1Who we are
The data controller is Blankspace.
For any question about this policy or your personal data, write to privacy@blankandspace.com. Our Data Protection Officer can be reached at dpo@blankandspace.com.
2Information we collect
Information you give us: your name, email address, telephone number, delivery and billing address, the pieces, configurations and coverings you order or save, and any notes you share with your advisor or design consultant.
Information created when you use the site: your wishlist, your selection, the pages you visit and the preferences you set. Wherever possible this is kept on your own device rather than on our servers.
Payment information is entered on the secure page of our payment provider and is never stored by Blankspace. We receive only confirmation of the payment and the last four digits of the card.
Technical information: when you load a page, our hosting provider receives your IP address, browser type and the time of the request, as with any website.
Anonymous usage signals: unless your browser sends Do Not Track or Global Privacy Control, the site sends anonymous signals such as a room width range, the piece viewed or that a piece was added to the bag. They contain no personal data, no photos and no free text, and cannot be linked to you.
Room photos you add to shape the store or to see a piece in your room are sent once to be read and are never saved.
3How we use it
To make, deliver and service the pieces you order, including white-glove delivery, placement and warranty care.
To answer requests, book consultations and prepare design proposals with your advisor.
To keep your account, wishlist and selection available from one visit to the next.
To send our newsletter, only if you have asked for it. Every message carries a one-click unsubscribe link.
To meet our legal, tax and accounting obligations and to protect the security of the site.
4Legal bases
Under EU Regulation 2016/679 (GDPR) we rely on the performance of a contract with you for orders and services, on your consent for newsletters and optional features, on our legitimate interest in running and securing the site, and on legal obligation for tax and accounting records.
5Sharing
We never sell or rent personal data. We share it only with the people who help us serve you: carriers and white-glove delivery teams, our payment provider, our hosting provider and the email service that sends our messages. Each is bound by contract to use the data only on our instructions.
We may disclose information when the law requires it, or to protect the rights and safety of our clients, our staff and the public.
6International transfers
Blankspace serves clients in the United States, Europe and Switzerland. Where personal data travels outside the European Economic Area, we rely on the European Commission’s Standard Contractual Clauses or an adequacy decision, together with appropriate security measures.
7How long we keep it
Order and invoice records are kept for as long as tax and accounting law requires. Warranty records are kept for the length of the warranty. Account data is kept while your account is open and deleted within 30 days of a request to close it. Newsletter data is kept until you unsubscribe.
8Your rights
You may ask to access, correct, delete or receive a copy of your personal data, to restrict or object to its use, and to withdraw consent at any time without affecting earlier processing. Write to privacy@blankandspace.com and we will reply within 30 days.
If you live in the European Union or the United Kingdom you may also complain to your local data protection authority.
9California residents
Under the California Consumer Privacy Act, as amended by the CPRA, you have the right to know what personal information we collect and how it is used, to request its deletion or correction, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising.
10Security
The site is served only over encrypted connections, access to client data is limited to the people who need it, and our partners are chosen for their security standards. No system is perfectly secure, but we take every reasonable step to protect what you entrust to us.
11Children
Our site and services are intended for adults. We do not knowingly collect personal data from anyone under 16.
12Changes to this policy
We may update this policy as our services or the law change. The date at the top of the page shows the latest version, and we will tell account holders by email about any significant change.