Privacy Policy

Who we are

The terms “Think Rugs”, “us” or “we” refer to the owner of the website, Oriental Carpets and Rugs Limited. The term “you” refers to the user or viewer of our website.

Think Rugs is a trading name of Oriental Carpets and Rugs Limited, registered in England & Wales under company number 07413940, registered office Anchor Road, Longton, Stoke-on-Trent, ST3 1NF.

Our role as data controller

The Data Controller is the person or organisation who determines the purposes for which, and the manner in which, any personal data is processed. Oriental Carpets and Rugs Limited is the sole Data Controller for this website.

What personal data we collect

Any personally identifiable information you give us while using our website is only shared with our trusted data processors. The content on this website does not require an account to be viewed, so we do not collect profile or registration information by default. We collect data from active customers in the following ways.

Trade accounts

To order from Think Rugs you must first hold a Think Rugs Trade Account. During registration we may collect:

• Company name and trading name
• Name of the buyer / main contact
• Business, invoicing and delivery addresses
• Telephone number
• Email address
• Type of business and number of years established
• VAT registration number and partnership details
• Trade references

Online customer accounts

Once a trade account is approved, if you would like to place orders through this website you can register for an Online Customer Account. If you choose to, we collect your company name, telephone number, website address, email address, and invoicing and shipping addresses. You can update these details at any time from the My Account page.

Email marketing

Where you give consent, we may collect your first name, last name, email address and geographic location to send you newsletters and marketing. You can unsubscribe at any time using the link at the bottom of any marketing email.

Contact forms

Any information submitted through our contact forms is held securely on our servers. Clear consent must be given to this policy when submitting data through our forms. This data is stored for up to 24 months and used to contact you regarding your enquiry.

Analytics & tracking

To deliver the best possible web experience we collect technical information about your internet connection and browser, the country your computer is located in, the pages viewed during your visit, the buttons clicked and any search terms entered. This is done using cookies stored in your browser — see our Cookie Policy.

How we use your data

• Providing our products and services
• Internal record keeping
• Improving our products and services
• Sending promotional emails about new products, offers or other information, where you have consented (you can unsubscribe at any time)
• Market research, where you have consented

Who your data is shared with

We will sometimes be required to share data with trusted third parties who act as Data Processors on our behalf, only for the purposes of operating our website, providing our services, marketing (where consent is given), security, back-ups and communicating with you.

We only give a processor the data they need to perform their service, only permit them to use it for the purposes we agree in our contract, and only use processors with terms and policies that ensure full compliance with privacy legislation. If we stop using a processor, all data held by them is deleted or rendered anonymous. We will never share your data with third parties for their own purposes unless you have given explicit consent.

Where your data is held

This website is hosted on servers located in the United Kingdom, where the website data is held. Our trusted data processors may be required to transfer data outside of the EEA when acting on our behalf; we regularly check that such organisations are compliant with applicable data protection law.

Keeping your data secure

• The website is scanned daily for malware, which is removed immediately if found
• Security is handled at server level rather than relying on third-party plugins
• Secure password best practice is enforced for administrators
• Login attempts are limited at site and server level to protect against brute-force attacks
• Intelligent IP blocking detects and blocks intruders within seconds
• Core updates are applied automatically so the site runs the most up-to-date, secure version
• Backups are stored for 30 days, after which they are permanently deleted

Your rights

If you wish to access, transfer or delete the data we hold about you, please contact us and we will begin the necessary process. You can remove yourself from our email marketing at any time using the unsubscribe link in any marketing email. Note that your data may also be held within a site backup; backups are stored for 30 days, after which they are permanently deleted.

Contact us

If you have any questions about this policy, your data, how it is used and protected, or its deletion, please contact us at info@thinkrugs.co.uk or on 01782 747713.