XO Interiors gathers and processes your personal data in accordance with this privacy notice and in compliance with the relevant data protection regulation and law. This notice provides you with the necessary information regarding your rights and obligations, and explains how, why and when we collect and process your personal data.

Who we are

XO Interiors’s registered office is at Nieuweweg 109, 3765 GC, Soest, The Netherlands. We are a company registered in Netherlands under company number 64442675.

What information do we collect about you?

We process your personal data to meet our legal, statutory and contractual obligations and to provide you with our products and services.

The personal data we collect is as follows:

Your on-site browsing behaviour, including the pages you have viewed, IP address and browser details etc.
Your name, email, telephone and preferences.
Your organisation details, if provided.
Communication between us, including emails, online chat messages
Other data entered into our site for specific purposes, for example the creation of wishlists.
Any other data collection is detailed at the point it is collected in a separate notice.

How do we we collect information about you?

We collect data from you in the following ways:

The data you enter into online forms on our websites.
Your browsing behaviour on our websites.
When you contact us, for example over email, telephone or online chat.
How will we use the information about you?

Our processing activities are:

Tracking and analysing your browsing behaviour on our website for our own performance purposes.
Sharing your onsite behaviour with third parties for marketing purposes.
Responding to customer services requests via chat, email, telephone etc.
Analysis of data for reporting, forecasting and site performance.
Analysis of data for marketing purposes.
Sharing and disclosing your personal data

We do not share or disclose any of your personal data to third parties without your consent, other than for the purposes specified in this notice or where there is a legal requirement.

Onsite browsing and marketing controllers

As is normal for the ecommerce industry, we share your browsing data with some third party marketing organisations, primarily through Javascript tracking code.

Our data processors

We engage the following organisations which we use as processors of your data. All processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures.

Google, Facebook

Marketing, promotions and offers

In most cases, we will only send you email marketing communications if you have opted in to receive them.

When you place an order with us, we may rely upon a soft opt-in approach to send you emails along with our legitimate interest to process your data. If we are using this approach, you will be offered an out-out when your data are collected.

In all cases you have the right to opt-out at any time, please see the footer of the emails for details.

You may opt out of other marketing communications via post, telephone or SMS, from the Contact area.

How long will we keep your data for?

Data about your orders and communications with us will be held indefinitely as we need a legal record of these.

Website behavioural data will be kept for up to 38 months, after which time we aim to store  only store aggregated, non-personal data.

Securing your data

We takes your privacy and data security seriously and we take every reasonable measure and precaution to protect and secure your personal data. We work hard to protect your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place.

Your rights

You have many rights around the use of your personal data. We are implementing them in the following ways:

Right to be informed

Your right to be informed about how we use personal data is contained within this notice, including:

The purposes for which we process your data.
The categories of personal data we hold about you.
The recipients to whom your personal data has/will be disclosed.
How long we intend to store your personal data for.
If we did not collect the data directly from you, information about its source.

Right of access, rectification, erasure, processing

You have the right to request the personal data which we hold about you. You have the right to request that we delete the personal data we hold about you.
For this please contact us.

There is some data which we do not delete:

Your name and email, which we use to store the deletion request.
Your order data, which we require for reporting and tax purposes. However, we will stop using your personal data for marketing profiling.
Your communications with us.

Right to object

You have the right to object to our data processing, to do this, please us.

Changes to our privacy notice

Any changes to this notice will be posted onto this page. If the changes are significant we may display a notice or seek your consent.

How to contact us or lodge a complaint

You may contact us to lodge a complaint.