Privacy Policy

Privacy Policy of Instadecor Ltd

Last update: 04/06/2025

We welcome you to our website and thank you for your interest in our company. Instadecor Ltd takes the protection of your personal data very seriously. We process your data in accordance with applicable UK data protection laws, including the UK General Data Protection Regulation (UK-GDPR), the Data Protection Act 2018, and other relevant regulations.

This privacy policy explains how we collect, use, and protect your personal data and informs you about your rights.

Controller and Data Protection Officer

Instadecor Ltd
B2/B3 Portland Close
Houghton Regis Dunstable
LU5 5AW

Website: https://thelechuza.co.uk
Phone: 0203 929 3489
Email: [email protected]
Data Protection Officer: [email protected]

What Personal Data We Collect

We may collect and process the following types of personal data:

• Name and contact information (e.g. email address, phone number)
• Delivery and billing address
• Payment details (handled securely via third-party providers)
• IP address, device type, browser information
• User activity data (e.g. pages visited, items added to cart, time spent on site)
• Communication preferences and interactions (e.g. emails opened)

How We Collect Data

We collect personal data when you:

• Place an order through our website
• Register for an account
• Subscribe to our newsletter or marketing communications
• Contact us via email or web forms
• Interact with our website (via cookies or analytics tools)

Your Rights as a Data Subject

Under the UK-GDPR, you have the following rights:

• Right to access (Art. 15 UK-GDPR)
• Right to rectification (Art. 16 UK-GDPR)
• Right to erasure (Art. 17 UK-GDPR)
• Right to restriction of processing (Art. 18 UK-GDPR)
• Right to data portability (Art. 20 UK-GDPR)
• Right to object (Art. 21 UK-GDPR)

If you are located in the EEA, your data is also protected under the EU General Data Protection Regulation (EU-GDPR).

To exercise any of your rights, please contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk.

Purposes and Legal Bases for Processing

We process your personal data on the following legal bases:

• To perform a contract or take steps before entering into a contract (Art. 6(1)(b) UK-GDPR)
• To comply with legal obligations (Art. 6(1)(c) UK-GDPR)
• Based on your consent (Art. 6(1)(a) UK-GDPR), e.g. for marketing or cookies
• For our legitimate interests (Art. 6(1)(f) UK-GDPR), provided these are not overridden by your rights

You may withdraw your consent at any time by contacting us or using opt-out mechanisms provided.

Data Sharing and Transfers

We may share your data with third parties:

• To fulfil orders and deliver services (e.g. payment processors, shipping companies)
• To comply with legal obligations
• Based on your explicit consent (e.g. marketing services)
• For analytics and advertising purposes under our legitimate interest

Some of our partners may be located outside the UK or EEA. Where applicable, we use appropriate safeguards such as Standard Contractual Clauses (SCCs).

We use services from:

• Google: Analytics, Ads, Tag Manager. Data may be transferred to the US. https://policies.google.com/privacy
• Meta (Facebook): Ads, Custom Audiences, Pixel. Data may be transferred to the US. https://www.facebook.com/about/privacy
• Microsoft (Bing Ads): Conversion tracking. Data may be transferred to the US. https://privacy.microsoft.com/
• Cloudflare: Security, CDN. Data may be transferred to the US. https://www.cloudflare.com/privacypolicy/
• AWIN: Affiliate tracking. Data may be transferred outside the UK/EEA. https://www.awin.com/gb/privacy
• Econda: User behaviour analytics. Data processed in the EEA. https://www.econda.de/en/privacy/

Data Security

We use technical and organisational measures to protect your data, including:

• Encrypted communications (HTTPS)
• Secure server infrastructure and data hosting
• Access controls and regular security assessments

Data Retention

We retain your data only as long as necessary for the purposes for which it was collected:

• Order and transaction data: up to 6 years (legal and tax obligations)
• Newsletter subscription data: until you unsubscribe
• Analytics data: up to 26 months

Use of Cookies and Analytics

We use cookies and similar technologies to improve functionality and personalise content:

• Essential cookies (for website operation)
• Analytics cookies (e.g. Google Analytics)
• Marketing cookies (e.g. Facebook Pixel)

Some cookies are set by third parties. You can manage preferences via the cookie banner or your browser settings. More details are available in our Cookie Policy.

Newsletter and Direct Marketing

You can subscribe to our newsletter by providing your email address. You may unsubscribe at any time via the link in the email or by contacting us.

We may send marketing communications based on our legitimate interest. You may opt out at any time via the unsubscribe link or by emailing [email protected].

Children’s Privacy

Our website and services are not intended for children under 16. We do not knowingly collect data from children without parental consent.

Social Media

We maintain profiles on social media platforms for communication and advertising. These platforms process your data under their own privacy policies. We encourage you to review their terms.

Contact Us

If you have any questions about this privacy policy or how we process your personal data, please contact our Data Protection Officer:
Email: [email protected]

We may update this policy periodically to reflect legal or operational changes. The most current version will always be available on our website.