Privacy Policy for Farnham Furnishers
Last Updated: 15 July 2025
 
At Farnham Furnishers, we are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you interact with our website, visit our showroom, make a purchase, or engage with us on social media platforms, particularly in relation to our Meta (Facebook and Instagram) advertising activities.

Farnham Furnishers is the data controller responsible for your personal data.
 
Our Contact Details:
Farnham Furnishers
39-49 South Street
Farnham
Surrey
GU9 7RE
01252 715 000
[email protected]
 
1. What Personal Data Do We Collect?
We may collect and process various types of personal data about you, depending on how you interact with us.
Information you provide directly to us:
  • Contact Information: Your full name, postal address, email address, and telephone numbers (when you make an enquiry, place an order, or sign up for our newsletter).
  • Order Details: Information about your requirements, product preferences, purchase history, and payment details (though we do not directly store full credit card numbers; these are handled by secure payment processors).
  • Enquiry Information: Details you provide when contacting us via phone, email, contact forms on our website, or in our showroom.
  • Lead Form Data: If you interact with our advertisements on Meta platforms (Facebook or Instagram) and complete a "Lead Ad" form, we collect the specific information you choose to provide through that form (e.g., name, email, phone number, specific interests you indicate).
Information we collect automatically from your use of our website and engagement with our online advertising:
  • Website Usage Data: Information about your visit to our website, including pages viewed, products clicked, items added to your basket, search queries, referral source, and the time and date of your visit. This is primarily collected through cookies and similar tracking technologies, such as the Meta Pixel.
  • Device Information: Your Internet Protocol (IP) address, browser type and version, operating system, and mobile network information.
  • Engagement Data (from Meta platforms): Interactions with our ads, posts, and our Facebook or Instagram page, such as likes, comments, shares, video views, and clicks on our ads. This helps us understand what content is most engaging.
  • Inferred Demographic Data: While we do not directly collect sensitive demographic data (e.g., precise age, gender, specific interests from your personal profile), Meta's advertising tools may infer certain demographic information from your interactions and Browse behavior to help us target our advertising more effectively.
 
2. How and Why Do We Use Your Personal Data (Purposes and Legal Basis)?
We use your personal data for the following purposes, relying on different legal bases under the UK General Data Protection Regulation (GDPR):
 
Purpose of Processing
Types of Data Used
Legal Basis for Processing (UK GDPR)
To fulfil your orders and provide our services
Contact Information, Order Details, Payment Information
Contractual Necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

To respond to your enquiries and provide customer support
Contact Information, Enquiry Information
Legitimate Interests: To manage our relationship with you, answer your questions, and provide effective customer service.

To send you marketing communications (if you have opted in)
Contact Information (e.g., email address)
Consent: You have explicitly consented to receive these communications. You can withdraw your consent at any time.

To personalize our website and improve your Browse experience
Website Usage Data, Device Information
Legitimate Interests: To analyze how our website is used and make improvements to its functionality and user experience.

For personalized advertising on Meta Platforms (Facebook & Instagram)
Website Usage Data (via Meta Pixel), Engagement Data, Lead Form Data, Inferred Demographic Data
Consent: We rely on your explicit consent for using your data for personalized advertising and tracking through the Meta Pixel and other Meta Business Tools. You provide this consent via our cookie banner.

To measure and optimize our advertising campaigns
Website Usage Data (via Meta Pixel), Engagement Data
Consent: To understand the effectiveness of our advertising, reach relevant audiences, and improve our campaign performance.

For internal record keeping, administration, and financial management
Contact Information, Order Details
Legal Obligation / Legitimate Interests: To comply with our legal and accounting obligations and for the efficient administration of our business.

For fraud prevention and security
Contact Information, Payment Information, Device Information
Legitimate Interests: To protect our business and customers from fraudulent activities.

