Privacy policy
Last updated: 14 October 2026
This policy explains what personal data ECOM HOUSING LTD collects when you browse ecomhousing.uk, order furniture, take a delivery or get in touch, why we use it, who we share it with and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The controller of your personal data is ECOM HOUSING LTD, trading as ECOM Housing, a company registered in England with company number 17501249.
- Registered address: 714 Whittlesey Road, March, England, PE15 0EW
- Email: [email protected]
- Phone: +44 7723 418956
- Website: ecomhousing.uk
We are a small online retailer and have not appointed a Data Protection Officer. Any privacy question can be sent to the email address above.
2. Data we collect
When you place an order
- Full name, email address and phone number.
- Delivery address, town or city and postcode.
- Delivery details you give us to plan a large-item delivery: floor number, whether there is a lift, parking and access notes, and unloading instructions entered in the order comment.
- The delivery day you choose and the time slot we agree with you.
- Order contents, prices, whether you ordered our assembly service, the order number and order history.
- The payment method you chose (for example card, Apple Pay, Google Pay, PayPal or Klarna) and payment status. Card numbers and other payment credentials are entered directly with our payment provider; we receive only a confirmation, a transaction reference and limited details such as the card type and last four digits.
At delivery and after it
- Confirmation of delivery from the courier, which may include the name of the person who accepted the goods and the time of delivery.
- Photos of damaged packaging or furniture that you or the delivery crew take on receipt, together with your description of the damage.
- Information about returns and refunds, including the reason for return and collection arrangements.
When you contact us
- Our contact button opens your own email app. We receive the email address you write from, your message, any attachments and our replies.
- Notes from phone calls about your order.
When you browse the site
- Standard technical data your browser sends to our web host and font provider: IP address, browser type, device and the pages requested, recorded in server logs.
- Your cart is held only in the memory of the open page. We do not store it in cookies, local storage or on a server, and it disappears when you close or reload the page.
3. Purposes and legal bases
We only use personal data where UK GDPR gives us a lawful basis:
| Purpose | Legal basis |
|---|---|
| Processing your order, taking payment through our provider, arranging delivery on your chosen day, assembly and order updates | Contract (Article 6(1)(b)) |
| Handling returns, cancellations within 14 days under the Consumer Contracts Regulations 2013, refunds and damage claims, including reviewing damage photos | Contract and legal obligation (Article 6(1)(b) and (c)) |
| Answering questions you send by email or phone | Legitimate interests in responding to customers, or steps before entering a contract (Article 6(1)(f) and (b)) |
| Keeping accounting and tax records | Legal obligation (Article 6(1)(c)) |
| Preventing fraud, securing the site and defending legal claims | Legitimate interests (Article 6(1)(f)) |
| Sending product news or offers by email, only if you ask to receive them | Consent (Article 6(1)(a)) |
Where we rely on legitimate interests we have weighed them against your rights and expectations. You can object at any time — see section 9.
We do not make decisions about you based solely on automated processing, and we do not sell your personal data.
4. Who we share data with
We share the minimum needed with these categories of recipients, who act on our instructions or as independent controllers where the law requires:
- Payment provider — processes your card, wallet, PayPal or Klarna payment and carries out fraud checks. Payment details go directly to the provider, which is responsible for them under its own privacy notice and card-industry security standards.
- Courier services and large-item carriers — receive your name, phone number, delivery address, chosen delivery day, floor and lift details and unloading instructions so they can deliver and contact you on the day.
- Assembly contractors — if you order assembly, receive your name, phone number, address, delivery day and the items to be assembled.
- IT and service providers — website hosting, email services and accounting software that store data on our behalf.
- Professional advisers — accountants, insurers and legal advisers where needed.
- Authorities — HMRC, the police or courts where we are legally required to disclose information.
5. International transfers
We aim to keep your data in the UK. Some of our providers, such as email and payment services, may process data in the European Economic Area, the United States or other countries. When data leaves the UK we make sure it is protected by UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or another safeguard recognised by UK law. You can ask us for details of the safeguard used.
6. How long we keep data
- Orders, invoices and payment records — 6 years from the end of the financial year in which the order was placed, as required for tax and accounting purposes.
- Delivery details (floor, lift, unloading instructions, delivery slot) — 12 months after delivery, then deleted or anonymised.
- Damage photos and claim records — until the claim is closed and for 2 years after that, in case of disputes.
- Email correspondence — up to 2 years after our last contact, or longer if it forms part of an order record.
- Marketing preferences — until you withdraw consent, after which we keep a suppression record so we don’t contact you again.
- Server logs — up to 90 days.
Where a legal claim is pending we may keep relevant data until it is resolved.
7. Security
The site is served over HTTPS. Access to order data is limited to people who need it to fulfil orders, protected by strong passwords and two-factor authentication where available. Couriers and assembly contractors receive only the details needed for their job. No system is completely secure, but if a breach is likely to put you at risk we will tell you and the ICO as the law requires.
8. Cookies and similar technologies
ecomhousing.uk does not use analytics, advertising or tracking cookies and does not use local or session storage. Your cart lives only in the memory of the open page.
The site loads the Raleway font from Google Fonts. To deliver the font your browser connects to Google’s servers, which receive your IP address and browser details. Google does not set cookies for this service.
Our payment provider may set strictly necessary cookies on its own payment pages to process your payment securely and prevent fraud. These are covered by the provider’s own cookie notice.
9. Your rights
Under UK GDPR you have the right to:
- Access — get a copy of the personal data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — ask us to delete your data where we no longer need it or have no lawful basis to keep it.
- Restriction — ask us to limit how we use your data, for example while a dispute about its accuracy is resolved.
- Data portability — receive data you gave us under contract or consent in a structured, machine-readable format, or have it sent to another organisation.
- Objection — object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent — where we rely on consent, withdraw it at any time (see section 10).
To use any of these rights, email [email protected]. We will reply within one month, free of charge, and may ask for information to confirm your identity. In complex cases we can extend this by up to two further months and will tell you why.
10. Withdrawing consent
If you have agreed to receive marketing emails, you can withdraw consent at any time by using the unsubscribe link in any email or by writing to [email protected]. Withdrawing consent does not affect processing carried out before you withdrew it, or processing we carry out on another legal basis, such as delivering an order you have placed.
11. Complaints
If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the UK supervisory authority, the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
12. Children
Our shop is intended for adults. You must be 18 or over to place an order. We do not knowingly collect personal data from children; if you believe a child has given us their data, contact us and we will delete it.
13. Changes to this policy
We may update this policy when our services, providers or the law change. The date at the top shows when it was last revised. If we make significant changes that affect how we use data you have already given us, we will tell you by email before they take effect.
14. Contact us
ECOM HOUSING LTD, 714 Whittlesey Road, March, England, PE15 0EW
Email: [email protected]
Phone: +44 7723 418956