Privacy Policy

At Harvey Jones, we believe trust is built in the same way as our kitchens – carefully, responsibly and for the long term. When you request a brochure, book an appointment or contact us, we collect the information needed to respond and support your enquiry.

We use your data to:

• Arrange appointments
• Send brochures
• Provide relevant marketing (which you can opt out of at any time)
• Improve our website and services

We do not sell your personal data. You remain in control of your information.

1. Who We Are

Harvey Jones Home Limited

Company number: 15510621

ICO registration reference: ZB666826

Registered office: Southbridge House 9–19 Southbridge Place Croydon CR0 4HA

We trade as Harvey Jones.

For privacy enquiries, contact: [email protected]

We are the data controller for the purposes of UK data protection law.

2. Information We Collect

We may collect:

• Name
• Email address
• Telephone number
• Postal address
• Showroom preference
• Details of your enquiry
• Appointment information
• IP address
• Device and browser information
• Website interaction data
• Advertising and campaign data (for example, which advert, search or link brought you to our website)

We collect information when you:

• Request a brochure
• Book an appointment
• Contact us
• Browse our website
• Consent to cookies

3. How We Use Your Information

We use personal data to:

• Respond to enquiries
• Arrange design appointments
• Send brochures
• Manage customer relationships
• Send relevant marketing communications
• Improve website usability
• Analyse engagement
• Protect website security
• Comply with legal obligations

4. Legal Basis for Processing

Under UK GDPR, we rely on:

Contract

Where processing is necessary to provide goods or services requested by you.

Legitimate Interests

For responding to enquiries, improving services and sending marketing where permitted under UK electronic marketing regulations (soft opt-in).

Consent

For:

• Analytics cookies
• Marketing cookies
• Advertising tracking
• Where required by law

You may withdraw consent at any time.

5. Marketing Communications

If you request a brochure or appointment, we may contact you by email with information about similar products or services.

Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR), where permitted under UK electronic marketing rules (soft opt-in).

You may opt out at any time by:

• Clicking the unsubscribe link in emails
• Contacting [email protected]

We do not sell your personal data.

6. Cookies and Tracking

We use Cookiebot to manage cookie consent.

We use:

• Strictly necessary cookies
• Preference cookies
• Analytics cookies
• Marketing cookies

Strictly necessary cookies are set automatically.

All analytics and marketing cookies are set only where you have provided consent. You can change or withdraw consent at any time via our cookie settings link. For a full list of the cookies we use, see our How we use cookies page.

7. Website Analytics (Google Analytics 4)

We use Google Analytics 4 (GA4) to understand how visitors interact with our website and improve performance.

GA4 collects information such as:

• Pages viewed
• Time spent on pages
• Device type
• Approximate location (based on IP address)
• Interactions such as clicks and form engagement

IP addresses are processed for geolocation and are not stored in readable format by us.

Analytics cookies are only set where you have provided consent.

Google may process data outside the UK. Appropriate safeguards are in place (see International Data Transfers).

You can opt out of Google Analytics by adjusting your cookie preferences.

8. Behaviour Analytics (Microsoft Clarity)

We use Microsoft Clarity to analyse behavioural patterns such as scrolling, clicks and session recordings to improve website usability.

Clarity data is collected only where analytics cookies have been consented to.

We mask form fields and do not use Clarity to identify individual visitors.

9. Advertising & Remarketing

We use advertising platforms including:

• Google Ads
• Meta (Facebook & Instagram)
• TikTok
• Pinterest
• YouTube
• Microsoft Ads

These platforms may use cookies or similar technologies to:

• Measure advertising performance
• Deliver relevant advertising
• Track conversions

Marketing cookies are only set with your consent.

10. Automated Processing & Profiling

We use limited automated processing to:

• Deliver relevant advertising
• Segment marketing communications
• Analyse website behaviour
• Improve user experience

This processing does not produce legal or similarly significant effects.

You may object to profiling for marketing purposes at any time.

11. Service Providers

We use trusted third-party providers including:

• WP Engine – website hosting
• WordPress – website platform
• Klaviyo – email marketing
• KBBC Connect – CRM system
• Google – Analytics & Ads
• Meta – advertising
• TikTok – advertising
• Pinterest – advertising
• Microsoft Ads – advertising
• Microsoft Clarity – analytics
• Clicky Media Ltd – marketing agency
• Zapier – workflow automation
• Omnicapital Retail Finance (Omni) – finance applications, handled under its own terms and privacy notice

These providers process personal data under contractual safeguards.

12. International Data Transfers

Some service providers process data outside the United Kingdom.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place. These may include:

• UK adequacy regulations
• The UK International Data Transfer Agreement (IDTA)
• The UK Addendum to EU Standard Contractual Clauses
• The UK Extension to the EU-U.S. Data Privacy Framework
• The UK-U.S. Data Bridge

We take reasonable steps to ensure transferred data is protected.

13. Data Retention

We retain personal data only as long as necessary.

Typical retention periods:

• Enquiries: up to 1 year after resolution
• Marketing records: until you unsubscribe
• Contractual information: up to 10 years
• Guarantee records: up to 15 years
• Financial records: 7 years (legal requirement)

Where we rely on consent, we retain a record of that consent.

14. Data Security

We implement appropriate technical and organisational measures including:

• Secure hosting via WP Engine
• SSL encryption
• Restricted staff access
• Role-based permissions
• Secure CRM and marketing platforms

15. Your Rights

Under UK GDPR you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Withdraw consent
• Data portability

To exercise any of these rights, email [email protected]. We will respond within one month.

If you are unhappy with how we have handled your data, please contact us first at [email protected] and we will acknowledge your complaint within 30 days. You also have the right to complain to the Information Commissioner’s Office at https://ico.org.uk.

16. Children

Our website is not intended for children and we do not knowingly collect personal data from children.

17. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website.