Privacy policy
At World of Beds, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at worldofbeds.co.uk, visit one of our showrooms, or interact with us in any way. It applies to all personal data we collect or receive from you in connection with our services.
This policy is written in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller for the purposes of this legislation.
1. Who We Are
World of Beds is a family-run retailer with over 40 years of experience, operating showrooms across Norfolk and Suffolk. Our registered address is Unit 2 Roundtree Way, Norwich, NR7 8SH. You can contact us at sales@worldofbeds.co.uk or by calling 01603 483636.
2. What Personal Data We Collect
We collect and process a range of personal data depending on how you interact with us. The table below summarises the categories of data we may hold about you.
|
Category
|
Examples
|
|
Identity Data
|
First name, last name, title, username
|
|
Contact Data
|
Billing and delivery address, email address, telephone number
|
|
Financial Data
|
Payment method details (processed securely by our payment providers; we do not store full card numbers)
|
|
Transaction Data
|
Details of products purchased, order history, payment records
|
|
Technical Data
|
IP address, browser type and version, device identifiers, time zone, operating system
|
|
Usage Data
|
Pages visited, time spent on site, links clicked (collected via Google Analytics 4)
|
|
Profile Data
|
Account username and password, purchase history, preferences, feedback
|
|
Marketing & Communications Data
|
Email marketing opt-in status, communication preferences
|
3. How We Collect Your Data
We collect personal data through three main routes. The first is through direct interaction — when you create an account, place an order, subscribe to our newsletter, complete a contact form, or correspond with us by phone or email. The second is through automated technologies — as you browse our website, we automatically collect Technical and Usage Data via cookies, server logs, and analytics tools, most notably Google Analytics 4 (GA4). The third is through third-party sources — we may receive data from payment processors (such as Klarna, PayPal, and Shop Pay), delivery partners, and advertising platforms (such as Meta, which operates Facebook and Instagram).
4. How We Use Your Data
We will only use your personal data when the law permits us to do so. The table below sets out the purposes for which we process your data and the legal basis we rely upon in each case.
|
Purpose
|
Legal Basis
|
|
Processing and fulfilling your order
|
Performance of a contract
|
|
Managing your customer account
|
Performance of a contract
|
|
Sending order confirmation and delivery updates
|
Performance of a contract
|
|
Sending marketing emails (newsletter, promotions)
|
Consent (you may withdraw at any time)
|
|
Improving our website and understanding user behaviour via Google Analytics 4
|
Legitimate interests
|
|
Complying with legal and regulatory obligations (e.g., tax records)
|
Legal obligation
|
|
Preventing fraud and ensuring website security
|
Legitimate interests
|
|
Responding to your enquiries and complaints
|
Legitimate interests / Performance of a contract
|
Email Marketing: Where you have opted in to receive marketing communications from us, we will send you newsletters and promotional offers. You can unsubscribe at any time by clicking the "unsubscribe" link in any of our emails or by contacting us directly.
5. Cookies and Google Analytics
Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device that help us recognise you, remember your preferences, and understand how visitors use our site.
We use Google Analytics 4 (GA4) to collect anonymised data about how visitors interact with our website, including pages visited, session duration, and traffic sources. This data helps us improve the site and our marketing. GA4 may collect your IP address, which is anonymised before storage.
When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies. You can change your preferences at any time via the cookie settings link in our website footer. The following categories of cookies may be used on our site:
|
Cookie Type
|
Purpose
|
Consent Required?
|
|
Strictly Necessary
|
Essential for the website to function (e.g., shopping cart, login)
|
No
|
|
Analytics
|
Google Analytics 4 — understanding website usage
|
Yes
|
|
Marketing / Advertising
|
Social media pixels (Facebook/Instagram), retargeting
|
Yes
|
|
Functional
|
Remembering your preferences
|
Yes
|
6. Sharing Your Data
We do not sell your personal data to third parties. We may share your data with the following categories of trusted partners who process it on our behalf or as required by law:
Shopify is our e-commerce platform provider and processes data on our behalf as a data processor. Payment processors (including Klarna, PayPal, and Shop Pay) handle financial transactions securely. Delivery partners receive your name and address to fulfil your order. Google receives anonymised usage data via Google Analytics 4. Meta (Facebook/Instagram) may receive data via advertising pixels if you have consented to marketing cookies. Professional advisers (such as accountants and legal advisers) may access data as necessary. HM Revenue & Customs and other regulatory authorities may require us to disclose data in certain circumstances.
All third parties are required to respect the security of your data and to process it only in accordance with our instructions and applicable law.
7. Data Retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected. In practice, this means we keep order and transaction records for up to 7 years to comply with HMRC requirements, and we keep marketing data (email addresses) until you unsubscribe or request deletion. Technical and analytics data collected by Google Analytics 4 is retained in accordance with Google's standard retention settings (typically 14 months).
8. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
The right of access — you may request a copy of the personal data we hold about you. The right to rectification — you may ask us to correct inaccurate or incomplete data. The right to erasure — you may ask us to delete your personal data in certain circumstances (the "right to be forgotten"). The right to restrict processing — you may ask us to pause the processing of your data in certain circumstances. The right to data portability — you may request that we transfer your data to you or a third party in a structured, machine-readable format. The right to object — you may object to our processing of your data where we rely on legitimate interests. The right to withdraw consent — where processing is based on consent (e.g., marketing emails), you may withdraw it at any time.
To exercise any of these rights, please contact us at sales@worldofbeds.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
9. Data Security
We have implemented appropriate technical and organisational security measures to protect your personal data from accidental loss, unauthorised access, alteration, or disclosure. Our website is hosted on Shopify, which maintains industry-standard security certifications including PCI DSS compliance for payment data. Access to personal data within our organisation is restricted to those who have a legitimate business need.
10. Children's Privacy
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.
11. Links to Third-Party Websites
Our website may contain links to third-party websites, including our social media profiles on Facebook, Instagram, and TikTok. This Privacy Policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to read the privacy policy of any external website you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised effective date. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy, please contact us:
World of Beds
Unit 2 Roundtree Way, Norwich, NR7 8SH
Email: sales@worldofbeds.co.uk
Phone: 01603 483636
