Privacy Policy

1. Who we are

This site (dcfretail.co.uk) is operated by Saltash Limited, trading as DCF Carpets, Beds & Flooring. We are a UK-registered company and are the data controller for personal information collected through this site.

We are authorised and regulated by the Financial Conduct Authority (FRN: 814316) as a credit broker. Credit is provided by Mitsubishi HC Capital UK PLC.

If you need to contact us about how your data is handled, please use the contact details at the foot of this page.

2. Information we collect

When you use this website or engage our services, we may collect the following categories of personal information:

• Contact details — your name, postcode, phone number, and email address when you submit an enquiry, request a measure, or contact us for a quote.
• Enquiry content — the flooring type you're interested in, any message you include, and related preferences.
• Technical data — your IP address, browser type, device information, and basic site-usage telemetry necessary to operate the site and prevent abuse.
• Cookies — see our Cookie Policy for details.

If you later purchase from us or enter into a finance arrangement, additional information will be collected for contract fulfilment — we'll give you a separate notice at that point covering what's collected and why.

3. Why we collect it (legal basis)

Under UK GDPR, we must have a lawful basis for processing your data. Ours are:

• Consent — where you've explicitly opted in (for example, to receive marketing emails).
• Contract — where processing is needed to provide you with a quote, arrange a measure, supply goods, or fulfil an order.
• Legitimate interests — to respond to your enquiry, improve our website, prevent fraud, and keep records for our business.
• Legal obligation — to comply with tax, accounting, consumer credit, and FCA regulatory requirements.

4. Who we share it with

We do not sell your personal data. We may share it with:

• Our fitters and suppliers — only information strictly necessary to complete your order (e.g. delivery address).
• Our finance partner — Mitsubishi HC Capital UK PLC, where you apply for credit.
• IT and hosting providers — who help us operate this website (IONOS, and occasionally third-party services like Cloudflare).
• Professional advisers — accountants, lawyers, and auditors where required.
• Regulators and law enforcement — where we are legally required to disclose information.

Where any of these processors operate outside the UK, we put appropriate safeguards in place (such as Standard Contractual Clauses) as required by UK GDPR.

5. How long we keep it

We retain personal data only for as long as necessary for the purposes set out above:

• Enquiries that don't become orders — typically 12 months from your last contact, then deleted.
• Customer orders and finance records — typically 6 years after the end of the trading relationship (to comply with UK tax and FCA record-keeping rules).
• Website technical logs — typically 90 days for security and troubleshooting.

6. Your rights

Under UK GDPR, you have the right to:

• Ask for a copy of the personal data we hold about you (subject access request).
• Ask us to correct inaccurate data.
• Ask us to delete your data, where we no longer have a lawful reason to keep it.
• Ask us to restrict or stop certain types of processing.
• Object to processing based on legitimate interests (including profiling or direct marketing).
• Withdraw any consent you've previously given.
• Receive your data in a portable format where practical.

To exercise any of these rights, contact us using the details below. We'll respond within one month (as required by UK GDPR).

7. Security

We take reasonable technical and organisational measures to protect your data — including HTTPS encryption for all pages on this site, access controls for staff, and regular security reviews of our systems. No system is 100% secure, but we treat data protection seriously.

8. Complaints

If you believe we've mishandled your data, please contact us first so we can try to resolve the matter. If you remain dissatisfied, you have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it was last revised. For material changes we'll try to give you reasonable notice — for example, a banner on the site or an email.

10. Contact us

For any privacy-related questions or to exercise any of the rights above:

Saltash Limited (DCF Carpets, Beds & Flooring)
Contact page · 01743 667576