Privacy Policy

Last updated: 5/3/2026

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit or shop on www.bedshubltd.co.uk

1. Who we are

BedshubLtd, trading as Beds hub, operates the website www.bedshubltd.co.uk Throughout this policy, “we”, “us”, or “our” refers to Bedshub Ltd.

We are the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the EU GDPR.

Contact details

If you have questions about this policy or how your data is handled, you can contact us at:

  • Email: info@bedshubltd.co.uk
  • Postal address: 100 Carr Side Crescent

If we appoint an EU representative in the future, their details will be published here.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO). See Section 12 for details.

2. Personal data we collect

We may collect and process the following types of personal data:

  • Identity and contact information: name, email address, phone number, billing and delivery addresses.
  • Account and order information: purchase history, returns, communications, login details, wishlists, and reviews.
  • Payment and transaction details: payment method, transaction amounts, dates and times, and limited card information (such as the last four digits). Full card details are handled securely by our payment providers and are not stored by us.
  • Marketing preferences: your email and SMS subscription choices, consent records, and opt-out history.
  • Device and usage information: IP address, browser type, device identifiers, pages viewed, time spent on pages, referring links, and approximate location, collected via cookies and similar technologies.
  • User-generated content: reviews, comments, and any information you choose to submit publicly.
  • Customer support data: enquiries, call records, attachments, and correspondence.
  • Cookie consent records: stored via our consent management platform, CookieYes.

We do not intentionally collect special category or sensitive personal data. Please do not provide such information to us.

3. How we collect your data

We collect personal data in the following ways:

  • Directly from you: when you browse our website, create an account, place an order, subscribe to marketing, contact customer support, or submit a review.
  • Automatically: through cookies and similar tracking technologies (see Section 8).
  • From third parties: such as payment providers, delivery partners, fraud prevention services, analytics tools, and advertising platforms, where lawful.

4. How and why we use your data (legal bases)

We only process personal data when we have a lawful basis to do so. These include:

Providing our services

  • Managing accounts, processing orders, arranging delivery, handling returns and refunds, and providing customer support.
    Legal basis: performance of a contract and legitimate business interests.

Payments and fraud prevention

  • Processing payments and preventing fraudulent activity.
    Legal basis: performance of a contract, legal obligations, and legitimate interests.

Service communications

  • Sending order confirmations, delivery updates, and other essential transactional messages.
    Legal basis: performance of a contract or legitimate interests.

Marketing communications

  • Sending promotional emails or SMS messages where you have given consent, or where a lawful soft opt-in applies.
    Legal basis: consent or legitimate interests (where permitted by law).
    You can opt out at any time (see Section 7).

Analytics and improvements

  • Analysing website usage and improving performance and customer experience.
    Legal basis: consent for non-essential cookies and legitimate interests for necessary aggregated analytics.

Legal compliance and security

  • Meeting legal obligations, keeping records, handling complaints, and protecting our systems.
    Legal basis: legal obligation and legitimate interests.

5. Who we share your data with

We only share your personal data with trusted third parties where necessary, including:

  • Payment service providers
  • Delivery and fulfilment partners
  • Email and SMS service providers
  • Analytics and performance measurement tools
  • CookieYes (our cookie consent platform)
  • IT hosting and technical support providers
  • Fraud prevention and security services

All third parties are required to protect your data, use it only for agreed purposes, and delete it when no longer needed. We may also share data where required by law or to protect our legal rights.

6. International data transfers

Some of our service providers may process personal data outside the UK or the European Economic Area (EEA).
Where this happens, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or the UK International Data Transfer Addendum, along with additional security measures where required.

7. Your marketing choices

  • You can unsubscribe from email marketing at any time using the link in our emails.
  • You can opt out of SMS messages by replying to STOP.
  • You may also manage preferences through your account.

Withdrawing consent will not affect the lawfulness of marketing sent before you opted out. Transactional messages related to orders and accounts will still be sent.

8. Cookies and similar technologies

Our website uses cookies and similar tools to operate effectively.

Cookie management

We use CookieYes to display our cookie banner, record your preferences, and block non-essential cookies until consent is given. You can update your choices at any time using the cookie settings link in the website footer.

Types of cookies we use

  • Strictly necessary cookies: essential for site functionality, such as checkout and account login.
  • Performance and analytics cookies: help us understand website usage.
  • Functionality cookies: remember your preferences.
  • Advertising cookies: used to show relevant ads and measure campaign performance.

You can also control cookies through your browser settings, though blocking some cookies may affect website features.
For full details, see our Cookie Policy or the CookieYes preference centre.

9. How long we keep your data

We only keep personal data for as long as necessary:

  • Account and order records: up to six years after your last order, for tax, accounting, and legal purposes.
  • Marketing records: while you are subscribed, plus records of opt-outs for compliance.
  • Customer support records: typically up to three years after resolution.
  • Cookie consent records: retained by CookieYes as required for compliance.

After these periods, data is securely deleted or anonymised.

10. Your data protection rights

You have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your data (where legally permitted)
  • Restrict processing
  • Receive your data in a portable format
  • Object to processing based on legitimate interests or direct marketing
  • Withdraw consent at any time

To exercise these rights, contact us using the details in Section 1. We may need to verify your identity. Requests are free unless they are excessive or unfounded.