Privacy Policy

PRIVACY POLICY

Deco Moore | Studio

Last updated: 26 July 2026

Deco Moore Studio Limited (“Deco Moore | Studio”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose and retain personal information when you visit www.decomoorestudio.co.uk, shop with us online or in our Chelsea showroom, create an account, contact us, sign up for marketing, or otherwise interact with our products and services (the “Services”).

Our online store is powered by Shopify. Shopify and other service providers may process personal information in order to operate the Services. This Policy should be read together with our Terms of Service, Return & Refund Policy, Shipping & Delivery Policy and the privacy choices made available through our cookie banner or privacy settings.

For the purposes of UK data protection law, Deco Moore Studio Limited is the data controller of the personal information described in this Policy, except where another organisation acts as an independent controller, as explained below.

1. WHO WE ARE AND HOW TO CONTACT US

Legal name: Deco Moore Studio Limited

Company registration number: 12428967 (registered in England and Wales)

Registered office: 94 Fulham Road, Chelsea, London, SW3 6HS, United Kingdom

Trading and correspondence address: 94–96 Fulham Road, Chelsea, London, SW3 6HS, United Kingdom

Email: info@decomoorestudio.co.uk

Telephone: +44 7551 029035

2. PERSONAL INFORMATION WE COLLECT

The information we collect depends on how you interact with us. It may include:

Identity and contact details, such as your name, title, email address, telephone number, billing address, delivery address and contact preferences.

Account details, such as your login credentials, account settings, saved addresses, wish lists and preferences.

Order and transaction details, such as products viewed or purchased, order history, returns, refunds, delivery information, invoices, payment status and correspondence about your order.

Payment information, such as payment method, billing details and limited payment-card information made available by our payment providers. Full card details are generally processed directly by authorised payment providers and are not stored by us.

Communications, such as enquiries, customer-service messages, telephone notes, product reviews, survey responses and any other information you choose to provide.

Device and technical information, such as IP address, browser type, device identifiers, operating system, network information and security or fraud-prevention signals.

Usage information, such as pages viewed, products searched for, items added to a basket or wish list, referring pages, interactions with emails and advertisements, and the date and time of activity.

Marketing and preference information, such as whether you have subscribed to communications, your interests and your cookie or advertising choices.

Showroom and delivery information, such as appointment details, collection arrangements, delivery access instructions and communications required to complete a purchase or service.

We do not intentionally collect special-category personal information (such as health, biometric, religious or political information). Please do not provide this type of information unless it is genuinely necessary. If we need to process special-category information, we will do so only where a valid legal basis and any additional legal condition apply.

3. HOW WE COLLECT PERSONAL INFORMATION

Directly from you, including when you place an order, create an account, visit our showroom, contact us, request a quote, submit a review, join our mailing list or exercise a privacy right.

Automatically from your browser or device through cookies, pixels, local storage and similar technologies, subject to your consent where required.

From Shopify and other service providers, including payment processors, delivery providers, fraud-prevention providers, analytics providers, marketing platforms and customer-support tools.

From business partners, social-media platforms or publicly available sources, where permitted by law and relevant to our relationship with you.

4. HOW WE USE YOUR INFORMATION AND OUR LAWFUL BASES

We process personal information only where we have a valid lawful basis. Depending on the activity, we rely on one or more of the following:

To provide and perform our contract with you. We use your information to create and manage your account, process and accept orders, take payment, arrange delivery or collection, provide order updates, handle returns and refunds, respond to service enquiries and otherwise supply the products or services you request. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.

To comply with legal obligations. We use and retain information where necessary to meet obligations relating to accounting, taxation, consumer protection, product safety, fraud prevention, legal claims, law-enforcement requests and data-protection rights. The lawful basis is compliance with a legal obligation.

For our legitimate interests. We use information where necessary to operate, administer, protect and improve our business and Services; understand customer use; prevent misuse and fraud; maintain network and information security; provide customer support; manage suppliers and professional advisers; maintain records; and establish, exercise or defend legal claims. We consider and balance our interests against your rights and do not rely on this basis where your interests or fundamental rights override ours.

