Privacy Policy
Last updated: 1 August 2026
1. Who we are
[LEGAL NAME LTD] ("we", "us", "our") operates [WEBSITE], trading as [BRAND]. We are the data controller for the personal data described in this policy.
- Registered address: [LEGAL ADDRESS]
- Company number: [COMPANY NUMBER]
- Contact for privacy matters: [EMAIL], or by telephone on [PHONE]
2. What data we collect
We collect only what we need to sell, deliver and support the products you order:
- Identity and contact data: your name, billing and delivery address, email address and telephone number.
- Order and payment data: the items you ordered, your order history, delivery arrangements and confirmation of payment. Card details are handled entirely by our payment provider — we do not store full card numbers.
- Technical data: IP address, device and browser type, and cookie data.
- Communications: the messages you send us by email, through a contact form, or over the phone, including sleep-trial and returns correspondence.
- Marketing preferences: whether you have opted in to marketing, and what you have opted out of.
3. Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Processing and delivering your order, arranging mattress collection, managing your account | Performance of a contract |
| Answering enquiries and providing after-sales support | Legitimate interests / contract |
| Sending marketing emails | Consent (or soft opt-in for existing customers) |
| Fraud prevention and site security | Legitimate interests |
| Analytics to improve the website | Consent (via cookies) |
| Meeting legal, accounting and tax obligations | Legal obligation |
4. Who we share it with
We share data only with the parties who help us run the business:
- Payment processors, who take and settle your payment.
- Delivery, two-person handling and courier partners, who need your address and phone number to deliver bulky items.
- Our website and hosting platform.
- Our email and marketing tools.
- Our analytics provider, where you have consented to analytics cookies.
We may also disclose data where we are legally required to, for example in response to a court order or a request from a tax authority. We do not sell your personal data.
5. International transfers
Where a provider stores data outside the United Kingdom, we make sure it is protected either by an adequacy decision or by appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
- Order and transaction records: six years, to meet UK tax and accounting rules.
- Account data: for as long as your account is active, then twelve months after you close it.
- Guarantee records: for the length of the product guarantee, so that we can honour a claim.
- Marketing data: until you unsubscribe.
- Support messages: twenty-four months from your last contact with us.
7. Your rights
Under UK GDPR you have the right to access your data, to have it corrected, to have it erased, to restrict or object to how we process it, to receive it in a portable format, and to withdraw your consent at any time.
To exercise any of these rights, write to us at [EMAIL]. We will respond within one month. We may first ask you to verify your identity, so that we do not disclose your data to someone else.
8. Complaints
If you are unhappy with how we have handled your data, please complain to us first at [EMAIL] and we will investigate. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, or on 0303 123 1113.
9. Cookies
Our website uses cookies. Essential cookies keep your basket, your currency choice and your session working. Non-essential cookies — analytics and advertising — are only set once you have given consent through our cookie banner, and you can change or withdraw that consent at any time from the same banner.
10. Changes to this policy
We may update this policy from time to time. The "last updated" date above shows the current version, and we will notify any material change on this page or by email where we hold your address.