Privacy Policy
This website is operated by Roomset Limited, a company registered in England & Wales (company number 17364274), registered office 20 Laurel Way, London N20 8HZ, United Kingdom. In this policy, "we", "us" and "our" refer to Roomset Limited.
This policy explains what personal data we collect through this website, why we collect it, how long we keep it and what rights you have. It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1. Who is the data controller
The data controller for personal data collected through this website is:
- Roomset Limited
- Registered in England & Wales, company number 17364274
- Registered office: 20 Laurel Way, London N20 8HZ, United Kingdom
We have not appointed a Data Protection Officer, as we are not required to under Article 37 UK GDPR. Data protection matters are handled directly by the company's directors.
2. How to contact us about your data
For any question about this policy, or to exercise any of the rights in section 8, contact us by email at [email protected], by telephone on +44 7828 783 463, or by post at the registered office above. Please mark postal correspondence "Data protection".
3. What personal data we collect
| Source | Data collected |
|---|---|
| Enquiry form on this website | Your name, email address, the services you tick, and the content of your message |
| Email or telephone contact | Your name, email address, telephone number and anything else you choose to tell us |
| Prospective and current clients | Business contact details, correspondence, project documentation, and billing details where an engagement proceeds |
| Web server logs (our hosting provider) | IP address, browser user-agent, requested URL, date and time — created automatically to serve the page and protect against abuse |
| Local storage on your device | A single preference value recording your cookie choice. See the Cookie Policy. |
We do not knowingly collect data from anyone under 16, and we do not collect special-category data (health, ethnicity, political opinions and similar) through this website. Please do not include such information in an enquiry.
4. Why we process it, and our lawful basis
| Purpose | Lawful basis (Article 6 UK GDPR) |
|---|---|
| Replying to your enquiry and preparing a quotation | Legitimate interests (Art. 6(1)(f)) — responding to someone who has contacted us about our services; and, where an engagement is in prospect, steps taken at your request prior to entering a contract (Art. 6(1)(b)) |
| Delivering an agreed project and supporting it afterwards | Performance of a contract (Art. 6(1)(b)) |
| Issuing invoices and keeping accounting records | Legal obligation (Art. 6(1)(c)) — UK tax and company law |
| Keeping this website available and secure (server logs) | Legitimate interests (Art. 6(1)(f)) — operating and protecting the site |
| Any optional analytics we may introduce in future | Consent (Art. 6(1)(a)), collected through the cookie banner before any such tag loads |
We do not use your data for automated decision-making or profiling. We do not send marketing email to enquirers unless they have separately asked us to.
5. How long we keep it
- Enquiries that do not become projects — 24 months from the last contact, then deleted.
- Client project records and correspondence — 6 years from the end of the engagement, in line with the limitation period for contract claims in England & Wales.
- Invoices and accounting records — 6 years after the end of the accounting period, as required by UK tax law.
- Web server logs — retained by our hosting provider for a rolling period of up to 90 days.
- Cookie preference — stored on your own device until you clear your browser storage.
6. Who else sees your data
We do not sell your personal data, and we do not share it for anyone else's marketing. We use a small number of service providers who process data on our behalf under written terms:
- Website hosting — our hosting provider stores the site files and generates the server logs described above.
- Business email — our email provider stores correspondence sent to and from [email protected].
- Accounting software — used to raise invoices and keep statutory records where an engagement proceeds.
- Content delivery networks — this website loads its animation library from cdnjs (Cloudflare) and its typefaces from Fontshare (Indian Type Foundry). These providers receive your IP address and browser user-agent as a technical necessity of delivering the file. They set no cookies for this purpose.
We may also disclose data where we are legally required to — for example to HMRC, a regulator, or a court order.
7. Transfers outside the UK
The content delivery networks named above operate global infrastructure, so a request from your browser may be served from outside the United Kingdom. Where personal data (an IP address, in this case) is transferred outside the UK, it is protected either by UK adequacy regulations or by the International Data Transfer Addendum to the EU Standard Contractual Clauses. Our hosting, email and accounting providers store data within the UK or the European Economic Area.
8. Your rights
Under the UK GDPR you have the right to:
- Access — obtain a copy of the personal data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — have your data deleted, where we have no overriding lawful reason to keep it.
- Restriction — ask us to pause processing while a concern is resolved.
- Portability — receive data you gave us in a structured, machine-readable format.
- Objection — object to processing we carry out under legitimate interests.
- Withdraw consent — where processing relies on consent, withdraw it at any time. For cookies, use the "Decline" option in the banner, or clear this site's storage in your browser; withdrawing consent does not affect processing carried out before you withdrew it.
How to exercise a right
Email [email protected] and tell us what you would like us to do. We may ask a question or two to confirm your identity. We will respond within one month of receiving your request, as required by Article 12(3) UK GDPR. There is no charge, unless a request is manifestly unfounded or excessive.
9. Complaints
If you are unhappy with how we have handled your personal data, please tell us first — we would like the chance to put it right. You also have the right to complain to the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 · www.ico.org.uk
10. Security
This website is served over HTTPS. Access to enquiry data is limited to the people in the company who need it to reply to you, protected by individual accounts and multi-factor authentication. No method of transmission over the internet is completely secure, so please do not send passwords, payment card details or credentials through the enquiry form.
11. Changes to this policy
If we change how we handle personal data, we will update this page and change the "last updated" date at the top. Material changes affecting existing clients will also be notified by email.