Data Protection & Privacy Policy

  1. Introduction

Franco Signs Ltd (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal data. This Data Protection & Privacy Policy describes how we collect, use, and disclose your personal data when you:

  • Visit our physical stores and make purchases.
  • Access and purchase on our websites – https://francosigns.co.uk
  • Interact with us through other channels, including customer service, social media, and marketing communications.

This policy applies to all personal data we process, regardless of how it is collected.

  1. Principles of Data Processing

We process your personal data in accordance with all applicable data protection laws, including the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018. We adhere to the following principles:

  • Lawfulness, Fairness, and Transparency: We process your data lawfully, fairly, and in a transparent manner.
  • Purpose Limitation: We collect your data for specified, explicit, and legitimate purposes and do not process it further in a manner incompatible with those purposes.
  • Data Minimisation: We collect only the data that is necessary for the purposes for which it is processed.
  • Accuracy: We take reasonable steps to ensure that your data is accurate and kept up to date.
  • Storage Limitation: We keep your data only for as long as is necessary for the purposes for which it is processed.
  • Integrity and Confidentiality: We process your data in a manner that ensures its security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
  • Accountability: We are responsible for demonstrating compliance with these principles.
  1. Data Controller

Franco Signs Ltd is the data controller responsible for your personal data. Our contact details are:

Franco Signs Ltd

First Floor, Unit B, 2 Endeavour Way

Wimbledon

SW19 8UH

Tel: 020 8542 5585

Email: winslow@francogroupuk.com / gerald@francogroupuk.com

  1. Personal Data We Collect

We collect and process the following types of personal data:

  • In-Store Purchases:
    • Purchase details (products purchased, date, time, location).
    • Payment information (card details, cash amount – note: we aim to minimise storage of full card details).
    • Optional: Contact information (for receipts, warranties, or customer service, if provided).
    • CCTV footage (for security and crime prevention).
  • Online Purchases:
    • Contact information (name, email address, phone number).
    • Delivery address.
    • Billing address.
    • Order details (products purchased, date, time, order history).
    • Payment information (card details, PayPal details, etc. – processed securely through payment gateways).
    • Account login details (username, password).
    • Device information (IP address, browser type, operating system).
    • Website usage data (pages visited, time spent, browsing behaviour).
    • Marketing preferences (opt-ins, opt-outs).
  • Customer Service:
    • Communications with us (emails, phone calls, chat logs).
    • Feedback and reviews.
  • Marketing:
    • Name, Email Address, Marketing Preferences
  1. How We Collect Your Personal Data

We collect your personal data in the following ways:

  • Directly from you: When you make a purchase in-store or online, create an account on our Website, contact customer service, or subscribe to our marketing communications.
  • Automatically: Through the use of cookies and similar technologies on our Website (see our Cookie Policy for more information).
  • From third parties: In limited circumstances, we may receive data from third-party service providers (e.g., payment processors, delivery companies).
  1. Purposes of Processing Your Personal Data

We process your personal data for the following purposes:

  • In-Store Purchases:
    • To process your purchase and provide you with a receipt.
    • To handle any returns or exchanges.
    • For security and crime prevention (CCTV).
    • For customer service purposes (if you provide contact information).
  • Online Purchases:
    • To process your order, including payment and delivery.
    • To manage your account on our Website.
    • To provide customer service and support.
    • To send you order confirmations and shipping updates.
    • To personalise your online experience.
    • To send you marketing communications, where you have opted in.
  • General Purposes:
    • To improve our products and services.
    • To analyse customer behaviour and trends.
    • To comply with our legal obligations.
    • To protect our legitimate business interests (e.g., fraud prevention).
  1. Legal Basis for Processing

We process your personal data based on the following legal bases:

  • Contract: Processing is necessary for the performance of a contract with you (e.g., processing your order).
  • Legitimate Interests: Processing is necessary for our legitimate interests, and your interests and fundamental rights do not override those interests (e.g., fraud prevention, improving our services).
  • Consent: You have given your consent to the processing of your data for a specific purpose (e.g., marketing communications).
  • Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject (e.g., tax reporting).
  1. Sharing Your Personal Data

We may share your personal data with the following categories of recipients:

  • Service providers: Third-party companies that provide services to us, such as payment processing, delivery, website hosting, and marketing.
  • Business partners: Companies we partner with to offer products or services to you.
  • Legal authorities: When required by law or to protect our legal rights.
  • Other parties: In the event of a merger, acquisition, or sale of all or a portion of our assets.

We ensure that these third parties process your data in accordance with this policy and applicable data protection laws.

  1. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK and the European Economic Area (EEA) that may not have data protection laws that provide the same level of protection as those in the UK. We will only transfer your data to such countries if:

  • The country has been deemed to provide an adequate level of protection by the UK government.
  • We have implemented appropriate safeguards, such as Standard Contractual Clauses approved by the UK government.
  1. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, use, or disclosure. These measures include:

  • Encryption of data at rest and in transit.
  • Firewalls and intrusion detection systems.
  • Access controls and authentication.
  • Regular security assessments and audits.
  • Employee training on data protection.
  1. Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. The retention period will vary depending on the type of data and the purpose of processing. For example:

  • Transaction data: We will retain transaction data for the period required by tax law.
  • Marketing data: We will retain marketing data until you unsubscribe.
  • Account data: We will retain your account data as long as your account is active.
  1. Your Rights

You have the following rights regarding your personal data:

  • Right to Access: You have the right to request access to the personal data we hold about you.
  • Right to Rectification: You have the right to request that we correct any inaccurate or incomplete data.
  • Right to Erasure: You have the right to request that we delete your data in certain circumstances.
  • Right to Restriction of Processing: You have the right to request that we restrict the processing of your data in certain circumstances.
  • Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
  • Right to Object: You have the right to object to the processing of your data in certain circumstances, including for direct marketing purposes.
  • Right to Withdraw Consent: If we are processing your data based on your consent, you have the right to withdraw your consent at any time.
  • Right to Complain: You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe that we have infringed your data protection rights.

To exercise your rights, please contact us using the contact details provided in Section 3.

  1. Cookies and Similar Technologies

Our website uses cookies and similar technologies to improve your browsing experience, personalise content, and analyse website traffic. For more information, please see Cookie Policy on our website.

  1. Changes to this Policy

We may update this Data Protection & Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by other means (e.g., email).

  1. Contact Us

If you have any questions or concerns about this Data Protection & Privacy Policy or our data processing practices, please contact us using the details provided in Section 3.

Scroll to Top