Privacy Policy
Introduction
Luvanto – QA Flooring Solutions Limited (company number 07870268) is committed to respecting your privacy and protecting the personal data you share with us or that we collect about you.
This policy explains how we use and protect your personal data when you use our website or mobile app and tells you about your privacy rights and how the law protects you.
1 Who We Are
Luvanto is a brand of QA Flooring Solutions Limited, a company registered in England and Wales.
QA Flooring Solutions Limited is the data controller responsible for your personal data.
If you have any questions about this policy or our data protection practices, please contact us at:
- Email: [email protected]
- Telephone: 0151 495 3434
- Address: QA Flooring Solutions Ltd, 2 Hurricane Drive, Liverpool L24 8RL
We may collect, store and use the following categories of personal data depending on how you interact with us:
| How & What Personal Data We Collect | What We Do with It |
| Your full name, title, address, email address, phone number and date of birth (optional) when you register for an account. | Register your account, process and deliver orders, verify age, send account updates, and manage loyalty or promotion schemes. |
| Your email address when you sign up for newsletters or updates. | Send you information about new products, offers, and events. |
| Your full name, addresses, email, phone number, and payment details when you place an order. | Process your order and payment, deliver products, manage returns, refunds and customer service, and (unless you opt out) send related offers and updates by email or SMS. |
| Details of your previous orders, browsing activity, or wish list. | Analyse preferences and recommend relevant products, personalise content and advertising, and send you tailored marketing communications. |
| Your name, email address and any details you include when contacting us by web form, email, phone, post, WhatsApp, or social media. | Respond to your enquiry, comments, or requests. |
| Details you provide when entering a competition. | Manage the competition and (with consent) send you marketing information about our products and offers. |
| Technical data such as IP address, device type, browser type, screen resolution, and operating system. | Enable functionality (e.g. saving preferences), analyse site use, improve our website and communications, and display relevant ads on other websites or social media. |
We may also use aggregated, anonymised data (not personal data) to improve our website, marketing and product range.
3 Our Lawful Bases for Processing
We only process your personal data when allowed by law.
The lawful bases we rely on include:
| Purpose | Lawful Basis |
| Creating and maintaining your account | Contract (we need this to provide your account) |
| Processing and delivering orders, returns and refunds | Contract and legal obligation (e.g. fraud prevention) |
| Sending marketing communications (email/SMS) | Legitimate interests (keeping customers informed) or Consent (where required) |
| Displaying personalised adverts | Consent (via cookies) and legitimate interests (promoting products effectively) |
| Analysing browsing and purchase history | Legitimate interests (understanding and improving customer experience) |
| Dealing with comments, questions or complaints | Legitimate interests (providing good customer service) |
| Improving and securing our website/app | Legitimate interests and legal obligation (security and fraud prevention) |
| Loyalty schemes or promotions | Contract (to deliver these benefits) |
| Sending loyalty offers or exclusive events | Consent |
You can withdraw consent at any time by following the “unsubscribe” or “opt-out” link in our messages, or by contacting us.
4 Marketing and Cookies
When you make a purchase or register with us, we may send you marketing emails or SMS messages about similar products and promotions unless you choose to opt out.
We use cookies and similar tracking technologies (including those from third parties such as Google and Meta) to:
- Remember your preferences and improve site functionality
- Analyse website performance and visitor behaviour
- Deliver personalised advertising on other websites and platforms
You can manage or withdraw cookie consent at any time using our [Cookie Policy] and browser settings.
5 Children
Our website and app are not intended for children under the age of 15, and we do not knowingly collect data from them.
We may require age verification when you create an account.
6 Sharing of Personal Data
We do not sell your personal data.
However, we may share it with trusted third-party service providers who help us operate our business, including:
- Logistics and warehouse providers
- Couriers and delivery companies
- Payment processors
- Marketing and advertising partners (including Google, Meta, and Mailchimp)
- Website hosts, IT, and technical support providers
- Professional advisers (lawyers, auditors, insurers)
- Government or regulatory authorities (e.g., HMRC, if legally required)
All third parties are required to process your data securely and only in accordance with our instructions.
7 International Data Transfers
Some of our service providers (e.g., Google, Meta, Mailchimp) may process your personal data outside the UK and European Economic Area (EEA). When this happens, we ensure that appropriate safeguards are in place, such as:
- UK-approved Standard Contractual Clauses (SCCs), or
- Transfers to countries with an adequacy decision from the UK government.
These measures ensure your data continues to receive an equivalent level of protection.
8 Data Security
We have implemented appropriate security measures to prevent your personal data from being lost, misused, accessed without authorisation, or disclosed.
Access to your personal data is restricted to employees, agents, and contractors who need it to perform their duties, and they are bound by confidentiality obligations.
We maintain procedures to deal with any suspected data breach and will notify you and any relevant authority if legally required.
9 Data Retention
We only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including legal, accounting, or reporting requirements.
| Type of Data | Retention Period |
| Account details (while account active) | As long as you hold an account |
| Order and correspondence records | 7 years after last purchase or contact |
| Marketing subscription data | Until you unsubscribe or remain inactive for 12 months (then removed after 30 days) |
| Payment data | In accordance with PCI DSS standards |
| Enquiries or complaints | Until resolved and for a reasonable record-keeping period |
10 Your Legal Rights
Under UK data protection law, you have the right to:
- Request access to your personal data
- Request correction or updating of inaccurate data
- Request erasure (“right to be forgotten”)
- Object to processing based on legitimate interests
- Object to direct marketing
- Request restriction of processing
- Request transfer of your data to another provider (data portability)
- Withdraw consent (where processing relies on consent)
To exercise any of these rights, please contact us using the details above.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk, though we would appreciate the opportunity to resolve concerns directly first.
11 Automated Decision-Making and Profiling
We do not make automated decisions that have legal or similarly significant effects on you.
We may use profiling (such as analysing purchase and browsing data) to tailor our marketing and improve your experience, but this does not affect your rights or obligations.
12 Changes to This Policy
We may update this Privacy Policy from time to time to reflect how we process personal data or to comply with legal changes.
Please check this page periodically for the latest version.
Last updated: November 2025