Privacy Policy

Last updated: 7 August 2026

Klinai Ltd (“Klinai”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit or use our website at https://www.istikbalfurniture.co.uk, purchase products from us online or in our store, contact us, use our services, or otherwise interact with us.

For the purposes of applicable UK data protection legislation, Klinai Ltd is responsible for the personal data processing described in this Privacy Policy.

Klinai Ltd
Company number: 10955481
Registered office: 75 Rushey Green, London, SE6 4AF, United Kingdom

If you have any questions about this Privacy Policy or how we use your personal data, please contact us at store@klinai.co.uk.

1. Who We Are

Klinai Ltd operates an Istikbal Furniture retail business in the United Kingdom, including our retail premises in Catford, London, and our online store at https://www.istikbalfurniture.co.uk.

This Privacy Policy applies to personal data collected through our website, online sales activities, retail store, customer service interactions, marketing activities and other interactions with us.

2. What Personal Data Do We Collect?

The personal data we collect depends on how you interact with us.

Information you provide to us

This may include:

your name;
billing and delivery address;
email address;
telephone number;
account login details;
order and purchase information;
information contained in communications you send to us;
information provided when making an enquiry;
information provided when submitting a product review;
information provided when contacting us through our contact forms or other communication channels;
information provided when requesting a return, refund or other after-sales service;
information provided when participating in promotions or other activities.

Payment information

When you purchase from us, payment information is processed through third-party payment service providers.

We may receive information such as payment status, transaction references and other information necessary to confirm and administer your payment and order.

Payment card details may be processed directly by the relevant payment service provider rather than being stored by us in full.

Finance applications

If you choose to use a finance option for your purchase, your application may be processed by a third-party finance provider.

The finance provider may require personal and financial information to assess and process your application and may carry out relevant eligibility, affordability or credit checks.

We may provide information necessary to identify your purchase and process your finance application.

The finance provider processes personal data in accordance with its own privacy policy and applicable data protection and financial services requirements.

Information collected automatically

When you visit or use our website, certain technical information may be collected automatically. This may include:

IP address;
browser type and version;
device type;
operating system;
language and regional settings;
referring website or URL;
pages visited;
approximate location derived from technical information;
information about how you use our website;
date and time of visits;
technical information about your interaction with our website.

Some of this information may be collected through cookies and similar technologies. Further information is provided in our Cookie Policy.

Information collected when you visit our store

When you visit our retail premises, we may collect personal data in connection with your interaction with our staff, purchases, enquiries and other services.

Our store also operates CCTV for security and safety purposes.

3. When Do We Collect Your Personal Data?

We may collect personal data when you:

visit or use our website;
create a customer account;
place an order;
make a purchase using guest checkout;
request information about our products or services;
contact us by telephone, email, WhatsApp or other available communication methods;
submit a contact form;
submit a product review;
request a return, refund or other after-sales service;
apply for finance;
visit our retail premises;
interact with us through social media;
participate in promotions or other activities;
otherwise provide information to us voluntarily.

We may also receive information from third-party service providers where necessary for payment processing, delivery, finance, security, marketing, analytics or other legitimate business purposes.

4. How Do We Use Your Personal Data?

We process personal data only where we have a lawful basis to do so.

Depending on the circumstances, we may process your personal data to:

Provide our products and services

We use personal data to:

process and fulfil orders;
arrange deliveries;
process payments;
process returns, refunds and exchanges;
provide customer service;
respond to enquiries;
manage customer accounts;
provide after-sales support;
administer finance applications where applicable.

Perform our contract with you

We may process your personal data where necessary to enter into or perform a contract with you, including processing your order, arranging delivery and administering payment.

Comply with legal obligations

We may process personal data where necessary to comply with legal, regulatory, accounting, tax or other obligations.

Pursue our legitimate interests

We may process personal data where necessary for our legitimate interests, provided that those interests are not overridden by your rights and interests.

These interests may include:

operating and managing our business;
improving our website, products and services;
maintaining website and information security;
preventing and detecting fraud, theft and other unlawful activity;
protecting customers, employees and visitors;
operating CCTV at our retail premises;
managing customer relationships;
handling complaints and disputes;
analysing website use and business performance;
administering marketing activities;
exercising or defending legal rights.

With your consent

Where consent is required by law, we will ask for your consent before carrying out the relevant processing.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Marketing Communications

We may use your personal data to send marketing communications where permitted by applicable law and in accordance with your marketing preferences.

Marketing communications may include information about products, services, offers and promotions.

Where consent is required, we will obtain it before sending electronic marketing communications.

You can stop receiving marketing communications at any time by using the unsubscribe option included in a marketing message or by contacting us.

