Daybed.shop (“we,” “us,” or “our”) is committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information when you use our website or purchase furniture from us.

1. Data We Collect

We collect the following information to fulfill orders and improve your experience:

  • Personal Data: Name, email, billing/delivery address, phone number.
  • Payment Data: Card details (processed securely via Airwallex – we don’t store card numbers).
  • Technical Data: IP address, browser type, device information (via cookies).
  • Usage Data: Pages visited, cart activity, click patterns.

2. How We Use Your Data

PurposeLegal Basis (GDPR)
Process orders & deliveriesContractual necessity
Send transactional emailsLegal obligation
Fraud preventionLegitimate interest
Marketing (with consent)Consent
Improve website performanceLegitimate interest

3. Data Sharing

We only share your data with trusted third parties when necessary:

  • Payment Processors: Airwallex.
  • Shipping Partners: DPD, Royal Mail, etc.
  • Analytics Tools: Google Analytics (anonymized data).
  • Legal Compliance: When required by UK law.

4. International Transfers

  • Data is stored in the UK/EU. If transferred outside the EEA, we ensure GDPR-compliant safeguards.

5. Data Retention

  • Order Data: 6 years (to comply with UK tax laws).
  • Marketing Data: Until consent is withdrawn.
  • Inactive Accounts: Deleted after 2 years of inactivity.

6. Your Rights (UK/EU)

Under GDPR, you have the right to:

  • Access, correct, or delete your data.
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent (e.g., unsubscribe from emails).

To exercise these rights, email support@daybed.shop.

7. Cookies

  • Essential Cookies: Required for checkout and account functionality.
  • Analytics Cookies: Track site usage (opt-out via cookie banner).
  • Marketing Cookies: Used only with your consent.

Manage preferences via our Cookie Settings link in the footer.

8. Security

  • Encryption: SSL/TLS for all data transmissions.
  • PCI Compliance: Secure payment processing.
  • Regular Audits: Vulnerability scans and staff training.

9. Children’s Privacy

We do not knowingly collect data from individuals under 16.

10. Policy Updates

We’ll notify you of significant changes via email or website banners.

Contact Us

For data protection inquiries:

  • Email: dpo@daybed.shop
  • Postal Address:
    69 Aberdeen Avenue, Cambridge, England,CB2 8DL
    United Kingdom

Supervisory Authority:
UK Information Commissioner’s Office (ICO) – ico.org.uk.