Privacy Notice
January 2025
At Cornish Gems Interiors, we are committed to protecting and respecting your privacy and safeguarding any personal data that you give to us. We are transparent about the processing of your personal data and this notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
We are a controller under the UK GDPR and the Data Protection Act 2018. Our data protection officer is Kristy Gouldsmith and she can be contacted at data.protection@cornishgems.com
We are:
Cornish Gems Interiors, part of Cornish Gems Limited of Carne House, Western Extension, Threemilestone Industrial Estate, Threemilestone, Truro, Cornwall. TR4 9LD.
What kind of personal data does Cornish Gems Interiors collect and process?
1. When you contact us
You can contact us via email, the phone or via the contact us section on our website. When you contact us, we will need the following in order to reply to you:
● name
● phone number
● message
We give you the choice of having a call or an email. We don’t record phone calls.
Providing your personal data to Cornish Gems Interiors is voluntary and our legal basis is consent.
2. Booking a design service
When you book a design service, we will send you a contract via an app called Quotient. You can accept or decline the contract via the app. If the contract is accepted, then we will take payment via a BACS transfer. Once you have made a booking for a design service, then we rely on the legal basis of contract -- the processing of personal data is necessary for your booking with us. All administrative communications with you regarding your booking are required because of your contract with us and you cannot opt out of them.
3. Marketing
You can subscribe to receive our email newsletters and you can opt-out at any time. Our legal basis is your consent.
If you made an enquiry or book our design services, we may contact you via email, telephone, text or post with information and offers relating to products or services similar to those about which you enquired or which you purchased. We will only do this if you have not opted-out of such marketing either at the point of collection of your details or by contacting us or by unsubscribing. Our legal basis is legitimate interest.
If you have started but not finished a booking or made an enquiry, we might contact you to invite you to continue with your booking. Our legal basis is legitimate interest.
We are part of Cornish Gems and will give you the opportunity to subscribe to the Cornish Gems newsletter as well. Our legal basis is your consent.
If you are a current Cornish Gems owner, then we will send you emails regarding Cornish Gems Interiors. Our legal basis is legitimate interest.
4. Surveys or Feedback
We may also ask you to complete a survey or give us feedback. You aren’t obliged to do either although we do appreciate it. You can give feedback and use your full name, first name, last name or remain completely anonymous. The choice is yours. Our legal basis here is your consent.
5. Site Data
We collect information about your computer, including your IP address, operating system and browser type, for system administration and for the security of our website.
We do not use cookies (except essential or necessary cookies) without your consent.
How does Cornish Gems Interiors share your data with third parties?
We share your personal data with third parties where required, including:
1. Suppliers for the design service: we will only the property address with a supplier.
2. We use service providers to support us in providing our services.
These include:
● Customer support
● Service providers
● Market research
● Insurers
● Legal and other advisors
● Marketing services
● Competent authorities: we disclose personal data to law enforcement to the extent that it is required by law or is strictly necessary for the prevention, detection or prosecution of criminal acts and fraud, or if we are otherwise legally obliged to do so. We may need to further disclose personal data to competent authorities to protect and defend our rights or properties, or the rights and properties of our clients.
All service providers are required to continue to adequately safeguard your personal data.
What security and retention procedures does Cornish Gems Interiors use?
We have procedures in place to prevent unauthorised access to, and the misuse of, personal data.
We use appropriate business systems and procedures to protect and safeguard the personal data you give us. We also use security procedures and technical and physical restrictions for accessing and using the personal data on our servers. Only authorised personnel are permitted to access personal data in the course of their work.
We keep financial data and account data for seven years. We keep you on our newsletter email list until you opt out or we see that you are no longer opening our emails. If you have been a client or made an enquiry, we keep your name and email for marketing purposes for five years. You can opt out at any time.
Does Cornish Gems Interiors transfer data out of the UK?
We endeavour to hold most of your data in the UK but we do have some service providers who are based outside of the UK. Several of these providers are based in countries that are adequate for data transfer; for countries that are not, we use the UK’s International Data Transfer Agreement as our data transfer safeguard. Quotient is based in New Zealand and New Zealand is an adequate country for data transfers.
What are your rights regarding your personal data?
You have the right:
● To access to your personal data and information about our processing of it. You also have the right to request a copy of your personal data (but we will need to remove information about other people).
● To rectify incorrect personal data that we are processing.
● To request that we erase your personal data if:
o we no longer need it;
o if we are processing your personal data by consent and you withdraw that consent;
o if we no longer have a legitimate ground to process your personal data; or
o we are processing your personal data unlawfully
● To object to our processing if it is by legitimate interest.
● To restrict our processing if it was by legitimate interest.
● To request that your personal data be transferred from us to another company if we were processing your data under a contract or with your consent and the processing is carried out by automated means.
If you want to exercise any of these rights, please contact us.
If you have a concern about the way we are collecting or using your personal data, please raise your concern with us in the first instance. You may also contact the Information Commissioner’s Office at https://ico.org.uk/concerns/.