Privacy Policy

1. Introduction

MHM Services, trading as Curtain Making Services ("we", "us", "our"), is committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal information in accordance with UK data protection laws, including the Data Protection Act 2018 and UK GDPR.

2. Information We Collect

2.1 Information You Provide Directly

When you contact us or engage our services, we collect:

• Name and contact details (email, phone number, postal address)
• Property address where curtains will be fitted
• Window measurements and room details
• Fabric preferences, colour choices, and design requirements
• Photos of windows, rooms, or existing furnishings (often shared via WhatsApp)
• Communication preferences and consultation notes
• Payment information (processed securely by third-party payment providers)
• Any other information you choose to share in correspondence or consultation

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

• IP address and device information
• Browser type and version
• Pages visited, time spent on pages, and navigation paths
• Referring website and search terms used

This information is collected through cookies and similar technologies (see our Cookie Policy for details).

2.3 WhatsApp Consultations

We offer photo consultations via WhatsApp as a convenient way to discuss your project. When you use WhatsApp to contact us:

• Your phone number becomes visible to us
• Photos and messages you send are stored in our WhatsApp business account
• WhatsApp's own privacy policy and encryption also apply to these communications

3. How We Use Your Information

We use your personal data for the following purposes:

3.1 Service Delivery

• To provide bespoke curtain making and soft furnishings services
• To arrange home visits for measuring and consultation
• To communicate about your project and fabric selections
• To source fabrics and materials for your order
• To arrange fitting appointments

3.2 Business Operations

• To process payments and maintain financial records
• To respond to enquiries and support requests
• To improve our services and website functionality
• To comply with legal and regulatory obligations

3.3 Marketing (with your consent)

• To send occasional updates about our services
• To share relevant resources and design inspiration

You can withdraw marketing consent at any time by clicking "unsubscribe" in any email or contacting us directly.

4. Legal Basis for Processing

We process your personal data under the following legal grounds:

• Contractual necessity: To deliver the curtain making services you've engaged us for
• Legitimate interests: To operate our business, improve our services, and maintain client relationships
• Consent: For marketing communications and non-essential cookies
• Legal obligation: To retain records for tax purposes and consumer protection compliance

5. How We Share Your Information

We do not sell your personal data. We may share information with:

5.1 Service Providers

• Website hosting and email services: For website infrastructure and communications
• WhatsApp (Meta): For photo consultations and messaging (governed by WhatsApp's privacy policy)
• Google Analytics: For website analytics (anonymised data)
• Email marketing service: If you've subscribed to our newsletter
• Payment processors: For secure transaction handling

All service providers are carefully selected and required to protect your data in accordance with UK GDPR.

5.2 Delivery and Suppliers

When fabric or materials are being delivered directly to you:

• Your name and delivery address may be shared with the supplier or courier
• This is only done when necessary for order fulfilment
• We do not share other personal details or project information

5.3 Legal Requirements

We may disclose your information if required by law, court order, or regulatory authority.

6. Data Retention

We retain your personal data only as long as necessary:

• Active projects: Throughout the project duration and completion
• Completed projects: For 6 years after project completion (to meet consumer rights obligations and HMRC requirements)
• Marketing data: Until you unsubscribe or request deletion
• Website analytics: 26 months (Google Analytics default)
• Financial records: 6 years (HMRC requirement)
• WhatsApp messages and photos: For the duration of the project plus 6 years, unless you request earlier deletion

After these periods, data is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate or incomplete information
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Restriction: Ask us to limit how we use your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests or for marketing
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at melody@mhm-services.co.uk. We will respond within one month.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Secure website hosting with encryption (SSL/TLS)
• Password-protected systems and access controls
• Regular backups and security updates
• Secure storage of physical documents and fabric samples
• WhatsApp end-to-end encryption for messaging

While we take all reasonable precautions, no internet transmission is completely secure. We cannot guarantee absolute security of data transmitted to our website or via messaging platforms.

9. International Data Transfers

Your data is primarily stored and processed within the UK and European Economic Area. Some service providers (such as Google Analytics and WhatsApp) may process data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

11. Third-Party Websites

Our website may contain links to external websites (such as fabric suppliers or design inspiration). We are not responsible for the privacy practices of third-party sites. Please review their privacy policies before sharing personal information.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Significant changes will be communicated via email to active clients or posted prominently on our website. The "Last updated" date at the top indicates when changes were made.

13. Questions and Complaints

If you have questions about this privacy policy or how we handle your data, please contact us:

Email: melody@mhm-services.co.uk
Phone: +44 7495 125094
Post: MHM Services, 4 Fairfields Road, Holmbridge, Holmfirth, West Yorkshire HD9 2NP

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk