Terms and conditions · Cookie policy

Effective date: 12 April 2026

This privacy policy ("Policy") describes how Posh Design Ltd ("we", "us", "our") trading as HMO Kitchens uses personal data when you use hmokitchens.co.uk(the "Site") or when you contact us about kitchen supply, design, installation, or related services.

For the purposes of UK GDPR and the Data Protection Act 2018, we are the controller of the personal data described in this Policy unless we tell you otherwise (for example where we act solely as a processor for your organisation under a separate agreement).

Our address is Unit 5B, Waterside Business Park, 1651 Pershore Road, Birmingham, B30 3DR. Email: info@hmokitchens.co.uk. Phone: 0121 446 6859. Group website: poshdesignltd.co.uk.

1. What personal data we collect

We may collect and use the following types of information:

  • Identity and contact data: name, email address, phone number, postal address, property or site address, company or organisation name, and role.
  • Enquiry and project data: information you provide in forms, emails, calls, messages (including WhatsApp where you choose to contact us that way), surveys, or meetings: property type, number of units, budget range, timelines, specifications, photos, and other details relevant to quoting or delivering work.
  • Technical data: IP address, browser type and version, device type, general location derived from IP, pages viewed, and approximate time on page. This may come from server logs or, if you consent, analytics tools.
  • Marketing preferences: your choices about receiving marketing from us, where applicable.
  • Cookie and similar data: see our Cookie policy for how we use cookies, local storage, and related technologies.

2. How we collect personal data

We obtain personal data when:

  • you submit a form on the Site (for example contact, quote, or newsletter requests);
  • you email, telephone, or message us;
  • you attend a showroom visit, meeting, or video call with us;
  • we correspond with you in connection with a contract, warranty, or complaint;
  • you use the Site and technical data is collected automatically (and, where required, only with your consent for non-essential technologies).

3. Why we use personal data (lawful bases)

We process personal data only where we have a lawful basis under UK GDPR. These include:

  • Contract: to respond to enquiries, prepare quotations, perform agreements for the supply or installation of kitchens, manage projects, invoice, and provide after-sales support.
  • Legitimate interests: to operate and improve the Site, keep records, analyse aggregated usage, maintain security, prevent fraud, train staff, and manage our business, where those interests are not overridden by your rights.
  • Consent: where we need consent (for example certain marketing communications, or non-essential cookies and similar technologies). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
  • Legal obligation: to comply with accounting, tax, health and safety, or court or regulatory requirements.
  • Vital interests:rarely, to protect someone's life or physical safety.

4. Marketing

We will only send you marketing emails or similar promotional messages where the law allows, for example where you have opted in or where we rely on the soft opt-in for existing customers in relation to similar products and services, where applicable.

You can opt out of marketing at any time by using the unsubscribe link in emails or by contacting info@hmokitchens.co.uk.

5. Who we share data with

We may share personal data with:

  • Service providers: hosting, email, CRM, accounting, IT support, and other processors who assist our business under written terms that require them to protect data and process it only on our instructions.
  • Professional advisers: lawyers, accountants, or insurers where needed.
  • Installers, surveyors, manufacturers, and logistics partners: to the extent needed to deliver your project.
  • Authorities: regulators, law enforcement, or courts if we are required or permitted by law.

We do not sell your personal data. If we ever use analytics or advertising partners that receive personal data, we will describe that in this Policy and in our Cookie policy, and we will gate non-essential tools behind your consent where required.

6. International transfers

We generally store and process data in the UK or European Economic Area. If we use suppliers who process data outside the UK, we will ensure an appropriate safeguard applies (for example UK adequacy regulations, standard contractual clauses, or UK international data transfer agreement), unless an exception applies.

7. How long we keep data

We retain personal data only as long as necessary for the purposes above, including legal, accounting, or reporting requirements. Typical examples:

  • enquiry records: long enough to follow up and convert or close the opportunity, then a short archive period unless you become a customer;
  • contract and project files: for the life of the warranty period and claims limitation periods, and as required for tax and company records (often up to six or seven years for financial records, depending on context);
  • server logs: for a limited period for security and troubleshooting;
  • marketing suppression lists: indefinitely (to respect your unsubscribe request).

8. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration. No method of transmission over the internet is completely secure; we encourage you to use strong passwords and secure channels when sending sensitive information.

9. Your rights

Under UK data protection law you may have the right to:

  • access a copy of your personal data;
  • rectify inaccurate data;
  • erase data in certain circumstances;
  • restrict processing in certain circumstances;
  • object to processing based on legitimate interests or for direct marketing;
  • data portability for data you provided, where processing is automated and based on consent or contract;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk.

To exercise your rights, contact info@hmokitchens.co.uk. We may need to verify your identity before responding. We will respond within one month in most cases (this can be extended for complex requests).

10. Children

Our services are directed at adults and businesses. The Site is not intended for children and we do not knowingly collect data from children.

11. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects solely by automated means in connection with this Site or our standard sales process.

12. Changes to this Policy

We may update this Policy from time to time. The new version will be posted on this page with an updated effective date. If changes are material, we will take reasonable steps to notify you where appropriate.

13. Contact

Questions about this Policy or our use of personal data: info@hmokitchens.co.uk or write to us at Unit 5B, Waterside Business Park, 1651 Pershore Road, Birmingham, B30 3DR.

WhatsApp us