We will continue to send essential service communications where necessary, such as information relating to an order, delivery, payment or service you have requested.

We may use third-party marketing and advertising platforms to support our marketing activities where permitted by law.

6. Website Analytics, Advertising and Social Media

We use digital services to understand how visitors use our website, improve our website and measure the effectiveness of our marketing.

These services may include analytics, advertising, social media and search-related technologies.

Depending on the service and technology used, these providers may process information such as IP addresses, device information, website interactions, advertising identifiers and information about your use of our website.

Where cookies or similar technologies require consent, we will obtain the required consent before using them for those purposes.

Further information is provided in our Cookie Policy.

7. Cookies and Similar Technologies

We use cookies and similar technologies to operate our website, provide requested functionality, remember preferences, understand website usage and, where permitted, support advertising and marketing activities.

Some cookies are necessary for the operation and security of the website and may be used where an applicable legal exemption applies.

Non-essential cookies and similar technologies, including those used for analytics and certain advertising purposes, will only be used where the required consent has been obtained.

Our Cookie Policy provides further information about the cookies and similar technologies used on our website and how you can manage your preferences.

You can change or withdraw your cookie preferences through the cookie settings available on our website.

8. Who Do We Share Your Personal Data With?

We may share personal data with third parties where necessary for the purposes described in this Privacy Policy and where we have a lawful basis for doing so.

These third parties may include:

Payment service providers

We may share relevant information with payment service providers where necessary to process payments, administer transactions and help prevent fraud.

Finance providers

Where you choose to apply for finance, we may share relevant information with a finance provider for the purposes of processing your finance application and purchase.

Delivery and logistics providers

We normally use our own delivery team to deliver products.

Where necessary, we may use third-party courier or delivery providers. We may provide them with information necessary to complete the delivery, such as your name, delivery address, telephone number and order information.

Website, hosting and technology providers

We may use third-party providers that support the operation, hosting, maintenance, security and development of our website and related systems.

Analytics and advertising providers

We may share or permit access to information through analytics, advertising and marketing services where necessary for analytics, advertising, campaign measurement and related purposes and where permitted by applicable law.

Communication and customer service providers

We may use third-party communication and customer service services to receive enquiries and communicate with customers.

Professional advisers and authorities

We may share personal data with professional advisers, insurers, law enforcement authorities, regulators, courts, government bodies or other parties where necessary or required by law.

Business transfers

If our business is reorganised, sold, merged, financed or transferred, personal data may be transferred as part of that transaction where permitted by law.

We do not sell your personal data.

9. CCTV and Store Security

We operate CCTV surveillance at our retail premises for purposes including the safety and security of our customers, visitors, employees and property, the prevention and detection of crime, and the investigation of incidents.

CCTV may capture images of individuals who enter or move within areas covered by the cameras.

We may access live CCTV footage where necessary for security and safety purposes and may make recordings where necessary to investigate an incident or address a security concern.

We generally rely on our legitimate interests as the lawful basis for operating CCTV where this is necessary and proportionate for security, safety and crime prevention purposes.

CCTV footage is retained only for as long as reasonably necessary for the purposes for which it is processed. Where footage is required in connection with an incident, investigation, legal claim or law enforcement request, it may be retained for longer where necessary and permitted by law.

Access to CCTV footage is restricted to authorised persons and relevant service providers where necessary.

We may disclose CCTV footage to the police, law enforcement authorities, insurers, legal advisers or other relevant parties where necessary and permitted or required by law.

CCTV signage is displayed at our premises to inform individuals that CCTV is in operation.

10. International Transfers of Personal Data

Some of our service providers or technology providers may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that your personal data continues to receive an appropriate level of protection.

Depending on the circumstances, this may include using an adequacy decision, appropriate contractual safeguards or another lawful transfer mechanism recognised under applicable UK data protection law.

11. How Long Do We Keep Your Personal Data?

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

The appropriate retention period depends on factors including:

the nature and purpose of the personal data;
whether there is an ongoing relationship with you;
our legal, accounting and tax obligations;
the need to resolve disputes or enforce agreements;
fraud prevention and security requirements;
applicable limitation periods.

Some financial, transaction and business records may need to be retained for periods required by applicable accounting, tax and other legal requirements.

Where personal data is no longer required, we will securely delete it or anonymise it where appropriate.

12. How Do We Protect Your Personal Data?

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include appropriate access controls, authentication, security monitoring and procedures for managing personal data.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

13. Customer Accounts and Guest Checkout

You may create a customer account on our website where this functionality is available.

When you create an account, we process the information necessary to create and administer the account.

Our website also allows customers to place orders using guest checkout. You do not need to create an account simply to purchase products where guest checkout is available.

