Mosaic Harbor Privacy Policy
Last updated: 5 November 2026
Mosaic Harbor respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, store and share personal data when you contact us, use our website, or enquire about or receive our interior design services. We handle personal data in accordance with applicable UK data protection law, including the UK GDPR and the Data Protection Act 2018.
Mosaic Harbor is an interior design business operating in England. In this policy, “we”, “us” and “our” refer to Mosaic Harbor. We act as the controller of the personal data described here. You can contact us using the contact details provided on our website or in your agreement with us.
Depending on how you interact with us, we may collect:
• Contact and identity details, such as your name, email address, telephone number and postal address. • Enquiry and project information, such as your property address, design preferences, measurements, plans, photographs, budget, project requirements and communications with us. • Contract, payment and transaction information, such as services requested, invoices and payment records. Payment card details are generally handled by the relevant payment provider rather than stored by us. • Website and technical information, such as your IP address, device and browser information, and information about how you use our website, where collected through cookies or similar technologies. • Marketing preferences and records of your consent or objection to receiving marketing.
Please do not send us sensitive personal data unless it is necessary for your project and we have agreed how it will be handled.
We collect information directly from you when you contact us, request a quotation, enter into an agreement, provide project materials, make a payment or otherwise communicate with us. We may also receive information from people involved in your project, such as contractors or other professional advisers, where appropriate. Some technical information may be collected automatically when you visit our website.
We use personal data to:
• Respond to enquiries and prepare proposals or quotations. • Provide, manage and improve our interior design services and communicate with you about your project. • Arrange appointments, site visits, deliveries or work with suppliers and project collaborators where needed. • Manage payments, accounts and business records. • Operate, maintain and protect our website and business, including preventing fraud and addressing technical issues. • Send relevant marketing communications where permitted by law. You can opt out at any time. • Meet legal, regulatory and insurance requirements, and establish or defend legal claims.
We rely on one or more of the following lawful bases, as applicable:
• Contract: processing is necessary to take steps at your request before entering into a contract or to perform a contract with you. • Legitimate interests: processing is necessary for our legitimate business interests, such as responding to enquiries, managing and improving our services, keeping appropriate records and protecting our business. We consider and balance these interests against your rights and freedoms. • Legal obligation: processing is necessary to comply with a legal requirement. • Consent: where required, for example for certain cookies or electronic marketing. You may withdraw consent at any time, without affecting processing already carried out.
We may share relevant personal data with service providers who support our business, such as website hosting, IT, payment, accounting and communications providers. For a project, we may also share necessary information with contractors, suppliers, tradespeople or other professional advisers involved in delivering the services, where appropriate. We may disclose information to public authorities, regulators, courts or professional advisers where required or permitted by law, or in connection with a legal claim or business transfer.
We require service providers who process personal data on our behalf to protect it and use it only in accordance with our instructions. We do not sell your personal data.
If personal data is transferred outside the United Kingdom, we will ensure that an appropriate transfer mechanism and safeguards are in place as required by applicable data protection law.
We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including to provide services, maintain business and financial records, resolve disputes and meet legal obligations. The appropriate retention period depends on the type of information and the circumstances. When information is no longer needed, we will securely delete or anonymise it where appropriate.
Our website may use cookies or similar technologies to function, understand website usage or support other features. Where required by law, we will ask for your consent before using non-essential cookies. You can manage cookies through our website’s cookie controls, if available, and through your browser settings. Disabling certain cookies may affect website functionality.
We use appropriate technical and organisational measures designed to protect personal data from unauthorised access, loss, misuse or alteration. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Subject to applicable law, you may have the right to request access to your personal data, ask for it to be corrected or erased, restrict or object to certain processing, and request a copy of data you provided in a portable format. Where we rely on consent, you may withdraw it at any time. These rights are not absolute and may be subject to legal conditions or exceptions.
To exercise your rights, contact us using the details provided on our website or in your agreement with us. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the opportunity to address your concerns first.
Our services and website are not directed at children, and we do not knowingly collect personal data from children through them. If you believe a child has provided us with personal data, please contact us so that we can take appropriate steps.
We may update this policy from time to time. The latest version will be made available on our website, with its updated date shown above.
For questions about this policy or how we handle personal data, contact Mosaic Harbor using the contact details provided on our website or in your agreement with us.
This website may use information you choose to share, such as contact details submitted through a form, to respond to your enquiry. Please review the Privacy Policy for information about how personal data is handled and your available choices. Read the Privacy Policy