Privacy Policy
Last Updated: Friday 6th June 2026
At Concept Living Limited, we are committed to protecting your privacy and handling your personal data with transparency, care, and integrity. This Privacy Policy explains how and why we collect, use, and safeguard your personal data, and outlines your rights under UK GDPR and the Data Protection Act 2018.
1. Who We Are
Concept Living Limited is the data controller and processor of your personal data. Registered Office: The Paddocks, Bethesda Street, Upper Basildon, Reading, Berkshire, RG8 8NU, United Kingdom Company Number: 05566209
2. What Personal Data We Collect
Depending on how you interact with us — in-store, online, or via marketing — we may collect and process the following types of personal data:
- Contact Information: Your name, email address, and phone number.
- Purchase and Transaction Details: Items purchased, purchase amount, method of payment (note: we do not store card details), billing and delivery addresses, order notes or preferences, and purchase history.
- Customer Service Interactions: Any correspondence, queries, or complaints made in-store, by phone, or online.
- Account Information: Login details and account preferences.
- Marketing and Communication Preferences: Your preferences regarding receiving promotional emails, SMS, or postal marketing.
- In-store Event or Appointment Bookings: Information you provide when booking personal consultations, events, or styling services, including any relevant preferences or accessibility needs.
- Technical and Device Data (when using our website): IP address, browser type, time zone settings, device type, and website usage information collected through cookies and similar technologies.
If you engage with us on behalf of a business, we may collect your company name, business address, job title or role, email, phone number, and details related to business enquiries or contract discussions.
We only collect the information necessary to provide our services, improve your experience, and meet our legal obligations.
3. How We Use Your Information and Our Legal Basis
We use your personal data only when the law allows us to. The purposes and legal bases for processing include:
| Purpose | Lawful Basis |
|---|---|
Processing orders and delivering products or services | Performance of a contract |
Handling customer service enquiries and support | Performance of a contract or legitimate interests |
Sending service-related communications (e.g. order updates, policy changes) | Legal obligation or performance of a contract |
Sending marketing communications via email, SMS, or post (where consent has been given) | Consent |
Managing marketing preferences and opt-out requests | Legal obligation |
Improving our website, services, and customer experience | Legitimate interests |
Meeting legal or regulatory obligations (e.g. tax or financial compliance) | Legal obligation |
If you give your consent, we may send you promotional communications via email, SMS, or post about our products, offers, events, and services. You can update your preferences or withdraw consent at any time by:
- Clicking the unsubscribe link in our emails
- Replying STOP to an SMS
- Contacting us directly using the details in the Contact Us section below
We will always respect your communication preferences and ensure any direct marketing complies with applicable laws.
4. Your Rights Under GDPR
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request erasure of your data (“right to be forgotten”)
- Restrict or object to certain types of processing
- Data portability – request to transfer your data to another service
- Withdraw consent where processing is based on consent
- Lodge a complaint with a supervisory authority
To exercise any of these rights, please contact us at [Insert email]. In the UK, the supervisory authority is the Information Commissioner’s Office (ICO).
5. How Long We Keep Your Data
We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including to comply with legal, accounting, or reporting obligations.
6. How We Share Your Data
We do not sell your personal data. However, we may share it with trusted third parties where necessary to operate our business or provide services to you. These third parties may include:
- IT and hosting service providers
- Email and CRM platforms
- Marketing agencies and consultants who assist us in managing our marketing activities
- Analytics or website service providers (e.g. for performance and usage analysis)
We also operate as an independent franchisee of BoConcept A/S. In some cases, your personal data may be accessed by BoConcept A/S solely for the purpose of supporting our service delivery or business operations. In these instances, BoConcept A/S acts as a data processor on our behalf and is contractually required to process your data in accordance with applicable data protection laws.
In all cases, such partners are bound by strict data processing agreements and are only permitted to process your data in line with our instructions and applicable data protection laws.
7. International Data Transfers
Your personal data is processed and stored within the UK and European Economic Area (EEA). We do not transfer your personal data outside these regions.
8. Cookies
We use cookies to enhance your experience on our website and gather anonymous usage statistics. Essential cookies are required for the website to function and cannot be disabled. Optional cookies (e.g. for analytics or marketing) are only used with your consent. You can manage cookie preferences via our cookie banner or your browser settings. For more details, please refer to our Cookie Policy.
9. Data Security
We are committed to keeping your data safe. Your personal data is stored securely using robust administrative, technical, and physical safeguards designed to protect against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:
- Secure servers and encrypted data storage
- Access controls and user authentication
- Regular system monitoring and updates
- Staff training in data protection principles
We regularly review and improve our security practices to ensure your data is handled with the highest level of care and confidentiality. While no system can ever be 100% secure, we take every reasonable step to ensure that your personal data is protected and treated with the utmost respect.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make significant changes, we’ll notify you via email or on our website. Please review this policy periodically to stay informed.
Contact Us
If you have questions about this policy or your personal data, contact: Concept Living Ltd, Unit 9, Stirling Industrial Estate, Dagenham, RM10 8TX