Account information may be retained for as long as necessary to administer your account, provide services to you, comply with legal obligations, resolve disputes and protect our legitimate interests.

You may contact us if you wish to request access to, correction or deletion of personal information associated with your account, subject to applicable legal requirements.

14. Product Reviews and User Content

Where product reviews or other customer-generated content are enabled on our website, information you submit may be displayed publicly in connection with your review.

You should avoid including unnecessary personal information in a review or other publicly visible content.

We may process information contained in reviews for purposes including displaying the review, administering our website, responding to customer feedback and improving our products and services.

15. Special Category Data

In certain circumstances, you may provide us with information that falls within special categories of personal data under applicable data protection law, such as information relating to health or accessibility requirements.

For example, this may occur where you provide information about a health or accessibility requirement in connection with a delivery, customer service request, complaint, accident or incident.

We will only process such information where necessary and where we have an appropriate lawful basis and condition under applicable data protection law.

We will only use such information for the specific purpose for which it was provided and will not use it for unrelated purposes.

16. Information You Are Required to Provide

In some circumstances, we need certain personal data to provide a product or service, process an order, arrange delivery, process payment, administer finance or comply with a legal obligation.

Where information is necessary for these purposes, failure to provide the required information may mean that we are unable to provide the relevant product or service, process your order or fulfil the relevant transaction.

17. Your Data Protection Rights

Subject to applicable law, you may have rights in relation to your personal data, including:

the right to be informed about how your personal data is used;
the right to request access to personal data we hold about you;
the right to request correction of inaccurate or incomplete personal data;
the right to request erasure of your personal data in certain circumstances;
the right to request restriction of processing in certain circumstances;
the right to object to certain processing, including processing based on legitimate interests and direct marketing;
the right to data portability in certain circumstances;
rights relating to automated decision-making and profiling where applicable;
the right to withdraw consent where processing is based on consent.

These rights are subject to certain legal conditions and exemptions. We may need to retain or continue processing certain information to comply with a legal obligation, establish or defend legal claims, prevent fraud or meet other lawful requirements.

18. How to Exercise Your Rights

If you wish to exercise any of your data protection rights, please contact us at:

Email: store@klinai.co.uk

Please provide enough information for us to understand your request and, where reasonably necessary, to verify your identity.

We will normally respond to valid data protection requests without undue delay and within one calendar month of receiving the request.

Where permitted by law, this period may be extended by up to a further two months where a request is complex or we receive a number of requests. If an extension is required, we will inform you within the applicable period.

We will not normally charge a fee for exercising your data protection rights. Where permitted by law, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.

19. Your Right to Object

You have the right to object to certain processing of your personal data.

You have an absolute right to object to the processing of your personal data for direct marketing purposes.

Where we process your personal data based on legitimate interests, you may also have the right to object to that processing. We will consider your objection in accordance with applicable data protection law.

You can object to direct marketing at any time by using the unsubscribe mechanism provided in our marketing communications or by contacting us.

20. Automated Decision-Making and Profiling

We may use analytics and advertising technologies that involve analysing information about website use, interests or interactions for purposes such as measuring advertising effectiveness and delivering relevant advertising, subject to applicable law and consent requirements.

We do not currently make decisions about customers based solely on automated processing that produce legal effects or similarly significant effects on them.

Where applicable law gives you rights in relation to automated decision-making or profiling, those rights will apply.

21. Children

Our website and services are intended for a general audience and are not directed specifically at children.

We do not knowingly collect personal data from children where this is not appropriate or permitted by law.

If you believe that a child has provided personal data to us in circumstances where this should not have happened, please contact us using the details provided in this Privacy Policy.

22. Third-Party Websites and Services

Our website may contain links to third-party websites, applications, social media platforms or other services.

These third parties may process personal data in accordance with their own privacy policies and terms.

We are not responsible for the privacy practices of third-party websites or services that we do not control.

You should review the relevant third party’s privacy information before providing personal data to them.

23. Data Breaches and Security Incidents

We maintain procedures designed to identify, assess and respond to personal data breaches and other security incidents.

Where applicable law requires us to notify the Information Commissioner’s Office or affected individuals of a personal data breach, we will do so in accordance with applicable legal requirements.

24. Complaints

If you have concerns about how we have handled your personal data, we encourage you to contact us first so that we can investigate and try to resolve your concern.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

Further information about making a complaint is available on the ICO’s website.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, technology, legal requirements or data processing practices.

When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.

Where appropriate, we may provide additional notice of significant changes.

We recommend checking this Privacy Policy periodically to remain informed about how we use and protect personal data.

26. Contact Us

If you have any questions about this Privacy Policy, how we process personal data, or wish to exercise your data protection rights, please contact us: