— Legal
Privacy policy
How OnlyFloors collects, uses and protects your personal data, and the rights you have over it under UK GDPR.
What we collect
Account details: name, email address and password (stored hashed, never in plain text).
Order details: delivery address, phone number, items ordered and order history.
Fitting enquiries: your postcode, room measurements, floor type and any notes you add.
Installer applications: business name, trade, coverage areas, insurance and reference confirmations.
Technical data: IP address and basic usage information needed to run and secure the site.
Why we use it
To take payment, fulfil and deliver your order, and provide customer support.
To match fitting enquiries to installers who cover your postcode. When you request a quote, we share your name, contact details, postcode and job description with the matched installers — that is the purpose of the service.
To send order and service emails. Marketing emails are only sent if you opt in, and every marketing email has an unsubscribe link.
Legal basis
Performance of a contract (orders and fitting introductions), legitimate interests (site security, fraud prevention, service improvement) and consent (marketing).
Who we share it with
Installers in our network, but only for enquiries you submit.
Suppliers and couriers, to deliver the goods you have ordered.
Our hosting, database and email providers, who process data on our instructions.
We never sell your personal data.
How long we keep it
Order records are kept for six years to meet UK tax and accounting requirements. Fitting enquiries are kept for two years. Account data is kept until you ask us to delete it.
Your rights
You can request a copy of your data, correct it, ask us to delete it, object to processing or withdraw marketing consent at any time.
Email hello@onlyfloors.co.uk and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office (ico.org.uk).