With your consent. We rely on consent for non-essential cookies and similar technologies, certain personalised advertising activities, and electronic marketing where consent is required. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

For direct marketing where permitted by law. We may contact existing customers about similar products or services under the “soft opt-in” where the legal requirements are met and an easy opportunity to opt out is provided when details are collected and in every message. Otherwise, we seek consent where required. You can opt out at any time.

5. COOKIES, ANALYTICS AND ADVERTISING

We and our service providers use cookies and similar technologies to operate the website, remember choices, keep the Services secure, measure performance, understand use and, where you agree, personalise content or advertising.

Strictly necessary technologies are used because they are required for the website, checkout, security and core functions to operate.

Analytics, personalisation and advertising technologies are used only in accordance with applicable consent requirements.

You can accept, reject or adjust non-essential technologies through the cookie banner or privacy-preferences control available on our website. You can also manage cookies through your browser, although disabling necessary cookies may affect website functions.

Cookie choices are device- and browser-specific and may need to be set again if you clear cookies or use another device. Information about individual cookies, providers and durations is made available through our cookie settings or cookie banner.

6. MARKETING COMMUNICATIONS

We may send you news, product updates, invitations, offers and other marketing by email, text message or other electronic channels where permitted by law. You can stop marketing at any time by:

using the unsubscribe link in an email;

using any opt-out instructions in the relevant message;

changing your preferences in your account, where available; or

contacting us at info@decomoorestudio.co.uk.

Opting out of marketing does not prevent us from sending service messages needed to manage an order, account, delivery, return, payment, legal notice or customer-service request. We may keep a minimal suppression record so that we can respect your opt-out.

7. HOW WE SHARE PERSONAL INFORMATION

We may disclose personal information where necessary and proportionate to the following categories of recipients:

Shopify and its affiliates, which host and support our ecommerce Services and may provide enhanced commerce, analytics, fraud-prevention or advertising features.

Payment processors, banks and fraud-prevention providers, to authorise payments, prevent misuse and manage transactions.

Delivery, logistics, fulfilment, installation and collection providers, to deliver products or arrange services.

IT, hosting, cloud-storage, website, analytics, customer-support, communications and cybersecurity providers.

Marketing, advertising and social-media partners, where permitted by law and subject to your consent or opt-out rights where required.

Professional advisers, including accountants, auditors, insurers, legal advisers and consultants.

Public authorities, regulators, courts, law-enforcement bodies or other parties where disclosure is required by law or necessary to protect rights, safety or property.

A buyer, investor, lender or successor organisation in connection with a proposed or completed merger, financing, reorganisation, sale or transfer of all or part of our business, subject to appropriate safeguards.

We do not sell personal information for money. Certain uses of cookies, advertising services or Shopify enhanced services may be treated as “sharing”, “selling” or “targeted advertising” under some non-UK laws. Where those laws apply, we provide the required choice or opt-out mechanism.

8. RELATIONSHIP WITH SHOPIFY

Our online store is hosted by Shopify. Shopify processes personal information to provide, secure and improve the ecommerce platform and related services. Information submitted through the Services may be transmitted to Shopify and other service providers in countries outside your place of residence.

In some circumstances, including where Shopify provides enhanced services or Shopify Network Intelligence, Shopify may act as an independent controller for certain processing and is responsible for responding to requests relating to that processing. For more information, please review the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal to manage available Shopify privacy choices.

9. INTERNATIONAL TRANSFERS

Some of our service providers operate internationally, so your personal information may be transferred to, stored in or accessed from countries outside the United Kingdom or the country in which you live.

Where UK data-protection law requires a safeguard for an international transfer, we use an appropriate mechanism, such as:

a UK adequacy regulation;

the UK International Data Transfer Agreement or UK Addendum to the European Commission Standard Contractual Clauses;

another valid contractual or statutory transfer mechanism; and

additional technical, contractual or organisational safeguards where appropriate.

You may contact us for further information about the safeguards relevant to a particular transfer, subject to legal and confidentiality restrictions.

10. HOW LONG WE KEEP PERSONAL INFORMATION

We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, comply with legal duties, resolve disputes and enforce agreements. Our general approach is:

Order, invoice, payment, refund and accounting records are normally retained for six years after the end of the company financial year to which they relate, or longer where required by law, an audit, enquiry or dispute.

Customer-account information is kept while the account is active and for a reasonable period afterwards, unless earlier deletion is appropriate or longer retention is required.

