Privacy Policy
Privacy Policy
Last updated: 26 July 2025
Online Sofa World is a trading name of Online Sofa World Ltd (“we”, “us”, “our”).
Registered address: Unit B2, Express Business Park, Miller St, Birmingham B6 4NH, United Kingdom
Phone: +44 7 453 41 41 90
Email: contact@onlinesofaworld.co.uk
We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit https://onlinesofaworld.co.uk (the “Website”), make a purchase, or interact with us.
1) Who is the data controller?
Online Sofa World Ltd
Unit B2, Express Business Park, Miller St, Birmingham B6 4NH, United Kingdom
Tel: +44 7 453 41 41 90
Email: contact@onlinesofaworld.co.uk
2) What personal data we collect
We may collect and process the following categories of data:
Identity & Contact Data – name, email address, phone number, billing and delivery addresses.
Order & Payment Data – order details, payment method details made visible to us by the processor (e.g. last 4 digits; we do not store full card numbers), transaction IDs.
Account Data – username, hashed password, saved addresses, preferences.
Marketing & Communications Data – your marketing preferences, opt-in/opt-out records.
Technical & Usage Data – IP address, device and browser type, login data, time zone, cookie identifiers, pages visited, cart events, referral URLs.
Support Data – messages you send to us (email, contact form, live chat), plus photos/videos submitted for returns, delivery issues or warranty claims.
Gift Recipient Data – name and delivery address of a recipient if you ship to someone else (used only to fulfil the order).
We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.
3) How we collect your data
- Directly from you – when you place an order, create an account, contact us, or subscribe to marketing.
- Automatically – via cookies, pixels, tags and similar technologies when you browse the Website.
- From third parties – payment processors, couriers, analytics, anti-fraud and advertising platforms that help us operate the service.
4) Why we process your data & lawful bases (UK GDPR)
| Purpose | Examples | Lawful basis |
|---|---|---|
| Process and deliver your order | Take payment, arrange delivery, send order/dispatch emails | Contract |
| Customer service & after-sales | Returns, refunds, warranty/replacement, delivery issues | Contract / Legitimate interests |
| Account creation & management | Secure login, saved addresses, order history | Contract / Legitimate interests |
| Marketing communications | Newsletters, product launches, offers | Consent (you can withdraw at any time) |
| Analytics & site improvement | Measuring traffic, conversion, fixing errors | Legitimate interests |
| Fraud prevention & security | IP logging, risk checks, abuse prevention | Legitimate interests / Legal obligation |
| Legal compliance & record-keeping | Tax, accounting, consumer protection | Legal obligation |
Where we rely on consent, you can withdraw it at any time by using the unsubscribe link in emails or contacting us.
5) Cookies & similar technologies
We use cookies to:
- keep your cart and session working;
- enable secure checkout and fraud prevention;
- measure website performance and improve user experience;
- personalise marketing where you have consented.
You can manage cookies in your browser or through our cookie banner. Some cookies are essential; blocking them may affect site functionality.
Typical tools we may use (only if implemented on the site): Google Analytics 4, Google Ads/remarketing tags, Meta Pixel, email marketing platforms (e.g. Klaviyo/Mailchimp), payment gateways (e.g. Stripe, PayPal).
6) Do we share your data?
We do not sell your personal data.
We may share your data with:
- Service providers/processors who help us deliver the service (website hosting, payment processors, couriers, email/SMS platforms, analytics, customer support tools);
- Professional advisers (lawyers, accountants, auditors);
- Public authorities where required by law, court order or to defend legal claims;
- Business transferees if we undergo a merger, acquisition or sale. Any new controller will be bound by terms no less protective than this policy.
All processors are contractually required to keep your data confidential and process it only under our instructions.
7) International transfers
Some of our service providers may be based outside the UK/EEA. Where data is transferred internationally, we use appropriate safeguards such as:
- the UK Addendum to the EU Standard Contractual Clauses (SCCs);
- the UK International Data Transfer Agreement (IDTA);
- or an adequacy decision (where available).
8) How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this policy:
- Orders and invoices: up to 6 years to meet accounting/tax/legal obligations.
- Customer accounts: until you close your account or request erasure.
- Marketing data: until you unsubscribe or withdraw consent.
- Support/warranty records: typically up to 6 years after resolution.
We may retain minimal data where necessary to establish, exercise or defend legal claims.
9) Your rights (UK GDPR)
You have the following rights, subject to conditions and exemptions in law:
- Right of access (to know what we hold about you)
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object to processing based on legitimate interests or direct marketing
- Right to withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, email contact@onlinesofaworld.co.uk with your name, email and request.
You also have the right to complain to the UK regulator:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
10) Security
We use appropriate technical and organisational measures to protect your personal data, including:
- SSL/TLS encryption on the Website;
- access controls and limited staff access;
- hashed passwords for customer accounts;
- secure, PCI DSS–compliant payment processors.
No online service can guarantee 100% security, but we work to reduce risks to a commercially reasonable level.
11) Third-party links
Our Website may contain links to third-party websites or services. We are not responsible for their privacy practices or content. Please review their privacy policies before submitting personal data to them.
12) Testimonials & reviews
If you submit a review or testimonial, we may display it on our Website or marketing materials, typically using only your first name/initial and town (where provided). If you want it removed, contact contact@onlinesofaworld.co.uk.
13) Changes to this policy
We may update this Privacy Policy from time to time to reflect legal, technical or business changes. The “Last updated” date at the top shows the latest version. If we make material changes, we will notify you on the Website or by email.
14) Contact us
Online Sofa World Ltd
Unit B2, Express Business Park, Miller St, Birmingham B6 4NH, United Kingdom
Phone: +44 7 453 41 41 90
Email: contact@onlinesofaworld.co.uk