This privacy policy sets out how Computers for Flooring Limited collects and uses personal information about you (“personal data”), in accordance with the Data Protection Act 2018, the UK GDPR, and the EU GDPR where applicable (together, the “Data Protection Legislation”).
We want to be open about how we collect, process and use personal data, so please read this policy carefully.
By using our website, products and services, or otherwise providing us with personal data, you agree that this privacy policy applies to you.
We may change this policy by updating this page, so please check back from time to time for the most current version. This privacy policy was last updated on 17 August 2026.
1. About us
1.1. Computers for Flooring Limited (“we”, “us”, “our”) provides Carman, a business management software platform for flooring retailers, wholesalers and contractors. We are registered in England and Wales under company number 07318092 and our registered office is at 107 Cheapside, London, EC2V 6DN. Our trading address is 1 Drake Walk, Brigantine Place, Cardiff, CF10 4AN.
1.2. We are part of the ClearCourse group of companies. From time to time we may share personal data with other members of the group for financial, management or administrative purposes, and other group companies may share personal data with us for the same reasons.
1.3. Depending on the circumstances, we act as either a data controller or a data processor:
- Data controller — where you deal with us directly. For example, when you contact us through our website, enquire about Carman, or are a business contact at one of our customers or suppliers. In these cases we decide how your personal data is held and used.
- Data processor — where we host and support Carman on behalf of a business customer, and that customer’s own data (including data about their staff and their end customers) is stored in the system. In these cases the business customer is the data controller and decides how the data is used. We process it only in line with our contract with them.
1.4. We take your privacy seriously regardless of which role we are in. Contact details for privacy enquiries are in section 9.
2. Information we collect
2.1. When you contact us. If you fill in our contact form, email us, call us or write to us, we will keep a record of that correspondence. This typically includes your name, email address, telephone number, company name and whatever you tell us in your message.
2.2. When you use our website. We may collect technical information automatically, such as your IP address, browser type, and information about the pages you visit. See section 4 for more on cookies.
2.3. When you are a customer or supplier contact. We hold business contact details (name, job title, business address, email, phone number), records of our dealings with you, details of the products and services we provide, and associated billing and payment information.
2.4. Data held inside Carman. Where we host Carman for a business customer, that system will contain personal data entered by that customer — for example details of their own customers, orders, quotes and staff. We process this only as a data processor, on that customer’s instructions.
2.5. It is your responsibility to ensure that, where you provide us with personal data about a third party, you have lawful grounds to do so.
2.6. Please tell us if your details change so we can keep our records accurate.
3. Our legal grounds for processing
3.1. Where we act as a data controller, we rely on one or more of the following:
- Contract — to provide the products and services you or your organisation have asked for, and to administer our agreement with you.
- Legal obligation — to comply with our statutory, regulatory, financial and tax obligations.
- Legitimate interests — for statistical, management and business development purposes, including responding to enquiries, improving our products, seeking feedback, and telling you about changes to our services. We only rely on this where your interests, rights and freedoms do not override those interests.
- Consent — for some purposes, including certain marketing. Where we rely on consent you can withdraw it at any time by contacting us.
3.2. We may rely on more than one ground for the same processing, depending on the purpose.
3.3. Where we act as a data processor, the business that provided your personal data to us is responsible for establishing its own lawful grounds. We process the data only on that business’s instructions and for the purposes of our contract with them.
4. Cookies and analytics
4.1. When you visit our website we may collect information automatically through cookies and similar technologies. Cookies are small text files placed on your device. They may collect your IP address, support security and authentication, tell us which pages are visited and how often, and enable certain site features.
4.2. We may use session cookies (erased when you close your browser) and persistent cookies (which remain until they expire or you delete them), and we may use both our own cookies and third-party cookies, including website analytics tools that help us understand how the site is used.
4.3. General information about cookies and how to delete or block them is available from the Information Commissioner’s Office at https://ico.org.uk/your-data-matters/online/cookies/. Because cookie management differs between browsers, please check your own browser’s documentation. If you block cookies that are necessary for the site to function, parts of the site may not work correctly.
4.4. Our website may contain links to other websites. Once you leave our site we have no control over those websites and we do not accept responsibility for how they handle your information. Please check the privacy statement of any site you visit.