Customer-service and enquiry records are generally kept for up to three years after the last meaningful interaction, unless they form part of a contract, complaint, warranty issue or legal claim requiring longer retention.

Marketing records are kept while you remain subscribed or while we have another lawful basis to contact you. A minimal suppression record may be retained after opt-out to ensure that your choice is respected.

Cookie, analytics and device information is retained according to the lifespan of the relevant cookie or the retention period applied by the relevant provider, as described through our cookie settings.

Privacy-rights requests, data-protection complaints and related correspondence may be kept for up to six years after closure where necessary to demonstrate compliance or manage legal claims.

We review retention where appropriate and securely delete or anonymise information that is no longer required. Retention periods may be extended where necessary for legal proceedings, regulatory enquiries, fraud prevention or preservation of evidence.

11. SECURITY

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, secure service providers, staff procedures, authentication, encryption in transit where appropriate, backups, monitoring and incident-response processes.

No system or transmission method can be guaranteed to be completely secure. Please keep your account credentials confidential, use a unique password and contact us promptly if you believe your account or personal information has been compromised. Do not send payment-card details or other highly sensitive information through unsecured email or messaging channels.

12. YOUR PRIVACY RIGHTS

Depending on the law that applies and subject to legal conditions and exceptions, you may have the right to:

request access to your personal information and receive a copy;

request correction of inaccurate or incomplete information;

request deletion of personal information;

request restriction of processing;

receive certain information in a structured, commonly used, machine-readable format and request its transfer to another controller;

object to processing based on legitimate interests;

object at any time to the use of your personal information for direct marketing;

withdraw consent at any time where processing is based on consent; and

complain about our handling of your personal information.

Your right to object to direct marketing is absolute. If you object, we will stop using your personal information for that purpose.

To exercise a right, contact us using the details in Section 1. We may ask for information reasonably necessary to verify your identity and clarify your request. We will respond within the period required by applicable law. Rights are not absolute, and we may refuse or limit a request where the law permits; if so, we will explain our decision and available complaint options.

Where Shopify independently controls the relevant processing, you may also need to submit your request through the Shopify Privacy Portal.

13. AUTOMATED PROCESSING AND FRAUD SCREENING

Shopify, payment providers and fraud-prevention services may use automated tools to assess transaction, account, device or behavioural information for security and fraud risk. This may lead to an order being held for review, a payment being declined or additional verification being requested.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on you unless permitted by law and accompanied by appropriate safeguards. You may contact us for information or to request human review where applicable.

14. CHILDREN'S INFORMATION

The Services are not directed at children under 16, and we do not knowingly collect personal information from children under 16. Anyone under 18 should use the Services only with the involvement of a parent or guardian. If you believe a child has provided personal information to us without appropriate authorisation, please contact us so that we can take appropriate action.

15. THIRD-PARTY WEBSITES AND SOCIAL MEDIA

The Services may link to websites, applications, social-media platforms or services operated by third parties. Those third parties control their own processing and privacy practices. We are not responsible for their content, security or privacy practices, and you should review their privacy information before providing personal information or using their services.

16. DATA-PROTECTION COMPLAINTS

You may make a data-protection complaint by emailing info@decomoorestudio.co.uk or writing to our trading and correspondence address. Please mark your message “Data Protection Complaint” and provide enough information for us to understand and investigate the issue.

We will:

provide a way for you to submit the complaint;

acknowledge receipt within 30 days;

take appropriate steps to investigate and respond without undue delay;

keep you informed where appropriate; and

tell you the outcome without undue delay.

We encourage you to contact us first so that we have an opportunity to resolve your concern. You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office (ICO)

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Telephone: 0303 123 1113

Website: ico.org.uk/make-a-complaint

If you live outside the United Kingdom, you may also have the right to complain to the data-protection authority in your country or region.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Policy to reflect changes to our Services, technology, legal requirements or business practices. We will post the revised version on our website, update the “Last updated” date and provide any additional notice required by law. We recommend reviewing this Policy periodically.

18. CONTACT

Questions, requests and complaints about this Policy or our handling of personal information should be directed to:

Deco Moore Studio Limited

94–96 Fulham Road

Chelsea, London SW3 6HS

United Kingdom

Email: info@decomoorestudio.co.uk

Telephone: +44 7551 029035