Privacy Policy
Last Updated: 12 October 2026
1. Introduction
Welcome to Kaya Atelier.
At Kaya Atelier, we value the trust our clients place in us and are committed to protecting and respecting your personal information.
This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, enquire about our products, purchase furniture or engage with our bespoke design services.
We are committed to handling your information responsibly and in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website, you acknowledge that you have been provided with this Privacy Policy.
- Business Name: Kaya Atelier
- Legal Trading Entity: Kaya Atelier
- Registered Address: 15a Raven Road, South Woodford, E18 1HB
- Website: www.kayaatelier.co.uk
- Email: info@kayaatelier.co.uk
2. Information We Collect
When you interact with Kaya Atelier, we may collect and process the following personal information:
Personal Details
- Full name
- Email address
- Telephone number
- Billing and delivery addresses
- Company name, where applicable
Order and Purchase Information
- Furniture orders and purchase history
- Product specifications and bespoke design requirements
- Material and finish selections
- Payment and transaction details
- Delivery and installation instructions
Website and Technical Information
- IP address
- Browser type and device information
- Website usage and browsing activity
- Cookie preferences
- Information collected through permitted analytics technologies
Communications
We may retain records of communications made through our website, email, telephone or social media platforms, including enquiries, requests for quotations, design consultations and customer support correspondence.
3. How We Use Your Information
We collect and use your personal information to provide a professional, efficient and personalised service.
Your information may be used to:
- Respond to enquiries and provide quotations.
- Process and manage furniture orders.
- Discuss bespoke furniture specifications, dimensions and finishes.
- Arrange production, delivery and installation.
- Process payments, refunds and applicable invoices.
- Provide customer service and aftercare.
- Maintain accurate business and accounting records.
- Improve our website, products and customer experience.
- Send marketing communications where legally permitted.
- Meet our legal and regulatory obligations.
We will only use your personal information where we have a valid lawful basis to do so.
4. Our Lawful Basis for Processing Personal Data
Under UK GDPR, we rely on the following lawful bases where appropriate:
Contractual Necessity
Where processing your information is necessary to provide a quotation at your request, fulfil your furniture order or perform our contractual obligations.
Legal Obligations
Where we must retain or process information to comply with applicable tax, accounting or other legal requirements.
Legitimate Interests
Where necessary for our legitimate business interests, such as responding to relevant enquiries, preventing fraud, maintaining website security and improving our services, provided these interests are not overridden by your rights.
Consent
Where we ask for your permission, including certain direct marketing activities and non-essential website cookies.
Where processing relies on consent, you may withdraw that consent at any time.
5. Bespoke Furniture Orders and Design Consultations
As a specialist furniture business, Kaya Atelier may request additional information to fulfil bespoke commissions.
This may include room measurements, photographs of interiors, architectural drawings, delivery access information, material preferences and other project-related details.
Such information will be used solely for legitimate purposes connected with your enquiry, design consultation, quotation, manufacture, delivery or installation, unless another lawful basis applies.
Where necessary, relevant project information may be shared with trusted craftspeople, manufacturers, suppliers or installation professionals involved in fulfilling your order.
We take reasonable steps to ensure that only the information necessary for these purposes is shared.
6. Payments and Transactions
Where purchases or deposits are processed through our website or approved payment providers, relevant personal and transaction information may be shared with those providers.
Payments may be processed through secure third-party payment services.
Kaya Atelier does not intend to store complete payment card details on its own systems.
Payment providers process relevant information according to their own privacy and security policies.
We may retain transaction records where necessary for accounting, taxation, dispute resolution and legal compliance.
7. Sharing Your Personal Information
Kaya Atelier does not sell your personal information to third parties.
We may share necessary information with trusted service providers, including:
- Stone suppliers and specialist furniture manufacturers
- Delivery and installation teams
- Payment processors and financial institutions
- Website hosting and technical support providers
- Professional advisers, including accountants and legal representatives
- Customer management and communication service providers
We may also disclose information where required by law or a competent regulatory authority.
Any sharing of personal information will be limited to what is necessary and subject to appropriate data protection safeguards.
8. International Suppliers and Data Transfers
Kaya Atelier works with specialist suppliers and manufacturers, including businesses based outside the United Kingdom.
