registered in England and Wales (no. 17212395) and are registered with the Information Commissioner's Office (ICO), registration number ZC203800.

Address

Office 7, 35-37 Ludgate Hill, London, EC4M 7JN, United Kingdom

Privacy contact

info@azarrugs.co.uk

Telephone

020 3002 7660

We have not appointed a Data Protection Officer because the law does not require one for our size and activities. The contact above handles all privacy questions and requests. This policy covers our website, and the personal data you give us by email, telephone, WhatsApp, in writing, or when you buy from us, book a service or visit our office.

We collect only what we need. The table shows what, and where it comes from.

The saved items (wishlist) and light or dark theme choice are stored in your own browser. They are not sent to us. We do not ask for, and do not intend to collect, special category data (such as health or ethnic origin) or criminal convictions data.

The law requires us to have a “lawful basis” for each use of personal data. These are ours.

We do not make decisions about you using only automated means that have legal or similarly significant effects. Our payment providers run their own fraud checks; if a payment is declined you can ask us to review it.

We send newsletters and offers by email only if you have subscribed, or if you are an existing customer and we are promoting similar products, and every email has an unsubscribe link. We use MailPoet, installed on our own website, to manage subscriptions.

• Opt out at any time by using the link in any email, or by writing to info@azarrugs.co.uk. We then keep only your email address on a suppression list, so we do not email you again by mistake.
• We never sell your personal data, and we do not share it with other businesses for their own marketing.
• Service messages (order confirmations, delivery updates, replies to your enquiries) are not marketing and are sent as part of fulfilling your order or request.
• You can also manage tracking and advertising choices on our Data Preferences page.

Our website uses cookies and similar tools (such as browser storage) to make the basket and checkout work, to keep your preferences, and, in some cases, to understand how the site is used and to measure advertising. Strictly necessary ones are always used; others are optional and you can refuse them. Our Cookie Policy lists each one, who sets it and how long it lasts, and explains how to control them.

Two tools deserve a plain mention. Microsoft Clarity records how visitors use pages (clicks, scrolling, mouse movement and page views) to help us find problems in the site; by default it masks sensitive fields such as passwords and payment details. Google Analytics reports aggregated information about visits.

We share personal data only with the organisations below, and only as far as needed. Where they act on our instructions they are our processors and are bound by contract; where they decide for themselves how to use data, they are independent controllers with their own privacy notices.

If we ever sell or restructure the business, personal data may pass to the new owner, who must use it as described in this policy.

Some providers above are based in, or use servers in, other countries, including the United States. When personal data leaves the UK we make sure it is protected by one of the safeguards UK law allows: the destination is covered by UK adequacy regulations (this includes the European Economic Area and, for certified organisations, the UK-US Data Bridge), or we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can ask us for more detail by writing to info@azarrugs.co.uk.

We keep personal data only as long as we need it for the reasons we collected it, then delete or anonymise it.

Under UK data protection law you have these rights. They are free to use. We reply within one month (we may extend that by up to two further months for complex requests, and will tell you why).

To use any right, email info@azarrugs.co.uk or use the ready-made requests on our Data Preferences page. We may need to check your identity first so that nobody else can obtain your data.

• The website uses HTTPS (TLS encryption) for every page, and payments are handled by PCI-compliant providers; card numbers do not touch our servers.
• Access to personal data is limited to people who need it, and our admin areas are protected with login security, including brute-force protection.
• Our suppliers are chosen with care and bound by data protection terms.
• If a personal data breach is likely to put you at risk, we will tell you without undue delay, and report it to the ICO within 72 hours where the law requires.

No online service is perfectly secure. Please choose a strong, unique password for any account, and be cautious of emails or messages that pretend to be from us.

Our website and services are for adults. We do not knowingly collect personal data from anyone under 18 and do not offer services directly to children. If you think a child has given us data, tell us and we will delete it.

If you have a concern about how we use your data, please tell us first at info@azarrugs.co.uk. We will acknowledge your complaint within 30 days, look into it without undue delay, and tell you the outcome.

You also have the right to complain to the Information Commissioner's Office, whether or not you have contacted us first: ico.org.uk/make-a-complaint, helpline 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

We review this policy regularly and will update it if our practices or the law change. The date at the top shows when it last changed. If we make a material change we will tell you, for example by a notice on the website or an email. Other documents that apply to you are our Terms & Conditions, Cookie Policy and Legal Notice.