ØRN

Legal

GDPR Policy

ØRN Furniture (ØRN International) is committed to protecting the rights and freedoms of individuals with respect to the processing of their personal data. This policy explains how we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy may be updated from time to time to reflect changes in our operations or in the law. Please refer back to it regularly to review any amendments.

Who we are

ØRN International (trading as ØRN Furniture) is the data controller responsible for your personal data. We are a UK manufacturer of tables and seating for commercial workspaces. Our registered address is Unit A, Tingewick Road Industrial Park, Buckingham, MK18 1SU.

For any questions about this policy or how we handle your data, contact us at [email protected].

The principles we follow

Under the UK GDPR, we ensure that all personal data we process is:

  • Processed lawfully, fairly and in a transparent manner.
  • Collected for specified, explicit and legitimate purposes and not processed further in a manner incompatible with those purposes.
  • Adequate, relevant and limited to what is necessary for the purposes for which it is processed.
  • Accurate and, where necessary, kept up to date.
  • Kept in a form that permits identification for no longer than is necessary.
  • Processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage.

Lawful basis for processing

We only process your personal data where we have a lawful basis to do so. Depending on the circumstances, this may include:

  • Consent, where you have given clear consent for us to process your data for a specific purpose (for example, to send you marketing communications).
  • Contract, where processing is necessary to fulfil a contract with you, or to take steps at your request before entering into a contract.
  • Legal obligation, where processing is necessary to comply with the law.
  • Legitimate interests, where processing is necessary for our legitimate business interests and your rights do not override those interests.

What data we collect

We may collect and process the following categories of personal data:

  • Contact details such as your name, email address, postal address and telephone number.
  • Business details such as your company name, job title and account information.
  • Order and enquiry information, including the products and services you request.
  • Technical data such as IP address and browsing behaviour collected via cookies.

Your rights under the UK GDPR

You have the following rights in relation to your personal data:

  • The right to be informed about how your data is collected and used.
  • The right of access, you can request a copy of the personal data we hold about you.
  • The right to rectification of inaccurate or incomplete data.
  • The right to erasure (the “right to be forgotten”) in certain circumstances.
  • The right to restrict processing of your data in certain circumstances.
  • The right to data portability, to receive your data in a structured, commonly used format.
  • The right to object to processing based on legitimate interests or for direct marketing.
  • Rights relating to automated decision-making and profiling.

To exercise any of these rights, please email [email protected]. We will respond to all legitimate requests within one month.

How long we keep your data

We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting or reporting requirements. When your data is no longer required, we securely delete or anonymise it.

Data security

We have put in place appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. We limit access to your data to those employees, agents and third parties who have a business need to know, and they are subject to a duty of confidentiality.

Sharing your data

ØRN International will not sell or rent your personal data. We may share it with third-party service providers who process data on our behalf (for example, IT, delivery and payment providers), and only for the purposes set out in this policy. Where we do so, we require them to respect the security of your data and to treat it in accordance with the law.

Complaints

If you have any concerns about how we handle your personal data, please contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the UK’s supervisory authority for data protection, the Information Commissioner’s Office (ICO), at ico.org.uk.

Contact us

Please email any questions, concerns or comments about this GDPR Policy to [email protected], or by post to:

ØRN International, Unit A, Tingewick Road Industrial Park, Buckingham, MK18 1SU

Stay in touch

Subscribe to our e-newsletter

New ranges, finishes and project stories, straight to your inbox. By subscribing you agree to opt in to our newsletter.