Privacy Notice

Introduction

Welcome to The Design Assembly. We respect your privacy and are committed to protecting your personal data. This privacy notice explains how we collect, use, and share your personal data when you visit our website and interact with our services.  

1. Information We Collect

We may collect, use, store, and transfer different types of personal data about you, which we have grouped together as follows:

• Identity Data: This includes your first name, last name, username or similar identifier, and title.  
• Contact Data: This includes your email address, billing address, and telephone number.
• Transaction Data: This includes details about payments to and from you and other details of products and services you have purchased from us.  
• Technical Data: This includes your internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.  
• Profile Data: This includes your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.  
• Usage Data: This includes information about how you use our website, products, and services.
• Marketing and Communications Data: This includes your preferences in receiving marketing from us and our third parties and your communication preferences.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature.  

2. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:  

• Performance of Contract: Where we need to perform the contract, we are about to enter into or have entered into with you.  
• Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.  
• Legal Obligation: Where we need to comply with a legal or regulatory obligation.

Purposes for Which We Will Use Your Personal Data:

Purpose/Activity	Type of Data	Lawful Basis for Processing
To register you as a new customer/client or create an account with us.	(a) Identity (b) Contact	Performance of a contract with you
To process and deliver your order or request, including managing payments and debt recovery.	(a) Identity (b) Contact (c) Transaction Data	(a) Performance of a contract with you (b) Necessary for our legitimate interests (to recover debts due to us)
To manage our relationship with you, including notifying you about changes to our terms or privacy policy and asking you to leave a review or provide feedback.	(a) Identity (b) Contact (c) Profile Data (d) Marketing and Communications Data	(a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)
To enable you to participate in a design challenge or competition.	(a) Identity (b) Contact (c) Profile Data (d) Usage Data (e) Technical Data	(a) Performance of a contract with you (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)
To administer and protect our business and website (including troubleshooting, data analysis, system maintenance, support, and hosting of data).	(a) Identity (b) Contact (c) Technical Data	(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud) (b) Necessary to comply with a legal obligation
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.	(a) Identity (b) Contact (c) Profile Data (d) Usage Data (e) Marketing and Communications Data (f) Technical Data	Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences.	(a) Technical Data (b) Usage Data	Necessary for our legitimate interests (to define types of customers for our products/services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
To make suggestions and recommendations to you about products/services that may be of interest to you.	(a) Identity (b) Contact (c) Technical Data (d) Usage Data (e) Profile Data	Necessary for our legitimate interests (to develop our products/services and grow our business)

3. Sharing Your Data

We may share your personal data with the following third parties:

• Service Providers: Third parties that help us operate the Site, such as hosting providers, analytics services, and email delivery services.
• Advertising Partners: Partners who provide advertising and marketing services.
• Legal Obligations: To comply with applicable laws, regulations, or legal processes.
  
  

4. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your experience and analyse traffic. Cookies are small files stored on your device. You can manage your cookie preferences through your browser settings or our cookie banner. For more details, please see our Cookie Policy below.

5. Your Data Protection Rights

Under the UK General Data Protection Regulation (GDPR), you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data.
• Restriction: Request limitation of how your data is processed.
• Objection: Object to data processing based on legitimate interests or for direct marketing.
• Data Portability: Request transfer of your data to you or another provider.

To exercise any of these rights, please contact us at [Your Contact Email].

6. Data Retention

We will retain your personal data only as long as necessary to fulfil the purposes outlined in this notice, unless a longer retention period is required by law.  

7. Security Measures

We have implemented appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, or loss. However, no system is completely secure, and we cannot guarantee absolute security.  

8. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of such websites. Please review their privacy notices for more information.  

9. International Data Transfers

We may transfer your personal data outside of the European Economic Area (EEA) to countries that may not have data protection laws equivalent to those in the UK. We will take steps to ensure that your personal data is adequately protected in these circumstances, such as by using appropriate safeguards like standard contractual clauses or relying on approved certification mechanisms.

10. Children’s Privacy

Our website is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us.  

11. Updates to This Privacy Notice

We may update this notice periodically to reflect changes in our practices or legal obligations. The most current version will always be available on our Site.

12. Contact Us

If you have questions about this privacy notice or wish to exercise your rights, please contact us at:

The Design Assembly
3 Ladywell Close
Hazel Grove
Manchester
Contact@thedesignassembly.co.uk

This privacy notice was last updated on 28/1/25.