Compliance

UK GDPR Statement

Last updated: October 2026. This statement outlines our commitment to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Our Data Protection Principles

Euro Floors London Ltd strictly adheres to the core data protection principles set out under Article 5 of the UK GDPR:

1. Lawfulness, Fairness & Transparency: Processed legally and transparently with clear notice to you.
2. Purpose Limitation: Collected only for specified, explicit, and legitimate commercial flooring purposes.
3. Data Minimisation: Adequate, relevant, and limited strictly to what is necessary for quotations and installation.
4. Accuracy: Maintained accurately and kept up to date across our CRM and accounting records.
5. Storage Limitation: Kept in identifiable form no longer than necessary or legally mandated.
6. Integrity & Confidentiality: Protected with robust technical and organisational security measures.

2. Your Individual Rights Under UK GDPR

As a data subject in the United Kingdom, you have enforceable legal rights regarding your personal data:

Right of Access (Subject Access Request / SAR)

You have the right to request confirmation as to whether we process personal data relating to you, and to receive a full copy of all personal records held in our CRM, survey logs, and email history. Requests are fulfilled free of charge within 30 calendar days.

Right to Rectification

You have the right to request immediate correction of inaccurate or incomplete contact information, installation addresses, or billing records.

Right to Erasure ("Right to be Forgotten")

You can request the deletion of your personal records from our active in-house CRM where the data is no longer necessary for the initial project purpose. Note: Financial records, invoices, and bank transaction statements must be retained for 7 years to satisfy mandatory UK HMRC statutory requirements.

Right to Restrict or Object to Processing

You have the absolute right to object to any direct marketing or non-essential analytical processing at any time.

Right to Data Portability

You have the right to request your technical timber specifications, measurements, and project records in a standard, machine-readable digital format (CSV/JSON/PDF).

3. Security Architecture & Data Safeguards

Euro Floors London maintains strict operational and technical security standards:

  • Transport Security: All web transmissions are encrypted with TLS 1.3 / HTTPS managed through Cloudflare's global edge network.
  • Access Control: Access to our In-House CRM and Xero Accounting platform is restricted to vetted personnel on a least-privilege basis with two-factor authentication (2FA).
  • Payment Protection: We do not store raw credit/debit card numbers. In-store terminal payments are processed through certified PCI-DSS compliant payment gateways.
  • Edge Data Minimisation: Cloudflare Zaraz isolates client analytics, preventing third-party script injection into client browsing sessions.

4. How to Exercise Your Rights (SAR Procedure)

To submit a Subject Access Request, request data correction, or request erasure, please contact our Data Protection Team:

Email: office@eurofloorslondon.co.uk

Subject line: "UK GDPR Data Request - [Your Name]"

Postal Address: Data Protection Officer, Euro Floors London Ltd (Company No. 08794473), Unit 3, Kingston Business Centre, Fullers Way South, Chessington, KT9 1DQ, UK

Response Time: Standard requests are completed within 30 calendar days at zero charge.

5. Supervisory Authority

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your personal data has been handled improperly:

Information Commissioner's Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF | Tel: 0303 123 1113 | Website: ico.org.uk