5. Payments
5.1. Card payments taken through CarmanPay are processed by our payment provider within the ClearCourse group. Cardholder data is captured and handled by that provider’s systems. Computers for Flooring does not store, process or transmit full card details on its own systems.
6. Sharing your information
6.1. We may share your personal data with:
- other companies within the ClearCourse group, for the purposes described in section 1.2;
- service providers who support our business or help us deliver our products and services — for example hosting and infrastructure providers, payment providers, communications providers and customer relationship tools;
- professional advisers, auditors and regulators where we are required or permitted to do so; and
- where we act as a data processor, the business customer who provided the data to us.
6.2. We always put a written contract in place with any third party before giving them access to personal data, and we require them to protect it to the same standard we do.
6.3. If we sell, transfer or merge parts of our business, or acquire another business, personal data may be transferred as part of that change. Where that happens, it will continue to be handled in line with this policy or the acquiring party’s policy.
6.4. Other than as set out above, we do not rent, sell or distribute your personal data to third parties unless we have your permission or are required or permitted by law to do so.
7. Storage, security and retention
7.1. Personal data collected through our website and services may be stored and processed in the UK, the European Economic Area, or another country in which we, our group companies or our service providers maintain facilities. If we transfer personal data outside the UK, we will only do so in compliance with the Data Protection Legislation.
7.2. We take reasonable steps to keep your personal data secure, using appropriate technical, physical and organisational measures to prevent unauthorised access, loss or disclosure. We require our suppliers to commit in writing to doing the same.
7.3. Where we act as a data controller, we keep personal data only for as long as necessary for the purpose it was collected for, plus any period we are required to keep it for legal, contractual, accounting or tax reasons. In deciding how long to keep data we consider the original purpose, the lawful ground relied on, the type and amount of data, and whether the purpose could be achieved another way.
7.4. Where we act as a data processor, we retain personal data for the period agreed in our contract with the business that engaged us, unless the Data Protection Legislation requires otherwise.
8. Your rights
8.1. Under the Data Protection Legislation you have the following rights in relation to your personal data:
- To be informed about how your data is used — this policy provides much of that information.
- Of access — to confirm whether we hold your personal data and obtain a copy of it.
- To rectification — to have inaccurate or incomplete data corrected.
- To erasure — to ask us to delete your data where there is no compelling reason to continue holding it.
- To restrict processing — in certain circumstances, such as while the accuracy of data is being checked.
- To data portability — in limited circumstances, to receive your data in a portable format.
- To object — to processing based on legitimate interests, and to direct marketing at any time.
- In relation to automated decision-making and profiling — safeguards against decisions taken solely by automated means.
- To withdraw consent — where our processing is based on your consent. This does not affect the lawfulness of processing carried out before you withdrew it.
8.2. To exercise any of these rights, contact us using the details in section 9. We may need to verify your identity first. We will normally respond within one month; if we need longer, we will let you know. We do not charge a fee unless a request is manifestly unfounded, excessive, or repetitive.
8.3. Where we act as a data processor, we are not able to respond to your request ourselves. We will pass it to the business that provided us with your data so that they can decide how to respond.
8.4. More detailed information about your rights is available from the Information Commissioner’s Office at www.ico.org.uk.
9. Marketing
9.1. We may send you information about our products and services from time to time, along with announcements and articles we think may interest you, including those of other ClearCourse group companies.
9.2. We may use marketing tools to track engagement with our communications and monitor the performance of our campaigns.
9.3. You can ask us to stop contacting you for marketing purposes at any time, either by clicking “unsubscribe” in any marketing email or by contacting us using the details below.
10. How to contact us
If you have any questions about this privacy policy, the data we hold about you, or you would like to exercise one of your rights, please contact us:
Email: info@computersforflooring.com Telephone: 02921 679 719 Post: Computers for Flooring Limited, 1 Drake Walk, Brigantine Place, Cardiff, CF10 4AN
If we wish to contact you, we may do so by phone, email, text or post. If you tell us you prefer a particular method, we will try to use it.
If you are unhappy with how we have handled your personal data, please contact us first and we will do our best to put it right.
11. How to contact the regulator
If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:
Website: https://ico.org.uk/global/contact-us/ Telephone: 0303 123 1113
If you are based in the European Economic Area, you may instead contact your local supervisory authority.