- Your Basket is Empty
Looks like you haven’t added any rugs yet. Browse our collection and add your favourites to start building your perfect home.
- Unbeatable Lowest Price Promise
- 100% Secure Payment
- Fast Free Delivery to Mainland UK
Privacy Policy
Privacy Policy
Our Policy
This Privacy Policy explains how Express Rugs Ltd. (“Express Rugs”, “we”, “us”, “our”) collects, uses, shares and safeguards your personal data when you interact with us via our website, by telephone, email, in our showroom, or otherwise.
When you shop with expressrugs.co.uk, Express Rugs Ltd. (a company registered in England & Wales under company number 13523675, with registered office at W12-W13 Westpoint, Middlemore Lane West, Aldridge, Walsall, WS9 8DT) is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
We are committed to protecting your privacy, processing only the minimum personal data necessary for legitimate purposes, and handling that data lawfully, fairly and transparently.
1. What personal data we collect and why
We collect personal data directly from you when you place an order, create an account, contact us, or use specific features on our website. This includes:
- Identity and contact details: name, billing/delivery address, email address, telephone number(s).
- Order details: products purchased, payment method, delivery preferences.
- Payment details: credit/debit card or other payment information (processed securely by third-party providers; we do not have access to full card details).
- Communications data: records of your emails, calls or messages to us.
- Optional marketing data: if you subscribe to newsletters or stock alerts.
We use this information for:
- Processing and fulfilling your orders.
- Handling returns, refunds or warranty issues.
- Communicating with you about your order.
- Complying with legal and tax obligations.
- Improving our services, including fraud prevention and website functionality.
2. Lawful bases for processing
We process your personal data on the following bases:
- Contract: to process and deliver your order, respond to queries, and manage returns/refunds.
- Legal obligation: to keep financial/tax records.
- Legitimate interests: to prevent fraud, maintain network security, or improve services.
- Consent: where you opt in to marketing emails or stock notifications.
3. Sharing your personal data
We do not sell or trade your data. We only share it with trusted third parties where necessary for legitimate business purposes:
- Website hosting & technical support: our web developer/host has limited access to data for maintenance.
- Payment processors: Worldpay, Klarna and PayPal process your payments securely. We do not have access to your full payment details.
- Couriers & logistics partners: for delivery of your order, your name, address, email and phone number are provided.
- Professional advisers: accountants and auditors for statutory and compliance purposes.
Each third party is contractually bound to handle your data securely and in compliance with UK GDPR.
4. Data retention
We retain personal data only as long as necessary for the purposes described above:
- Orders and accounting records: up to 7 years (legal requirement).
- Customer service queries: up to 2 years.
- Marketing lists: until you withdraw consent.
After these periods, data is securely deleted or anonymised.
5. Security of your data
We use appropriate technical, contractual and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. This includes encryption of sensitive data, restricted access policies, and secure hosting arrangements.
6. Your rights under UK GDPR
You have the following rights regarding your personal data:
- Right to access (obtain a copy of your data).
- Right to rectification (correct inaccurate data).
- Right to erasure (“right to be forgotten”).
- Right to restrict processing.
- Right to data portability.
- Right to object to certain processing (e.g. direct marketing).
- Right to withdraw consent (where consent is the lawful basis).
To exercise any of these rights, please contact us at customerservices@expressrugs.co.uk. We will respond within one month in line with UK GDPR requirements.
7. Cookies
Our website uses cookies and similar technologies to improve user experience, enable website functionality, and analyse usage patterns. Cookies may store information such as your basket contents, preferences, or login session.
You can choose to accept or decline cookies via your browser settings. Please note that disabling cookies may limit website functionality.
8. Links to other websites
Our website may contain links to external sites. We do not control, and are not responsible for, the privacy practices of such sites. We recommend reviewing their privacy policies before providing personal data.
9. Updates to this Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and where material, communicated to you directly if we hold your contact details.
10. Contact Us
If you have any questions about this Privacy Policy, or wish to exercise your rights, please contact:
- 0121 516 1824
- sales@expressrugs.co.uk
-
Registered Address:
W12-W13 Westpoint, Middlemore Lane West, Aldridge, Walsall, WS9 8DT - Online Contact Form
If you are dissatisfied with our handling of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK regulator for data protection.
Contact Us
Got a question about this policy, your order, or anything else? We’re always happy to help. Drop us an email, send a secure message or give us a call on 0121 516 1824.
