Privacy Policy
We want buying a carpet from Carpet Unique to feel clear and trustworthy. This Privacy Policy explains what information we need, why we need it, who helps us process it, and what choices and rights you have.
Information we need
If you browse the shop, we use basic technical data needed to show the site securely. If you create an account, contact us, or place an order, we may use your name, email address, phone number, billing and delivery address, order details, payment status, shipping information, messages, consent choices, and security logs.
Why we use your information
We use your information to keep your account available, answer questions, reserve and sell one-of-a-kind carpets, process payment, prepare shipping, send order updates, prevent fraud, secure the shop, handle returns or complaints, and meet tax and accounting duties. Depending on the situation, the legal basis is contract performance, legal obligation, legitimate interest, or consent.
Payment, shipping, and service providers
We share only necessary data with our service providers and recipients: Hetzner for hosting and email infrastructure, banks for payments, and the carrier selected for the shipment, including DHL, GLS, UPS, or FedEx. Depending on the activity, the legal basis is Article 6(1)(b), (c), or (f) GDPR. Where required, we use data-processing agreements under Article 28 GDPR.
Cookies and consent
Necessary cookies make the shop work: cart, checkout, login, fraud prevention, security, and remembering privacy choices. We do not currently use optional analytics or marketing cookies. If that changes, we will ask separately before activating them.
Retention
We keep order and invoice records for the legally required period. Account, enquiry, shipping, and technical data is kept only as long as needed for customer service, security, legal defence, or statutory duties.
Transfers outside the EEA
Some international shipping or IT providers may process data outside the European Economic Area. Such transfers rely on an adequacy decision, appropriate safeguards such as EU Standard Contractual Clauses, or a statutory exception.
Security and required information
We use appropriate technical and organisational safeguards, including TLS encryption, access controls, updates, and backups. Required checkout and account fields are needed to enter into or perform the contract; without them, we cannot process an order. We do not currently make solely automated decisions that produce legal or similarly significant effects.
Visiting the shop and server logs
When you visit the shop, our hosting provider processes technical data sent by your browser, including IP address, time, requested page, status code, data volume, referrer, and browser and operating-system information. This supports secure delivery, error analysis, and attack prevention and is not used for personalised advertising.
Registration, login, and password
When you register, we process your name, email address, login details, language preference, and the confirmations required to open an account. We use noreply@carpetunique.com for verification, password resets, and security notifications. You may request account deletion subject to statutory retention duties; order and invoice records may need to be retained.
Orders, payment, and invoices
For an order, we process customer details, billing and delivery address, carpet, price, shipping cost, payment method, payment status, invoice number, and order communications. For bank transfer, we process the incoming payment and its reference. Invoices and payment evidence are retained for commercial and tax obligations.
Service and order emails
We send transactional emails for registration, verification, password reset, order confirmation, bank transfer, payment, invoice, dispatch, tracking, return, and refund. These messages are required for the account, contract, or customer service and are not newsletter advertising. Customer service, orders, shipping, and returns are handled through info@carpetunique.com.