Privacy Policy
Welcome to the Project Group UK Limited's privacy notice.
Project Group UK Limited respects your privacy and is committed to protecting your personal data.
This privacy notice will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from and including your accessing our online catalogue) when you phone or email us, whether as a customer or a supplier or otherwise, and tells you about your privacy rights and how the law protects you.
1. Overview
This Customer Privacy Notice (“Privacy Notice”) explains what types of personal information, also referred to as personal data, we collect about visitors to our website.
In this Privacy Notice the terms “Project Group,” “we”,” us”, and “our” refers to Project Group Ltd. and its affiliates and subsidiaries.
This Notice is intended to describe the broadest range of our information processing activities we carry out and to provide transparency regarding the personal data we process about visitors to our website. In addition, it is the intended purpose of this notice to demonstrate compliance with the UK GDPR, Data Protection Act 2018 and the General Data Protection Regulations.
2. Purpose
This purpose of this policy is to provide interested parties with information related to the personal data we process through our website, email and phone calls when making initial enquires. When processing data of a personal and sensitive nature, there is an obligation, set out in law, to inform the data subject of the processing.
3. Data Protection Framework.
Project Group Ltd, is the data controller for the personal data we process on our website and is responsible for the personal data of the website visitor (the “Data Subject”) processed in connection with your interest in our business. We have aligned this Privacy Notice with the Data Protection Act 2018 and for so long as it applies, the General Data Protection Regulations (GDPR), under the supervision of the ICO within the UK.
We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this Privacy Notice. If you have any questions about this Privacy Notice, please contact the DPO using the details set out below.
Project Group
Dalton House
17 Harrison Road
Halifax
HX1 2AF
T. 01422 322662
Data Protection Officer Details: Dave Draycott
Email address: privacy@project-group.co.uk
4. Third Parties
We do not collect or share any data from third parties prior to your visit to our website, completing a form, emailing or calling us.
Third parties who process your data when visiting our website, emailing or calling include suppliers who a) build, maintain and host the website; b) provide email services when you complete a contact form; c) telecommunications providers when you call us (inc. call recording); d) cookie providers; e) regulatory &compliance audit bodies. The processing is minimal and for a specified purpose.
We also work with various third parties to bring you a range of products and services which compliment ours.
When you make a purchase via a credit card, or a finance option, we do not collect or process any payment data from you. This option is outsourced and managed via a third party provider who will confirm if your transaction was successful. The data we receive is redacted data and does not include any payment data. Please review the privacy notices of your selected payment provider for further details.
To ensure we meet our compliance obligations we share your data with retail compliance experts for the purposes of conformance with regulatory obligations.
In the event of a legal dispute we will share your data with our legal counsel.
Third party data controllers processing your data if you take finance include:
· Product Partnership Limited for regulatory compliance and oversight of FCA regulations. Please their privacy notice for further details.
· Mitsubishi HC Capital UK PLC (Novuna Consumer Finance) provision of finance when you apply for credit. Please see their privacy notice for further details.
· Your chosen card payment provider when you pay by credit card.
5. This notice applies where you contact us via one of the following methods:
Completing forms on our websites including:-
· www.project-studio.co.uk
· www.projectinteriors.co.uk
· www.projectffe.com
· www.project-furniture.co.uk
· www.projectfr.co.uk
· www.project-group.co.uk
· www.theilacollection.com
· www.modaand.co
· www.parlourhome.co.uk
Phone numbers including:-
· 01422322662
· 0161383 6560 – ModaAndCo (inc. call recording)
· 0161383 6561 – ModaCassa (inc. call recording)
· Personal & company mobile numbers
Email us at any of the following addresses:-
· hello@project-studio.co.uk
· enquiries@projectinteriors.co.uk
· enquires@projectffe.com
· sales@project-furniture.co.uk
· hello@project-furniture.co.uk
· hello@ProjectFR.co.uk
· GeneralEnquiries@ProjectFR.co.uk
· sales@project-group.co.uk
· hello@modaco.co.uk
· hello@ila.co.uk
· hello@parlour.co.uk
6. Lawful basis for Processing Personal Data of customer enquiries.
We process data provided by you when you complete the contact form, email or call us and when placing an order.
We process the personal data of your initial enquiry based on the GDPR Article 6 (1) (a) “where the data subject has given consent to the processing of his or her personal data for one or more specific purposes”.
We will process personal data based on the GDPR Article 6 (1) (b) “ processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”; where we progress your enquiry through to processing an order.
We will process personal data based on the GDPR Article 6 (1) (c) “ processing is necessary for compliance with a legal obligation to which the controller is subject; where we need to provide your information to demonstrate compliance with a legal or regulatory obligation.
We will process personal data based on the GDPR Article 6 (1) (f) “processing is necessary for the purposes of the legitimate interests for the purpose of audit and compliance.
7. What is Personal Information?
Personal information, also known as personally identifiable information or personal data, for purposes of this Privacy Policy means any information that a) directly and clearly identifies an individual, or b) can be used in combination with other information to identify an individual.
8. What are Special Categories of Personal Information?
Sensitive personal information is a subset of personal information that may be more sensitive in nature for the individual concerned.
• Race and ethnic information
• Sexual orientation
• Political/religious beliefs
• Health or medical information
• Criminal records
We do not typically process any special category data and would only process such data if you volunteered it, and it was relevant to your enquiry.
