Privacy Policy

                                                                                                                                                  BACK

Last updated: 16 July 2026

This Privacy Policy explains how Colinton Manufacturing Ltd, trading as MacKay Furniture, collects, uses, stores and shares personal data in connection with our Website, showroom, customer service, order processing, delivery, marketing, warranties and business administration. It is drafted for a Northern Ireland retailer subject to the UK GDPR and the Data Protection Act 2018.

1. Who we are

1.1 Colinton Manufacturing Ltd, trading as MacKay Furniture, is the controller of personal data described in this Privacy Policy unless we state otherwise.

1.2 Our contact details and privacy contact details are set out in the Company Details schedule at the beginning of this document.

1.3 If you have questions about how we use personal data, or wish to exercise data protection rights, contact us using the privacy contact email or postal address in the Company Details schedule.

2. Personal data we collect

2.1 We may collect and use the following categories of personal data:

· identity details, such as name, title and customer reference;

· contact details, such as billing address, delivery address, email address and telephone number;

· order details, such as products ordered, specifications, measurements, fabrics, finishes, delivery instructions, collection details and purchase history;

· payment and transaction details, such as payment status, refunds, invoices, receipts and limited payment references;

· communications, such as emails, telephone notes, messages, complaints, reviews, photographs and customer service records;

· website and technical data, such as IP address, device information, browser type, cookie identifiers, consent choices, pages viewed and website usage data;

· marketing preferences, such as whether you have opted in or opted out of marketing;

· CCTV or security information if you visit premises where CCTV or security systems operate; and

· information required for legal, accounting, fraud-prevention, insurance or regulatory purposes.

2.2 We do not intentionally collect special category data through normal retail activity. If you voluntarily provide information that may reveal health, disability, accessibility needs or other sensitive information, we will use it only as necessary for the relevant purpose, such as making reasonable delivery or access arrangements.

3. How we collect personal data

3.1 We collect personal data directly from you when you browse our Website, make an enquiry, place an order, request a quotation, make a payment, sign up for marketing, contact customer service, arrange delivery or collection, make a complaint, leave a review or otherwise interact with us.

3.2 We may receive personal data from payment providers, delivery companies, couriers, manufacturers, suppliers, website platforms, analytics providers, advertising platforms, fraud-prevention providers, professional advisers and publicly available sources where relevant to our business.

4. Purposes and lawful bases

4.1 We use personal data only where we have a lawful basis. The main purposes and lawful bases are summarized in this link.

5. Marketing communications

5.1 We may send marketing communications where you have consented or where another lawful basis allows us to do so. We will not sell your personal data to third parties for their own marketing.

5.2 You can opt out of marketing at any time by using the unsubscribe link in an email, changing your preferences where available, or contacting us.

5.3 We may still send non-marketing service messages about orders, delivery, collections, warranties, safety, recalls, legal notices or customer service matters.

6. Cookies and similar technologies

6.1 We use cookies and similar technologies as described in our Cookie Policy.

6.2 Strictly necessary cookies may be used without consent where they are essential to provide the Website or a service you requested. Non-essential cookies, such as analytics or advertising cookies, will be used only where a valid lawful basis and consent mechanism are in place.

7. Who we share personal data with

7.1 We may share personal data with the following categories of recipients where necessary and lawful:

· payment processors, banks and fraud-prevention providers;

· couriers, delivery partners, installers, manufacturers and suppliers involved in fulfilling your order;

· website hosting providers, ecommerce platforms, IT support providers, email service providers and security providers;

· analytics, advertising and cookie technology providers where permitted by your choices and applicable law;

· professional advisers, including accountants, insurers, solicitors and debt-recovery advisers;

· regulators, law-enforcement bodies, courts, HMRC and other authorities where required or permitted by law;

· business purchasers, successors or advisers if we reorganise, sell or transfer all or part of our business.

7.2 We require service providers who process personal data for us to protect it and use it only for authorised purposes.

8. International transfers

8.1 Some of the service providers we use, including website hosting, cloud, payment, communications and analytics providers, may process or store personal data outside the United Kingdom.

8.2 Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place as required by applicable data protection law. These may include transfers to countries covered by UK adequacy regulations, the use of approved contractual safeguards or another lawful transfer mechanism.

9. How long we keep personal data

9.1 We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including order fulfilment, warranty support, accounting, legal, tax, insurance, complaints and business record purposes.

9.2 Follow link for typical retention periods 

10. Security

10.1 We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration and disclosure.

10.2 No website, email or electronic system is completely secure. You should use strong passwords, keep account credentials confidential and contact us promptly if you suspect unauthorised use of your account or personal data.

11. Your data protection rights

11.1 Depending on the circumstances and legal basis, you may have rights to request access to personal data, correction, erasure, restriction, objection, portability and withdrawal of consent.

11.2 You have an absolute right to object to direct marketing at any time.

11.3 If you withdraw consent, this will not affect processing carried out before withdrawal. We may still process personal data where another lawful basis applies.

11.4 To exercise rights, contact us using the privacy contact details in the Company Details schedule. We may need to verify your identity before responding.

12. Complaints

12.1 We encourage you to contact us first so that we can try to resolve any privacy concern.

12.2 You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.

13. Children

13.1 Our Website and Goods are not directed at children. We do not knowingly collect personal data from children for online retail sales without appropriate authority.

14. Automated decision-making

14.1 We do not normally make decisions based solely on automated processing that produce legal or similarly significant effects on customers. Payment, fraud-prevention and security systems may use automated checks, but these are used to protect transactions and may be reviewed where appropriate.

15. Changes to this Privacy Policy

15.1 We may update this Privacy Policy from time to time. The latest version will be published on the Website. Material changes may be notified by appropriate means where required.