Where an international supplier requires personal information to fulfil an order, we will limit the information shared to what is reasonably necessary.
Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place where required under UK data protection legislation.
These may include transfers to countries recognised as providing adequate protection or the use of approved contractual safeguards.
9. Cookies and Website Analytics
Our website may use cookies and similar technologies to support website functionality, remember preferences and understand how visitors use our services.
Cookies may include:
Essential Cookies
Necessary for the operation, security and core functionality of our website.
Analytics Cookies
Used, where enabled, to understand website performance and visitor interactions.
Functional Cookies
Used to remember certain visitor preferences and improve website functionality.
Marketing Cookies
Used, where enabled, to support relevant advertising and measure marketing effectiveness.
Where legally required, we will request your consent before placing non-essential cookies.
You can manage your cookie preferences through our website’s cookie controls, where available, or your browser settings.
Further information about the specific cookies used, their providers and their duration will be available in our separate Cookie Policy.
10. Marketing Communications
From time to time, Kaya Atelier may share updates about new collections, product launches, material selections, design inspiration and relevant company news.
We will only send electronic direct marketing communications where we have an appropriate lawful basis and comply with applicable marketing rules.
You may opt out of marketing communications at any time by following the unsubscribe instructions in our emails or contacting us directly.
Opting out of marketing will not prevent us from sending essential communications relating to existing orders or enquiries.
11. How We Protect Your Information
We take the security and confidentiality of personal information seriously.
We use appropriate technical and organisational measures designed to protect information against unauthorised access, misuse, accidental loss, alteration or disclosure.
Access to personal information is restricted to those who reasonably require it for legitimate business purposes.
Although we take reasonable precautions, no internet-based transmission or electronic storage system can be guaranteed to be completely secure.
12. How Long We Keep Your Information
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting and reporting requirements.
Retention periods will depend on the type of information and the purpose for which it is processed.
For example:
- Order and financial records may be retained for the applicable statutory accounting and tax retention periods.
- Customer correspondence and bespoke project records may be retained for legitimate aftercare, warranty or dispute-resolution purposes.
- Marketing information will be retained until consent is withdrawn, an objection is made or it is no longer required, subject to necessary suppression records.
- Website usage information will be retained according to the relevant technical and cookie retention settings.
Once information is no longer required, we will securely delete or anonymise it.
13. Your Data Protection Rights
Under applicable UK data protection law, you may have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your information in certain circumstances.
- Request restrictions on how your information is processed.
- Object to certain types of processing, including direct marketing.
- Request transfer of certain information to another provider.
- Withdraw consent where processing is based on consent.
These rights are subject to applicable legal requirements and exemptions.
To exercise any of these rights, please contact us using the details provided in this policy.
We will respond within the time limits required by applicable data protection law.
14. Third-Party Websites
Our website may contain links to external websites, social media platforms or third-party services.
These websites operate independently and may have their own privacy policies.
Kaya Atelier is not responsible for the privacy practices of third-party websites, and we encourage visitors to review their policies before providing personal information.
15. Children’s Privacy
Our products and services are intended primarily for adults.
We do not knowingly collect personal information from children for marketing purposes.
If we become aware that personal information has been collected from a child without an appropriate lawful basis, we will take appropriate steps to address the matter.
16. Changes to This Privacy Policy
Kaya Atelier reserves the right to update this Privacy Policy to reflect changes in our business operations, website functionality or legal obligations.
Any revisions will be published on this page with an updated revision date.
We encourage visitors to review this policy periodically.
Where required by law, we will provide additional notice of significant changes.
17. Contact Us
If you have questions about this Privacy Policy, how we handle your personal information or wish to exercise your data protection rights, please contact:
- Kaya Atelier
- Website: www.kayaatelier.co.uk
- Email: info@kayaatelier.co.uk
- Registered Address: 15a Raven Road, South Woodford, London, E18 1HB
We will endeavour to address privacy-related enquiries promptly and professionally.
If you remain dissatisfied with our handling of your personal information, you have the right to raise a concern with the UK’s independent data protection regulator, the Information Commissioner’s Office (ICO): ico.org.uk.