9. What Personal Information Do We Collect?
Personal information we process where your interest relates to a corporate enquiry include:
• Your name
• Your employer
• The company address
• The company phone number
• Your company or personal mobile number
• Your corporate email address
Aspects of the data collected may not directly be considered personal data, however when combined with the other data you provide, we consider it all part of your personal data record.
Personal information we process where your interest relates to a personal enquiry include:
• Your name
• Your home address.
• Your personal phone or mobile number
• Your personal email address
• We do not typically process special category data and would only process such data if you volunteer it or there is a legal requirement to do so
• Your purchase payment type, finance arrangements and finance partner
10. How Do We Collect Data?
We collect personal information directly from you via the website forms, email, phone calls and call recordings.
11. How We Use the Personal Information We Collect
We use your personal information in order to:
• Respond to your enquiry
• Provide information requested by you
• Track your enquiry
• Process your orders
• Deliver your order
• Install your order
• Provide warranty information and services
• Manage complaints
• Liaise with third parties for services they are providing to you in relation to the purchase and refunds
• Demonstrate compliance with our legal & regulatory obligations
• Contact you for marketing purpose
• Help manage and improve our business processes
12. Sharing Personal Information
Your personal information may be shared with:
• Companies within the group
• Any company that acquires us
• Third party suppliers who build, maintain and host our websites
• IT & Technology service providers for storage and communications
• Cloud platform providers for processing customer enquiries and order processing.
• Finance providers you engage with for related purchases
• Delivery companies where applicable
• Regulatory oversight bodies
• Our insurance providers where necessary
• Our suppliers for warranty purposes
13. Access to Personal Information We Collect
You can ask to see the personal information that we hold about you. If you want to review, verify or correct your personal information, please submit a request.
When requesting access to your personal information, please note that we may request specific information from you to enable us to confirm your identity and right to access, as well as to search for and provide you with the personal information that we hold about you.
Your right to access the personal information that we hold about you is not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse to provide some or all of the personal information that we hold about you. In addition, the personal information may have been destroyed, erased or made anonymous. In the event that we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.
14. Correction of Collected Personal Information
We endeavour to ensure that personal information in our possession is accurate, current, and complete. If you believe that the personal information we hold is incorrect, incomplete, or outdated, you may request the revision or correction of that information. We reserve the right not to change any personal information we consider is accurate.
If it is determined that personal information is inaccurate, incomplete, or outdated, we will use reasonable efforts to revise it and, if necessary, use reasonable efforts to inform agents, service providers or other third parties, which were provided with inaccurate information, so records in their possession may be corrected or updated.
15. Retention of Collected Information
Except as otherwise permitted or required by applicable law or regulatory requirements, we will retain your personal information only for as long as we believe it is necessary to fulfil the purposes for which the personal information was collected (including, for the purpose of meeting any legal, accounting or other reporting requirements or obligations).
You may request that we delete the personal information about you that we hold. There are instances where applicable law or regulatory requirements allow or require us to refuse to delete this personal information. If we cannot delete your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.
Typical retention periods for the data in scope of this policy is up to 12 months for email and up to 12 months for phone messaging, from when communication is received. On certain occasions it may be necessary to keep your data for longer, for example to investigate complaints, lawsuits etc. however unless such a condition exists your data is deleted.
16. Requests to Access, Delete, Correction or Withdrawal of Consent
Please submit requests to access or delete to the Data Protection Officer. Any request by you to us to delete your personal information may not result in deletion of any information submitted by you to a third-party provider. If you require the third-party to delete any of your personal information, you must contact the third party directly to request such deletion.
Where we have requested your personal data to be processed on our behalf by a third party it is our obligation to inform that third party to comply with the request.
You have aright to withdraw consent if that was the legal basis relied on at the point of processing.
17. International transfers
Your personal data is exported outside the EEA to enable us to provide information, process your enquiry and process your orders. Where the personal data is exported, we will only do so where the is a legal basis to do so and appropriate safeguards have been established.
We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission (in the case of transfers out of the EEA) or the United Kingdom Government (in the case of transfers out of the United Kingdom);
and/or
where the transfer is to the U.S and the organisation is registered with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), and the UK Extension to the EU-U.S. Data Privacy Framework (UK Extension to the EU-U.S. DPF).
and/or
where we use certain service providers, we may use specific contracts approved by the European Commission (in the case of transfers out of the EEA)and/or the United Kingdom Government (in the case of transfers out of the United Kingdom), in both cases which give personal data the same protection it has within the EEA and/or United Kingdom as applicable.
18. Security of Collected Information
We are committed to protecting the security of the personal information collected, and we take reasonable physical, electronic, and administrative safeguards to help protect your data. For more information on safeguards please contact the Data Protection Officer.
19. Resolving Concerns
If you have questions or concerns regarding the handling of your personal information, please contact the Data Protection Officer. Alternatively, you may report concerns or complaints, including information about potential data breaches involving personal information to the Information Commissioners Office.
20. Changes to Privacy Policy
This Privacy Policy is reviewed periodically to ensure it accurately captures all types of data collected or any additional or different processing of such data. In addition, privacy laws are subject to change, we may, therefore, change this Privacy Policy at any time.
Issue Date: September 2025