Export to Sheets
 
 
3. How We Share Your Personal Data
We will not sell or lease your personal information to third parties. We may share your information with the following categories of third parties:
  • Service Providers: We work with trusted third-party service providers who assist us in operating our business and providing services to you. These include:
    • Payment Processors: To securely process your payments (we do not store full credit card details on our servers).
    • Delivery Services: To deliver your orders.
    • IT and Website Hosting Providers: To maintain our website and IT systems.
    • Marketing and Advertising Partners (including Meta Platforms, Inc. and Facebook Ireland Ltd.): As detailed below, we share certain data with Meta to facilitate our advertising campaigns.
  • Legal and Regulatory Bodies: We may disclose your personal data if required to do so by law or in response to a valid request from a government or regulatory authority.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.
Data Sharing with Meta Platforms (Facebook and Instagram):
When you visit our website, interact with our ads, or engage with our content on Facebook or Instagram, certain personal data may be shared with Meta Platforms, Inc. (and its affiliates like Facebook Ireland Ltd.). This occurs through technologies such as the Meta Pixel (a piece of code on our website) and if you complete Lead Ads on their platforms.
  • Purpose: This sharing enables us to:
    • Track the effectiveness of our advertising campaigns (e.g., seeing if an ad led to a website visit or purchase).
    • Show you more relevant advertisements for Farnham Furnishers products and services on Facebook, Instagram, and other Meta properties.
    • Create "Custom Audiences" (groups of people who have interacted with us) and "Lookalike Audiences" (people with similar characteristics to our existing customers) for advertising purposes.
  • Legal Basis: We rely on your explicit consent, obtained via our cookie consent banner, for the processing of your data through the Meta Pixel and for personalized advertising on Meta platforms.
  • Joint Controllership: For certain data processing activities involving the Meta Pixel, Farnham Furnishers and Facebook Ireland Ltd. act as "joint controllers" under GDPR. This means we jointly determine the purposes and means of this processing. Meta's own privacy policy (available on their website) provides more details on how they process data they receive.
  • International Transfers: As Meta Platforms, Inc. is based in the United States, your personal data may be transferred outside the UK and European Economic Area (EEA). We ensure that appropriate safeguards are in place for such transfers, typically relying on Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) or by relying on Meta's self-certification under the EU-U.S. Data Privacy Framework (if applicable and deemed adequate by the UK).
 
4. How We Use Cookies and Similar Technologies
Our website uses cookies and similar tracking technologies (like the Meta Pixel) to enhance your Browse experience, analyze website traffic, and deliver personalized advertisements.
  • What are Cookies? Cookies are small text files placed on your device by websites that you visit. They are widely used to make websites work more efficiently, as well as to provide information to the owners of the site.
  • Meta Pixel: The Meta Pixel is a specific type of cookie/tracking technology that allows us to understand and measure the effectiveness of our advertising by tracking how users interact with our website after seeing a Facebook or Instagram ad. It collects data such as pages visited, buttons clicked, products viewed, and purchases made. This data is then used to deliver relevant ads to you on Meta platforms and to create targeted audiences.
  • Your Consent: We use a cookie consent management platform on our website that allows you to control your cookie preferences. Non-essential cookies, including those used for advertising and analytics (like the Meta Pixel), will only be activated with your explicit consent. You can change your cookie preferences at any time by clicking on the "Cookie Settings" link, usually found in your browser.
 
5. Data Security
We are committed to ensuring that your information is secure. To prevent unauthorized access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online. This includes:
  • Using secure servers and encryption (SSL) for data transmission.
  • Implementing access controls and security measures for our systems.
  • Regularly reviewing our security practices.

6. How Long Do We Retain Your Data?
We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.
For data collected via the Meta Pixel for advertising purposes, we adhere to Meta's data retention policies and our own internal retention schedule, ensuring data is not held longer than necessary for the purposes for which consent was given.
 
7. Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights regarding your personal data:
  • The Right to Be Informed: You have the right to be informed about how your personal data is collected and used, which is the purpose of this Privacy Policy.
  • The Right of Access: You have the right to request a copy of the personal data we hold about you.
  • The Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
  • The Right to Erasure (the 'Right to be Forgotten'): In certain circumstances, you have the right to request the deletion of your personal data.
  • The Right to Restrict Processing: In certain circumstances, you have the right to request that we limit the way we use your personal data.
  • The Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
  • The Right to Object: You have the right to object to the processing of your personal data in certain situations, particularly where we are relying on legitimate interests or for direct marketing purposes (including profiling related to direct marketing).
  • Rights in Relation to Automated Decision Making and Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except in certain circumstances. We do not currently use automated decision-making that would have such significant effects on you.
How to Exercise Your Rights:
If you wish to exercise any of these rights, please contact us using the contact details provided at the beginning of this policy. We will respond to your request in accordance with applicable data protection laws. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
 
8. Lodging a Complaint
If you have any concerns about our use of your personal data, you can make a complaint to us directly at [email protected] .
You also have the right to lodge a complaint with the UK supervisory authority for data protection issues, the Information Commissioner's Office (ICO). Their website is www.ico.org.uk.
 
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this policy periodically.