Privacy Policy
This policy explains how we collect, use and protect your personal information when you interact with our business.
Who We Are
We are a UK-based wholesale furniture and mattress supplier operating under the name North & Form. Our registered address is:
9 Pantygraigwen RoadPontypridd
Mid Glamorgan
United Kingdom, CF37 2RR
We are the data controller responsible for your personal information. This Privacy Policy applies to all individuals who contact us, place orders, or interact with our business -- including trade customers, dropship partners, and end consumers.
What Data We Collect
Depending on how you interact with us, we may collect the following types of personal data:
Identity & Contact
- Full name
- Phone number (including WhatsApp)
- Business name
Delivery & Order
- Delivery address & postcode
- Order details & quantities
- Tracking information
Financial
- Payment records
- Invoice details
- Transaction references
Communications
- WhatsApp messages
- Enquiry content
- After-sales correspondence
We do not collect sensitive personal data such as health information, ethnic origin, or financial credit data unless strictly necessary and with your explicit consent.
How We Collect Your Data
We collect personal data through the following channels:
- WhatsApp enquiries and orders -- when you contact us via WhatsApp to ask about products, pricing, stock, or place an order.
- Trade platform orders -- when you purchase through the Dajianyuncang platform (Store ID: T6608).
- Dropship fulfilment requests -- when a trade partner provides end-consumer delivery details for fulfilment.
- Website contact forms -- when you submit an enquiry or request via this website.
How We Use Your Data
We use your personal data only for the following purposes:
Order fulfilment
Processing and dispatching your orders from our UK warehouse, providing tracking numbers.
Customer communication
Responding to product enquiries, confirming stock, pricing, and delivery arrangements.
After-sales support
Handling warranty claims, product issues, replacements, and resolving complaints.
Legal and accounting obligations
Maintaining transaction records as required by UK law and HMRC regulations.
We do not use your data for automated decision-making, profiling, or unsolicited marketing without your consent.
Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases for processing your personal data:
Contract
Processing necessary to fulfil your order or trade agreement.
Legitimate Interest
Responding to enquiries and maintaining business records.
Legal Obligation
Compliance with UK tax and financial reporting requirements.
Data Sharing & Third Parties
We do not sell, rent, or trade your personal data. We may share data with the following parties only where necessary:
- UK warehouse and logistics providers -- to dispatch orders and provide tracking information.
- Payment processors -- PayPal and UK bank transfer services, solely for transaction processing.
- Trade platform (Dajianyuncang) -- for orders placed through that platform, subject to their own privacy terms.
- Legal or regulatory authorities -- if required by law, court order, or HMRC.
In dropship arrangements, trade partners provide end-consumer delivery details to us. We use that data solely for fulfilment and do not retain it beyond what is operationally required.
Data Retention
We retain personal data only for as long as necessary:
| Data Type | Retention Period |
|---|---|
| Order and transaction records | 7 years (HMRC requirement) |
| Delivery and contact details | 2 years after last order |
| After-sales correspondence | Duration of warranty + 1 year |
| General enquiries (no order placed) | 12 months |
Your Rights Under UK GDPR
You have the following rights regarding your personal data. To exercise any of these rights, please contact us via WhatsApp.
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete data.
Right to Erasure
Request deletion of your data where there is no legal reason to retain it.
Right to Restrict Processing
Ask us to limit how we use your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.
Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include restricted access to order records, secure payment handling through established processors, and limiting data sharing to only what is operationally necessary.
While we take data security seriously, no method of transmission over the internet is completely secure. WhatsApp communications are end-to-end encrypted by default.
Cookies & Website Data
This website may use essential cookies to ensure basic functionality. We do not use tracking, advertising, or third-party analytics cookies without your consent. If cookies are used beyond essential purposes, a separate cookie notice will be displayed.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our operations or legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of our services after any changes constitutes your acceptance of the updated policy.
Ready to start a trade conversation?
UK stock. Fast dispatch. Straightforward terms. Reach out via WhatsApp -- no forms, no waiting.
WhatsApp Damon Hou