Privacy Policy

How we collect, use, and protect your personal information.

Last updated: 1 May 2026
This Privacy Notice explains how Almabeds ("we", "us", "our") collects, uses, and protects your personal information when you visit almabeds.co.uk or place an order with us. We are committed to handling your data transparently and in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Who We Are

Data Controller: Almabeds
Registered Address: Ff6 Track Road, Batley, England, WF17 7AA
Company Registration Number: [insert your Companies House number]
ICO Registration Number: [insert your ICO registration — register at ico.org.uk]
Email: info@almabeds.co.uk
Phone: +44 7597 656202

For any data protection queries, please contact us at info@almabeds.co.uk.

Information We Collect

We collect the following categories of personal data:

• Identity and contact data — name, email address, billing and delivery address, phone number
• Order data — products purchased, order history, delivery preferences, fabric sample requests
• Payment data — processed securely by our payment providers (PayPal and our card acquirer) and, where you choose to pay by direct bank transfer, your name and the amount paid as shown on our bank statement. We do not store full card details on our servers.
• Technical data — IP address, browser type and version, device information, operating system, pages visited, referral source, time zone, session activity
• Marketing preferences — your consent status for email and SMS marketing
• Communications — records of your correspondence with our customer service team, including emails, phone calls (which may be recorded for quality and training), and webchat transcripts
• User-generated content — reviews, photos, or videos you choose to share with us or tag us in on social media

How We Collect Your Data

We collect personal data in the following ways:

• Directly from you — when you place an order, create an account, subscribe to marketing, request a fabric sample, or contact our customer service team
• Automatically — through cookies and similar technologies when you interact with our website (see our Cookie Policy)
• From third parties — payment processors, delivery partners, credit reference agencies (where finance is used), and publicly available sources (such as social media, where you have made information public)

How We Use Your Data

We process your personal data on the following lawful bases under UK GDPR:

Purpose	Lawful Basis
Fulfilling your order and delivering your goods	Contract
Processing refunds, warranty claims, and returns	Contract / Legal obligation
Customer service and support	Legitimate interest / Contract
Marketing communications (email/SMS)	Consent
Personalising website content and product suggestions	Consent / Legitimate interest
Website analytics and improvement	Legitimate interest
Fraud prevention, security, and legal compliance	Legal obligation / Legitimate interest
Record-keeping for tax and accounting (HMRC)	Legal obligation

Who We Share Your Data With

We only share your data with third parties where necessary to deliver our service. These include:

• Payment providers — PayPal (Europe) S.à r.l. et Cie, S.C.A. and our card acquirer. These providers act as separate data controllers for the payment transaction and operate under their own privacy policies. For direct bank transfer payments, your bank shares the standard transaction details (sender name, reference, amount) with our bank.
• Delivery partners — our own delivery fleet and, for areas outside our coverage, reputable third-party couriers
• Email and marketing platform — for order confirmations and, with consent, marketing communications
• Analytics providers — Google Analytics (configured with IP anonymisation where technically possible)
• Cloud and IT providers — hosting, data backup, website security, and customer service tooling
• Professional advisers — accountants, auditors, solicitors, and insurers, where reasonably required
• Regulatory bodies and law enforcement — where we are under a legal duty to disclose

We never sell your personal data. We also do not share your data with third parties for their own marketing purposes without your explicit consent.

PayPal & Card Payments

If you choose to pay using PayPal or by debit/credit card, your personal data is shared with the relevant provider to process your payment. PayPal and our card acquirer act as independent data controllers in respect of that data. Please refer to PayPal's own privacy policy for full details:

• PayPal: paypal.com/uk/legalhub/privacy-full

For payments made by direct bank transfer, your bank's privacy policy will govern how your bank handles the transfer. We only receive the standard payment information shown on our bank statement (sender name, reference, and amount).

User-Generated Content and Social Media

If you tag us in a post, mention us, or share content featuring our products on social media, we may — with your explicit permission — wish to reshare that content on our own channels or marketing materials. We will contact you to confirm before using any content, and you may withdraw permission at any time.

Automated Decision-Making

We do not make decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you. We do not use any "buy now, pay later" or instalment finance providers, so no automated credit checks are carried out on you when you place an order with Almabeds.

International Transfers

Where our providers process data outside the UK, we ensure adequate safeguards are in place, including UK adequacy decisions, Standard Contractual Clauses (SCCs), or the UK International Data Transfer Agreement (IDTA). Your data enjoys the same level of protection wherever it is processed.

How We Keep Your Data Secure

We take the security of your personal data seriously and have appropriate technical and organisational measures in place to protect it from loss, misuse, unauthorised access, alteration, or disclosure. These include:

• Encryption in transit — our website uses HTTPS (SSL/TLS) on all pages, including checkout
• Payment security — card payments are processed by PCI-DSS compliant providers; we do not store full card details on our servers
• Access controls — only authorised staff with a legitimate business need can access customer records, and access is logged
• Reputable infrastructure — we use established hosting and software providers with their own security accreditations
• Regular review — passwords and access permissions are reviewed periodically, and we keep our software up to date with security patches

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within the timeframes required by UK GDPR.

Cookies

Our website uses cookies and similar tracking technologies to make the site work, remember your preferences, analyse traffic, and (with your consent) deliver relevant marketing. When you first visit our website, you will be presented with a cookie banner that allows you to accept, reject, or customise non-essential cookies. You can change your preferences at any time by clearing your cookies in your browser, or by revisiting our cookie banner. For full details of the cookies we use, please see our Cookie Policy.

How Long We Keep Your Data

• Order and customer records: 7 years from the end of the relevant tax year (HMRC requirement)
• Warranty records: 5 years from delivery (duration of our warranty)
• Marketing data: until you withdraw consent, then deleted within 30 days
• Website analytics: up to 26 months
• Customer service correspondence: 3 years from last contact
• Unsuccessful enquiries or abandoned carts: up to 12 months

After retention periods expire, your data is securely deleted or anonymised.

Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right to be informed — which this Privacy Notice fulfils
• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to have inaccurate or incomplete data corrected
• Right to erasure ("right to be forgotten") — where applicable
• Right to restrict processing — in certain circumstances
• Right to data portability — to receive your data in a common, machine-readable format
• Right to object — to processing based on legitimate interests, and to direct marketing at any time
• Right to withdraw consent — at any time, for any processing based on consent, without affecting prior lawful processing
• Rights relating to automated decision-making — where applicable

To exercise any right, please contact us at info@almabeds.co.uk. We will respond within one calendar month. There is usually no charge, unless a request is manifestly unfounded or excessive.

Your Right to Complain

If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Cookies

Our website uses cookies and similar technologies to improve your experience, analyse traffic, and (with your consent) show you personalised marketing. You can manage your preferences at any time via our cookie banner. For full details, please see our Cookie Policy.

Security

We use industry-standard security measures including SSL/TLS encryption, secure payment gateways, access controls, regular security reviews, and staff data-protection training. While no online system is entirely risk-free, we take our obligations seriously and will notify affected users and the ICO of any qualifying personal data breach without undue delay, and in any event within 72 hours where feasible.

Children

Our products and services are intended for adults. Under UK GDPR, children under the age of 13 cannot provide their own consent to online services. We do not knowingly collect data from anyone under 13, and do not market directly to children. If we become aware that we have collected such data, we will delete it promptly.

Changes to This Policy

We may update this Privacy Notice from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated by email to active customers where appropriate. We recommend reviewing this page periodically.