Privacy Policy, Artisan Furniture, UK

1. Introduction

We respect your privacy and are committed to handling personal information responsibly, securely, and transparently. This Privacy Policy explains how Global Vision Direct Ltd (Artisan Furniture) collects, uses, shares, and safeguards personal data in the United Kingdom.

This policy applies to our UK website and connected portals. It supplements our Global Privacy Policy and should be read alongside it.

2. Who We Are

Global Vision Direct Ltd (registered in the UK, trading as Artisan Furniture).
Part of the wider Artisan Group, with affiliated companies including Global Vision Direct Private Limited (India).
Person of Significant Control & UBO: Amit Basu.
Our role:
- Controller for B2B partner data.
- Processor for end-customer delivery data (supplied by B2B clients).

3. Data We Collect

B2B Trade Customers: name, business details, role, login credentials, payment details, communications, and usage logs.
End Customers (delivery only): name, delivery address, postcode, phone, and email — provided by B2B clients solely for fulfilment.
Technical Data: IP address, device/browser info, cookies (see Cookie Notice).

We do not collect sensitive personal data, nor do we provide consumer-facing services.

4. Why We Use Data (Purposes)

We use personal data for:

Order fulfilment & delivery (processing and shipping).
B2B services (account management, ERP/ArtisanFlo access, inventory, APIs).
Payments & invoicing (via secure gateways, e.g., PayPal).
Customer support (including AI assistant “Flo”).
Legal compliance (tax, contracts, audit obligations).
Security & fraud prevention (system logs, monitoring).

We do not use end-customer data for marketing or profiling.

5. Legal Bases (UK GDPR)

We rely on:

Contractual necessity (fulfilment, payments, support).
Legitimate interests (B2B relationship management, service improvement, security).
Legal obligations (recordkeeping, tax).
Consent (for cookies/analytics where applicable).

6. Data Sharing & International Transfers

UK → India: We share UK customer data with our Indian entity for operational support and fulfilment.
UK → US: Data may be hosted on secure US cloud servers.
Safeguards: Transfers use UK International Data Transfer Agreement (IDTA) or UK Addendum to EU SCCs. We also conduct Transfer Risk Assessments (TRA).

We share data with:

Courier partners (e.g., UPS, DHL) for deliveries.
Payment gateways (e.g., PayPal).
Cloud hosting providers (AWS, Azure).
Communication services (Twilio, SendGrid).
Approved developers (under NDAs & DPAs).

7. Cross-Navigation Between Websites

When you access the EU site or sign up there, you may be automatically redirected to the EU website in a new tab. This ensures regional content and services. Data protection standards remain consistent across regions.

8. Data Retention

B2B accounts & financial records: contract duration + 7 years.
End-customer delivery data: retained only as required for fulfilment and audit (up to 7 years, then deleted/archived).
Support communications: up to 3 years.
Cookies/analytics: see Cookie Notice.

9. Security

We employ robust safeguards, including:

Encryption in transit and at rest.
Access controls and multi-factor authentication.
Regular audits and penetration testing.
Vendor due diligence and secure contracts.

10. Your Rights (UK GDPR)

You have rights to:

Access your personal data.
Rectify inaccurate data.
Erase data (“right to be forgotten”).
Restrict processing.
Data portability.
Object to processing (including direct marketing).
Withdraw consent (where given).
Lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk/

Requests can be submitted to us (see Section 12).

11. Children’s Data

Our services are not directed at children. We do not knowingly process children’s personal data.

12. Contact

For privacy concerns or rights requests:

Data Protection Officer (DPO)

London Office: Global Vision Direct Ltd
2A Monck St, London SW1P 2BQ United Kingdom
Email: mail@artisanfurniture.net

13. Changes

We may update this policy from time to time. We will notify you of significant changes and update the “Effective Date.”

Published January 2026 | Effective from January 2026 until Superseded or Amended