Privacy & Cookie Policy

Nook&Desk Ltd, 76 Laneside Avenue, Sutton Coldfield, B74 2BU, United Kingdom, is the data controller responsible for your personal information. You can contact us at info@nookdesk.co.uk or +44 7405 725892.

Order & account details. When you place an order we collect your name, company name (if given), email, phone number, delivery address and any order notes you add, so we can fulfil and communicate with you about your order.

Your account. If you create an account we also keep your password (securely hashed — we can’t read it), saved delivery addresses, saved product lists, quote requests and any “back in stock” requests you make.

Product reviews. If you review a product you’ve bought, we publish your rating, what you wrote and your first name with the initial of your last name (for example “Sarah K.”) once we’ve checked it. We never show your email or company. Deleting your account deletes your reviews.

Team accounts. If you join a business’s team account, the other people in that team can see your name and email, use the saved lists and delivery addresses you add, and the team’s owners and managers can see and approve the orders you place. A saved list you share by link can be seen by anyone you give the link to, until you stop sharing it. Repeat orders you set up are kept until you delete them.

Payment information. We do not collect or store your card details. Payments are handled entirely by Stripe — see Payment processing.

Browsing information. We collect anonymous information about pages viewed on our site to understand how it’s used — see Cookies.

We use your information to:

• process and fulfil your orders, and contact you about them (performance of a contract);
• keep accounting and tax records as required by law (legal obligation);
• understand how our site is used and improve it, and keep it secure (our legitimate interest);
• respond to enquiries you send us.

We never sell your personal information, and we don’t use it for marketing without your consent.

Emails we send. We email you about orders you place (confirmation and invoice, shipping updates, refunds), quotes you request, and anything you ask us to tell you about, such as a product coming back in stock. These are part of the service you asked for. A few days after an order is delivered we may also send one email asking you to review what you bought — you can unsubscribe from these.

Marketing emails. Only if you tick “Email me offers” at checkout, when creating an account, or in your account settings, we may send occasional offers and newsletters, a reminder when you’re likely to need to reorder something you buy regularly, a “we’ve missed you” email if you haven’t ordered for a while, and a single reminder if you start checking out but don’t finish. Every marketing email has an unsubscribe link, and you can change your choice in your account at any time.

Checkout is handled by Stripe, our payment processor. When you pay, you’re taken to Stripe’s own secure payment page — your card details go directly to Stripe and never pass through our servers. We only receive confirmation that payment succeeded (or failed), an order/payment reference, and the processing fee Stripe charged us. While you’re on Stripe’s payment page, Stripe sets its own cookies for fraud prevention, governed by Stripe’s privacy policy.

Cookies are small files stored on your device. We use as few as possible, and none for third-party advertising or cross-site tracking.

• nd_consentNecessary

  Remembers your choice in the cookie banner, so we don’t ask on every page.

  Duration: 6 months

• nd_visitorAnalytics (optional)

  An anonymous, randomly generated ID that lets us tell when a visitor comes back on another day. Only set if you choose “Accept all”. We don’t link it to your identity.

  Duration: 1 year

• nd_customerNecessary

  Keeps you signed in to your customer account. Only set when you sign in.

  Duration: 30 days

• qb_session / qb_2fa_pendingNecessary

  Keep staff signed in to the admin panel, and hold a sign-in for a few minutes while a two-factor code is entered. Not used for ordinary site visitors.

  Duration: 7 days / 10 minutes

• Basket contentsNecessary

  Stored in your browser’s local storage (not a cookie) so your basket is still there if you come back later.

  Duration: Until you clear it

• Compare listNecessary

  Stored in your browser’s local storage (not a cookie): the products you tick “Compare” on, so you can see them side by side. Only used when you ask for it.

  Duration: Until you clear it

• Recently viewedPreferences (optional)

  Stored in your browser’s local storage (not a cookie): the last few products you looked at, so we can show them again. Only kept if you choose “Accept all”, and wiped if you switch to “Essential only”.

  Duration: Until you clear it

• Stripe cookiesThird-party

  Set by Stripe on its own payment page for fraud prevention during checkout.

  Duration: Set by Stripe

Counting visits without cookies. To see which pages are popular, we count page views without storing anything on your device. To avoid counting one person twice in a day, our server briefly combines your IP address and browser type with a random code that changes every day and turns them into an anonymous number. Your IP address isn’t stored, and because the random code is thrown away each day, the number can’t be traced back to you or linked across days. We do this in our legitimate interest of understanding how the site is used.

When you first visit, we ask whether you’re happy for us to set the optional analytics cookie and remember the products you’ve viewed. You can change your mind at any time using “Cookie settings” at the bottom of every page.

Most browsers let you block or delete cookies in their settings. Blocking the necessary cookies above may stop checkout or the admin panel from working properly.

We keep order records for as long as needed to fulfil the order and to meet our legal obligations — typically up to 6 years, in line with UK tax and accounting record-keeping requirements. Anonymous analytics data is kept only as long as it’s useful to us.

We share the minimum necessary information with:

• Stripe, to process your payment;
• delivery partners such as Royal Mail, who receive your name, delivery address, phone number and email to deliver your order and send tracking updates;
• our IT, hosting and email providers, who help us run this website and send our emails;
• regulators or authorities, where we’re required to by law.

We don’t sell or rent your personal information to anyone.

Under UK data protection law, you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct inaccurate information;
• ask us to delete your information, in certain circumstances;
• object to or restrict how we use your information;
• ask for your information in a portable format.

If you have an account, you can download a copy of your data or delete your account yourself under My account → Account details. Deleting your account removes your login, addresses, lists and requests, and stops marketing emails; records of orders you’ve placed are kept for 6 years as UK tax law requires.

To exercise any of these rights, email info@nookdesk.co.uk. If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office (ICO).

Nook&Desk Ltd is a trade and wholesale supplier. Our site is intended for business customers and is not directed at, or intended for use by, children.

We may update this policy from time to time, for example if we change how our site works. We’ll update the “last updated” date at the top of this page when we do.

Questions about this policy or your data? Get in touch at info@nookdesk.co.uk or see our contact details.