Privacy policy
Privacy Statement
Goldfinger is committed to protecting and respecting your privacy. This Privacy Statement explains how and why we collect your personal information when you visit or purchase something from our website www.goldfinger.design (our “Website”), or when you purchase something via our showroom, at a trade show or through other in-person means, or when you sign up to hear more from us. It also explains how we use your data, the conditions under which we may disclose it to others and how we keep it secure.
We may change this Privacy Statement from time to time, so please check this page for updates. Any questions regarding this Privacy Statement and our privacy practices should be sent by email to hello@goldfinger.design. This Privacy Statement is effective from 27th May 2025.
Who are we?
Goldfinger is a social enterprise that seeks to achieve high-end design in a way that is planet and people-positive. We provide sustainable furniture and homeware products, as well as a number of services to our local community, including through our Goldfinger Academy and People’s Kitchen.
Goldfinger is also a “data controller”. This means that we are responsible for how we hold and use personal information about you.
Contacting Us
If you have any questions about this Privacy Statement or how we handle your personal information, please contact us at hello@goldfinger.design.
Who does this Privacy Statement apply to?
This Privacy Statement applies to the following categories of individuals:
- Customers,
- Website users,
- Individuals who sign up to one of our courses, or donate a meal through our People’s Kitchen,
- Individuals associated with our partner organisations,
- Newsletter subscribers,
- Individuals who attend our events, and any other individuals who we may have contact with in the course of running our business.
What type of personal information is collected from you?
Personal information, or personal data, means any information about an individual from which that person can be identified. It does not include information where the identity has been removed (anonymous data).
When and how do we collect this information from you?
When you use the services we offer on the Website
We collect the following information from you when you use our Website, including when you make a purchase from us, sign up to one of our courses, or donate a meal through our People’s Kitchen. This information is also collected for direct/in-person purchases:
- Name
- Postal address (including billing and shipping addresses),
- Telephone number,
- Email address,
- Payment card data,
- IP address (we may also derive your approximate location from your IP address)
We collect the above information to fulfil your requests, including for direct/in-person purchases, and provide the functionality of the website, including:
- Arranging access to your account, and providing you with any related benefits and/or customer service,
- To respond to your inquiries and fulfill your requests, for example, when you send us questions, suggestions, compliments or complaints, or when you request a quote for one of our products,
- To complete your transactions and/or fulfil any bespoke orders you may commission us to carry out, process returns and exchanges, verify your information, and provide you with related benefits, special promotions, or customer service,
- To send administrative information to you, such as changes to our terms, conditions, and policies.
We will engage in these activities to manage our contractual relationship with you and/or to comply with a legal obligation.
When you provide us with your contact details
We allow you to provide us with your email address so that you can receive our newsletter.
We collect this to, for example:
- Provide you with further information about Goldfinger, including in relation to our activities and initiatives, or
- Invite you to events run by us or our partners at your request or which we feel may interest you.
We will use your personal information for these purposes with your consent, or where we have a legitimate interest. If you no longer want to receive communications from us, you can revoke your consent at any time by unsubscribing using the link in the communications themselves. Alternatively, you can send an email to us at any time at hello@goldfinger.design.
Website Optimisation/Cookies
When you use our website, we collect certain ‘technical’ pieces of personal information, including via the use of cookies and other related technologies (for convenience all technologies are referred to as “cookies”), including in a variety of ways:
IP address and statistical data. We collect your IP address and other statistical data automatically using cookies. We do this to monitor customer traffic patterns, website usage and related website information in order to optimize your use of our website, and to ensure that content from our website is presented in the most effective manner for you and for your computer. The cookies collecting this information have a duration of 12 months.
Pixel tags. Pixel tags (also known as web beacons and clear GIFs) may be used to, among other things, track the actions of users of the Website (including email recipients), measure the success of our marketing campaigns, and compile statistics about usage of the Website and response rates. The pixel tags collecting this information have a duration of 12 months.
Analytics. We use Google Analytics, which uses cookies and similar technologies to collect and analyze information about use of the Services and report on activities and trends. This service may also collect information regarding the use of other websites, apps and online resources. You can learn about Google’s practices by going to www.google.com/policies/privacy/partners/, and exercise the opt-out provided by Google by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout. The cookies collecting this information have a duration of 12 months.
