Privacy Policy
Shyamaa Living Ltd | www.shyamaaliving.co.uk
Last Updated: May 2026
1. Introduction
Welcome to Shyamaa Living. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.
2. Important Information and Who We Are
Shyamaa Living Ltd is the data controller and is responsible for your personal data (referred to as "we", "us" or "our" in this policy).
If you have any questions about this privacy policy or our data protection practices, please contact us using the details below:
- Full name of legal entity: Shyamaa Living Ltd
- Email address: [email protected]
- Postal Address: 126 Caterham Avenue, Ilford, Essex, IG5 0QB, United Kingdom
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
3. The Data We Collect & Why We Process It
Personal data means any information about an individual from which that person can be identified. We collect, use, store, and transfer different kinds of personal data which we have grouped together as follows:
| Data Type | Purpose for Processing | Lawful Basis for Processing |
|---|---|---|
| Identity & Contact (Name, billing/delivery address, phone number, email) | To register you as a new customer, process and deliver your order, and manage payments, fees, and charges. | Performance of a contract with you. |
| Financial & Transaction (Order history, partial payment details) | To fulfil purchases, handle returns, prevent fraud, and maintain statutory tax/accounting records. | Performance of a contract with you; Necessary to comply with a legal obligation. |
| Bespoke Profile Data (Custom product specifications, dimensions) | To manufacture, quality-control, and deliver made-to-order furniture items. | Performance of a contract with you. |
| Technical & Usage (IP address, browser type, device details, website interaction) | To administer and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, and support). | Necessary for our legitimate interests (running our business, provision of administration and IT services, network security). |
| Marketing & Communications (Your preferences in receiving marketing from us) | To send you promotional communications, newsletters, and exclusive offers. | Explicit Consent (which can be withdrawn at any time). |
Note on Payment Security: We do not store or process your full credit/debit card details. All financial transactions are handled directly and securely by our third-party, PCI-DSS compliant payment processors.
4. How Your Personal Data is Shared
We do not sell your personal data. However, we do share your information with trusted third parties to ensure we can provide our services to you:
- Delivery Carriers & Logistics Providers — To deliver your furniture and send shipping updates.
- Manufacturers & Workshops — To produce and dispatch bespoke, made-to-order goods.
- Payment Processors — To securely process your payments and prevent fraudulent transactions.
- Professional Advisers & Technology Partners — Including IT support, cloud storage hosting, and website analytics providers.
- Legal Authorities — Where we are legally required to do so to comply with applicable laws, regulations, or court orders.
5. International Data Transfers
Some of our external third parties (such as cloud hosting providers or IT software providers) may be based outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
- We may use specific contracts approved for use in the UK (the International Data Transfer Agreement or Standard Contractual Clauses) which give personal data the same protection it has in the UK.
6. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
7. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
- Order & Financial Records: Retained for 7 years following the date of the transaction to comply with UK tax law (HMRC).
- Customer Service & Claims Records: Retained for 3 years after the resolution of the matter to handle potential structural warranty queries or legal claims.
- Marketing Data: Retained until you choose to withdraw your consent or unsubscribe.
8. Cookies
Our website uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.
We use essential cookies (required for the site to function, like keeping items in your shopping cart) and, with your permission, non-essential cookies for analytics and marketing. You can manage your preferences at any time via our Cookie Banner or by adjusting your browser settings.
9. Your Legal Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Request access to your personal data (commonly known as a "data subject access request").
- Request correction of the personal data that we hold about you.
- Request erasure of your personal data where there is no good reason for us continuing to process it.
- Object to processing of your personal data where we are relying on a legitimate interest.
- Request restriction of processing of your personal data.
- Request the transfer of your personal data to you or to a third party.
- Withdraw consent at any time where we are relying on consent to process your personal data (e.g., for marketing).
If you wish to exercise any of these rights, please email us at [email protected]. We aim to respond to all legitimate requests within one calendar month.