Last updated: [[date]]
This policy explains how Mr Gurdeep Singh Shergill, trading as Speciale Meubles, collects and uses personal data through specialemeuble.com. We comply with the UK GDPR and the Data Protection Act 2018 and, for customers in the European Union, with Regulation (EU) 2016/679.
1. Who is responsible
Data controller: Mr Gurdeep Singh Shergill, trading as Speciale Meubles
5 Mercer Avenue, Swanscombe, DA10 1BG, United Kingdom
Contact: connect@specialemeuble.com — +33 7 56 75 59 70
ICO registration number: [[to complete]]
EU representative (Article 27 GDPR): [[to complete once the written mandate is in place — name and address of the EU-established representative. EU residents may contact them directly about their data.]]
We have not appointed a Data Protection Officer, as we do not meet the criteria in Article 37.
2. What we collect
| Category | Data | Source |
|---|---|---|
| Identity | Name | You |
| Contact | Email, telephone (including WhatsApp), billing and delivery addresses | You |
| Order | Products, amounts, order history | You / our platform |
| Access details | Floor, lift, parking constraints, entry codes | You |
| Payment | Payment method type, transaction status, last 4 digits of card | Payment provider |
| Technical | IP address, device, browser, pages viewed, advertising identifiers | Automatic |
| Correspondence | Your messages to our customer service | You |
We never receive or store your full card number — it goes directly and encrypted to our payment provider.
The site is not directed at children and we do not knowingly collect their data.
3. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Processing, delivering and invoicing your order | Performance of a contract |
| Arranging delivery, appointments and Paris assembly | Performance of a contract |
| Handling returns, cancellations, faults and guarantee claims | Performance of a contract |
| Answering enquiries by email, phone or WhatsApp | Contract / legitimate interests |
| Keeping accounting and tax records | Legal obligation |
| Preventing and detecting payment fraud | Legitimate interests |
| Sending marketing emails | Consent, or the soft opt-in for existing customers buying similar goods (PECR reg 22) |
| Analytics, advertising and remarketing (GA4, Meta, Google Ads, TikTok) | Consent |
Where we rely on consent you may withdraw it at any time; this does not affect processing carried out beforehand.
4. How long we keep it
| Data | Retention |
|---|---|
| Customer account | Duration of the relationship, then 3 years from last contact |
| Order and after-sales records | 6 years (Limitation Act 1980) |
| Accounting and tax records | 6 years from the end of the accounting period (HMRC) |
| Marketing data | 3 years from last contact |
| Cookies and tracking | Up to 13 months; analytics data up to 25 months |
| Record of cookie consent | 6 months |
5. Who we share it with
| Role | Provider |
|---|---|
| E-commerce platform and hosting | Shopify International Limited (Ireland) |
| Card payments | Shopify Payments |
| Alternative payment | PayPal |
| Instalments (2x / 3x) | Alma, Klarna — also controllers in their own right for their lending activity |
| Carriers and delivery | [[to complete — UK, EU and customs agents]] |
| Analytics | Google Analytics 4 |
| Advertising | Meta, Google Ads, TikTok |
| Customer messaging | WhatsApp (Meta) |
| [[to complete]] |
Customs authorities in destination countries receive the data needed to clear your shipment.
We do not sell, rent or trade your personal data.
6. International transfers
We are established in the United Kingdom. Personal data of EU residents is therefore transferred outside the EEA. The European Commission has adopted an adequacy decision for the United Kingdom, so no additional safeguards are required for those transfers.
Some of our providers process data in the United States. Those transfers rely on adequacy regulations / the UK Extension to the EU–US Data Privacy Framework, or on standard contractual clauses with supplementary measures where needed. A copy of the safeguards is available on request.
7. Security
We use encrypted connections (HTTPS/TLS), restrict access to those who need it, apply two-factor authentication to administrative tools, and keep regular backups.
We will notify the ICO — and you, where the risk to you is high — of any personal data breach, within the timescales set out in Articles 33 and 34.
8. Your rights
You have the right to access your data, have it corrected or erased, restrict or object to its processing, receive it in a portable format, withdraw consent, and object to direct marketing at any time.
To exercise any of these, email connect@specialemeuble.com or write to the address above. We may ask you to verify your identity. We respond within one month, extendable by two months for complex requests.
Complaints: you may complain to the Information Commissioner's Office — Wycliffe House, Water Lane, Wilmslow, SK9 5AF — ico.org.uk. If you live in the European Union you may instead complain to your national supervisory authority; in France that is the CNIL (cnil.fr).
9. Marketing
You can unsubscribe at any time using the link in any marketing email, or by writing to us. Under PECR we send marketing email only with your consent, or where you are an existing customer and the message relates to similar products.
10. Cookies
See our Cookie Policy.
11. Changes
We may update this policy. The version that applies is the one published when you visit. We will tell you about significant changes by an appropriate means.