When you visit our Website, we will show you a pop-up with an explanation about cookies. As soon as you click on Accept, you consent to us using the categories of cookies you selected in the pop-up, as described in this Privacy Statement. You can disable the use of cookies via your browser, but please note that our website may no longer work properly.
You can choose to Decline use of cookies on our website from the pop-up, or use your internet browser to automatically or manually delete cookies. You can also specify that certain cookies may not be placed. Another option is to change the settings of your internet browser so that you receive a message each time a cookie is placed. For more information about these options, please refer to the instructions in the Help section of your browser.
Please note that our website may not work properly if all cookies are disabled. If you do delete the cookies in your browser, they will be placed again if you consent to these when you visit our Website again.
How long do we retain your personal information for?
We will hold your personal information on our systems for as long as is necessary to fulfil the purposes for which we collected the personal information and consistent with applicable law. The criteria used to determine our retention periods include:
- The length of time we have an ongoing relationship with you (for example, while we are fulfilling your order, or until after you have completed one of our courses);
- Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records for a certain period of time before we can delete them); or
- Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).
Who has access to your personal information?
We do not sell or rent your personal information to third parties. However, we do disclose your personal information to our third party service providers, to facilitate services they provide to us. These can include providers of services such as website hosting, data analysis, fraud prevention, information technology and related infrastructure provision, email delivery, auditing, and other services.
When we use third party service providers, we disclose only the personal information that is necessary for the service provider to deliver their service, and where we have a contract in place with the service provider that requires them to keep your personal information secure and not to use it for their own purposes.
Other Uses and Disclosures
We also use and disclose your personal information as necessary or appropriate, in particular when we have a legal obligation or legitimate interest to do so:
To comply with applicable law and regulations
- This may include laws outside your country of residence.
To cooperate with public and government authorities
- To respond to a request or to provide information we believe is necessary or appropriate.
- These can include authorities outside your country of residence.
To cooperate with law enforcement
- For example, when we respond to law enforcement requests and orders or provide information we believe is important.
For other legal reasons
- To enforce our terms and conditions (including those set out here); and
- To protect our rights, privacy, safety or property, and/or those of you or others.
In connection with a sale or business transaction
- We have a legitimate interest in disclosing or transferring your Personal Information to a third party in the event of any reorganisation, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business or assets.
How you can exercise your rights over your personal information
If you would like to request to access, correct, update, suppress, restrict, or delete personal information, object to or opt out of the processing of personal information, or if you would like to request to receive a copy of your personal information for purposes of transmitting it to another company (to the extent these rights are provided to you by applicable law), please contact us in writing at hello@goldfinger.design. We will respond to your request consistent with applicable law.
Securing your personal information
We seek to use reasonable organisational, technical and administrative measures to protect personal information within our organisation. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contacting Us” section above.
Transferring Personal Information to a Country outside the UK
We may transfer any personal information we hold to a country outside the UK provided that one of the following conditions applies:
- The country to which the personal information are transferred ensures an adequate level of protection for your rights and freedoms, as determined by the United Kingdom (the full list of these countries is available here).
- For transfers to countries not considered adequate by the United Kingdom:
- You have given your consent;
- The transfer is necessary for one of the reasons set out in the UK General Data Protection Regulation, including the performance of a contract between us and you, or to protect your vital interests;
- The transfer is legally required on important public interest grounds or for the establishment, exercise or defence of legal claims; or
We have put in place adequate measures, such as standard contractual clauses adopted by the UK Information Commissioner’s Office, to protect your personal information. You may obtain a copy of these measures by contacting us in accordance with the “Contacting Us” section above.
Links to and from other websites
Our website may contain links to other websites run by other organisations. This Privacy Statement applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.
Under 16s
Our website is not directed at children aged 16 or under, and we do not knowingly collect personal information from individuals under 16.
Review of this Privacy Statement
We regularly review this Privacy Statement, and may update it from time to time to meet our business requirements and/or comply with statutory provisions. You can see the date of the latest update at the top of the Statement. If we make material or substantive changes to one of our privacy policies, we will seek to actively bring those changes to your attention.
Complaints
You have the right to lodge a complaint with the UK Information Commissioner’s Office, the UK data protection regulator, as directed on their website at www.ico.org.uk. However, please think about telling us first so we have a chance to address your concerns.