Privacy Policy

1. Who we are

ForSmallSpaces.co.uk ("we", "us", "our") is a UK-based furniture discovery website. We are committed to protecting your personal data and respecting your privacy. This policy explains what data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

If you have any questions about this policy, please contact us.

2. Data we collect

Data you provide directly

• Name and email address, if you contact us via our contact form
• Any other information you choose to include in a message to us

Data collected automatically

• IP address and browser type (via server logs and analytics)
• Pages visited, time spent on site, and referring URLs
• Device type and operating system
• Click behaviour and search queries made on the site

We do not collect payment details. All purchases are handled entirely by the relevant third-party retailer.

3. How we use your data

We use the data we collect to:

• Respond to enquiries submitted via our contact form
• Understand how visitors use the site so we can improve it
• Monitor site performance and resolve technical issues
• Comply with legal obligations

Our legal basis for processing contact form data is your consent (Article 6(1)(a) UK GDPR). Our legal basis for analytics data is our legitimate interests in understanding and improving the site (Article 6(1)(f) UK GDPR).

We do not sell your personal data, and we do not use it for unsolicited marketing.

4. Cookies

We use cookies to help the site function and to understand how it is used. These include:

• Essential cookies — required for the site to work correctly
• Analytics cookies — used to measure traffic and usage patterns (e.g. Google Analytics)
• Affiliate cookies — set when you click through to a retailer, used to track referrals

You can control cookies through your browser settings. Disabling analytics or affiliate cookies will not affect your ability to use the site.

5. Third parties

We work with a small number of third-party services:

• Google Analytics — for site analytics. Data is processed in accordance with Google's privacy policy.
• Affiliate networks — when you click a product link, you may be redirected via an affiliate network. These networks may set their own cookies.
• Retailers — once you leave our site and visit a retailer, their own privacy policy applies.

We do not share personally identifiable information with third parties except where required by law.

6. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the ICO (ico.org.uk) if you believe your rights have been infringed

To exercise any of these rights, please contact us.

7. Data retention

Contact form submissions are retained for up to 12 months and then deleted. Analytics data is retained in line with the default retention settings of the analytics provider. Server logs are typically retained for 30 days.

8. Security

We take reasonable steps to protect your personal data from unauthorised access, loss, or misuse. Our site uses HTTPS encryption. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this page periodically.

10. Contact us

If you have any questions or concerns about this privacy policy or how we handle your data, please get in touch via our contact page.