Privacy policy

Privacy Policy

Last updated: 24 September 2026

This policy explains how RUGMASTER LTD, trading as Rugoutlet.uk, collects and uses personal information when you use our website, contact us, visit our showroom or buy from us.

Who is responsible for your information?

RUGMASTER LTD is the controller of the personal information described in this policy.

Company number: 13034631
Registered office: 24 Aylmer Parade, Aylmer Road, London N2 0PE, United Kingdom
Email: info@rugoutlet.uk
Telephone: 020 8341 9191

Information we collect

Depending on how you interact with us, we may collect:

  • your name, billing and delivery addresses, email address and telephone number;
  • order, payment status, refund, delivery and transaction information;
  • account details and preferences;
  • messages, enquiries, complaints, reviews and other communications;
  • device, browser, IP address, cookie and website-usage information;
  • marketing preferences and responses; and
  • fraud-prevention and security information.

Payment-card details are normally processed by our payment providers. We do not need to receive the full card number in order to fulfil an order.

How we use information and our lawful bases

  • Contract: to process orders, take payment, arrange delivery, manage returns and provide customer support.
  • Legal obligation: to keep accounting and tax records, respond to lawful requests and meet consumer, product-safety and other legal duties.
  • Legitimate interests: to prevent fraud, secure and improve our website, manage stock, understand business performance, train staff and handle or defend legal claims, where those interests are not overridden by your rights.
  • Consent: where required for direct marketing, non-essential cookies or another activity. You may withdraw consent at any time.

Marketing

We send electronic marketing where we have the permission or other lawful basis required to do so. You can unsubscribe using the link in a marketing message or by emailing us. Unsubscribing from marketing does not stop service messages about an order.

Cookies and similar technologies

We use cookies and similar technologies for essential store functions and, where permitted, analytics, personalisation and advertising. Where consent is required, non-essential technologies should not be used until you make a choice. You can review or change available choices through the site's privacy or cookie controls. Browser settings may also allow you to block or remove cookies.

Who we share information with

We share information only where reasonably necessary, including with:

  • Shopify, which hosts and supports our online store;
  • payment processors, banks and fraud-prevention providers;
  • couriers, delivery and return-service providers;
  • email, customer-service, analytics and advertising providers used by us;
  • IT, hosting and security providers;
  • accountants, insurers, legal advisers and other professional advisers; and
  • regulators, courts, law-enforcement bodies or another party where disclosure is required or permitted by law.

We may also transfer relevant information in connection with a sale, restructuring or transfer of all or part of our business, subject to appropriate confidentiality and legal protections.

International transfers

Some service providers may process information outside the United Kingdom. Where UK data-protection law requires it, we use an adequacy decision, approved contractual safeguards or another lawful transfer mechanism and apply appropriate protections.

How long we keep information

We keep information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, fraud-prevention and dispute-handling requirements. Order and transaction records are normally retained for up to six years after the relevant transaction or longer where required for an active dispute or legal obligation. Other records are reviewed and deleted or anonymised when they are no longer needed.

Security

We use appropriate organisational and technical measures designed to protect personal information. No online service can guarantee absolute security, so please use a strong, unique password if you create an account and contact us if you suspect unauthorised use.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to:

  • ask for access to your personal information;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete information;
  • ask us to restrict processing;
  • object to processing based on legitimate interests or to direct marketing;
  • receive certain information in a portable format; and
  • withdraw consent where processing relies on consent.

These rights are subject to legal conditions and exceptions. To exercise a right, email info@rugoutlet.uk. We may need information to verify your identity.

Complaints

Please contact us first so that we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office (ICO). Current contact details are available at ico.org.uk/make-a-complaint.

Changes to this policy

We may update this policy to reflect changes in our services, providers or legal obligations. The current version and its update date will be published on this page.