Who We Are

This Privacy Policy explains how [Company Legal Name] (“we,” “us,” or “our”) collects, uses, and protects your personal data when you visit our website (www.msl-commercial.furniture) and use our contact forms to request information, quotes, or consultations.

We act as the Data Controller for the personal information you provide. This means we are responsible for deciding how and why your data is processed, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our Contact Details:

  • Company Name: [Company Legal Name]
  • Company Registration Number: [Company Number]
  • Registered Office Address: [Registered Address]
  • Privacy Contact Email: info@msl-uk.com

If you have any questions about this policy or how we handle your data, please contact us at the email address provided above.

What Data We Collect

Because our website functions as a commercial catalogue and project enquiry platform rather than a transactional consumer webshop, we only collect personal data required to evaluate, specify, and coordinate contract furniture projects.

1. Information You Directly Provide When you submit a consultation request, complete a form, or contact our team directly, we collect:

  • Contact details: Full name, business email address, and direct telephone number.
  • Commercial details: Company or venue name, registered business address, and job title.
  • Project parameters: Floorplate dimensions, target seating capacity, preferred product collections, layout requirements, and any technical 2D or 3D architectural plans you submit.

2. Information Collected Automatically When you browse our website, our servers and standard analytics tools log technical operational data:

  • Device and connection data: IP address, browser type and version, operating system, and referring URL.
  • Usage metrics: Viewed collection pages, interaction with consultation forms, session duration, and navigation paths.

We do not collect special category data, nor do we process online consumer credit or debit card transactions on this website.

How & Why We Use Your Data (Lawful Basis)

Under the UK GDPR and EU GDPR, we must have a valid lawful basis to process your personal data. Because we operate exclusively as a commercial contract furniture consultancy, we process your information solely for legitimate business purposes connected directly to your enquiries.

1. Responding to Enquiries & Pre-Contractual Steps (Article 6(1)(b) GDPR)

  • Purpose: To assess project scope, produce commercial estimates, generate tailored 2D floorplans and 3D space visualisations, verify site delivery access, and provide technical furniture specifications.
  • Lawful basis: Processing is necessary to take specific steps at your request prior to entering into a commercial supply or fit-out contract.

2. Legitimate Business Interests (Article 6(1)(f) GDPR)

  • Purpose: To manage ongoing B2B communications, verify corporate entity details, safeguard our web infrastructure against fraudulent traffic, and maintain accurate operational records of professional enquiries.
  • Lawful basis: Processing is necessary for our legitimate interest in running an efficient, secure commercial enterprise, provided these interests are not overridden by your individual rights and freedoms.

3. Legal and Regulatory Obligations (Article 6(1)(c) GDPR)

  • Purpose: To retain business transaction correspondence and records where necessary to satisfy statutory tax, accounting, and corporate compliance obligations under UK and EU law.

We do not sell your personal data, conduct consumer credit scoring on this website, or use your submitted details for automated profiling or unrequested mass marketing newsletters.

Data Sharing & Third Parties

We do not sell, rent, trade, or commercially exploit your personal data. We only share information with vetted third-party service providers and commercial partners where strictly necessary to operate our website, handle enquiries, or coordinate contract projects.

1. Technical Service Providers (Data Processors) We work with external providers who process data solely on our behalf and under strict confidentiality agreements:

  • Hosting and IT Infrastructure: Secure UK- and EU-based hosting and email servers that store form submissions, project files, and commercial correspondence.
  • Analytics and Performance Tools: Google LLC (Google Analytics and Google Ads) to monitor site functionality, traffic trends, and enquiry conversions.

2. Supply Chain & Commercial Partners

  • Manufacturers and Logistics: If your enquiry progresses to an active supply contract, we share site delivery contacts with our logistics teams and European manufacturing partners (such as Pedrali or GandiaBlasco) solely to coordinate freight and on-site positioning.
  • Asset Finance Providers: If you choose to explore leasing structures, we introduce your enquiry to Bluestone Leasing or designated commercial finance brokers. We only pass your details to financial providers after discussing this directly with you and receiving your explicit confirmation—never automatically through website form submissions.

3. Statutory Disclosures We may disclose personal data if required to comply with UK or EU legal obligations, court orders, or enforceable requests from regulatory bodies.

Data Retention & Security

We retain your personal data only for as long as necessary to fulfil the commercial purposes outlined in this policy, maintain our professional relationship, or satisfy statutory legal, accounting, and tax reporting requirements.

1. Data Retention Periods

  • General Enquiries & Specifications: If an enquiry or design consultation does not lead to an order, we retain your contact details, correspondence, and submitted project plans for up to 24 months from the date of our last interaction. This allows our team to retrieve your initial layout parameters or quote revisions should you reactivate the project.
  • Commercial Supply & Fit-Out Contracts: Where an enquiry proceeds to an executed supply or turnkey fit-out agreement, transaction records, invoices, delivery notes, and contract documents are retained for 6 years following the end of the relevant financial year, in accordance with UK statutory accounting obligations.

2. Data Security Protocols We maintain appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure:

  • Transport Encryption: All data transmitted via our website contact forms is encrypted in transit using Transport Layer Security (TLS/SSL).
  • Access Control: Access to your commercial enquiries, floorplans, and contact information is strictly restricted to personnel who require it to manage your project, produce estimates, or coordinate deliveries.
  • Storage Protection: Our email and storage systems operate on secure, monitored servers protected by multi-factor authentication and enterprise-grade firewalls.

Your Rights Under GDPR / UK GDPR

Under current data protection legislation, you hold specific, enforceable rights regarding your personal information. As an individual representing a commercial entity, you may exercise these rights at any time without penalty or charge.

Your Fundamental Rights Include:

  • The Right to Access: You may request a formal copy of all personal data and B2B communication records we hold about you.
  • The Right to Rectification: You may instruct us to correct any inaccurate or incomplete personal or corporate details.
  • The Right to Erasure (“Right to be Forgotten”): You may request that we delete your contact details and B2B correspondence from our systems, provided there is no overriding statutory obligation (such as tax or commercial contract retention) requiring us to keep them.
  • The Right to Restrict Processing: You may ask us to suspend processing your data while an active dispute regarding its accuracy or lawful basis is resolved.
  • The Right to Object: You may formally object to our processing of your data based on legitimate B2B interests.

How to Exercise Your Rights: To exercise any of these rights, please email us directly at [Privacy Contact Email]. We aim to respond to all formal requests within one calendar month.

Right to Complain to a Supervisory Authority: If you believe we have processed your B2B data unlawfully or failed to uphold your rights, you retain the right to lodge a formal complaint with the Information Commissioner’s Office (ICO) in the UK (www.ico.org.uk) or the relevant supervisory authority in your EU member state.

Cookies & Tracking Technologies

Like most commercial websites, we use cookies and similar tracking technologies to ensure our platform functions securely and to understand how professionals interact with our content.

1. Essential (Strictly Necessary) Cookies These cookies are required for the website to function properly. They enable core features such as security, network management, and load balancing. Because our website cannot operate without them, they cannot be switched off in our systems.

2. Analytics & Performance Cookies We use Google Analytics to measure site performance, track the flow of commercial traffic, and identify which product collections are most relevant to our visitors. This data is aggregated and does not directly identify you as an individual.

3. Advertising & Conversion Cookies Because we run B2B campaigns, we use Google Ads tracking tags to measure the effectiveness of our marketing and ensure we are reaching professionals looking for contract furniture solutions.

Managing Your Preferences You can control, accept, or decline non-essential cookies (Analytics and Advertising) at any time through the cookie consent banner on our website, or by adjusting your browser settings.