Privacy Policy

1. Who We Are

Belvani Beds ("we", "us", "our") is a UK-based retailer of beds, mattresses, and bedroom furniture, trading online at https://belvanibeds.co.uk/. For data protection purposes, Belvani Beds is the "data controller" of the personal information described in this policy.

Registered office: [Registered company address]. Company registration number: [Company registration number]. You can contact us using the details in the "Contact Us" section below.

2. Information We Collect

We collect personal information you give us directly, information generated when you use our Site, and information we need to fulfil your order:

• Contact details: name, delivery and billing address, email address, phone number
• Order details: items purchased, order value, delivery instructions
• Payment confirmation: we do not store full card numbers — payments are processed securely by our payment provider
• Account details: your login email and an encrypted password, if you create an account
• Communications: messages you send us via email, contact forms, or live chat
• Technical data: IP address, browser and device type, and pages visited, collected via cookies and similar technologies (see our Cookie Policy)
• Marketing preferences: whether you have opted in or out of marketing emails

3. How We Use Your Information

• To process and fulfil your orders, including arranging delivery with our courier partners
• To create and manage your account
• To respond to enquiries and provide customer support
• To send order confirmations, delivery updates, and other service messages
• With your consent, to send marketing emails about products, offers, and promotions
• To understand how our Site is used and improve our products and services
• To detect and prevent fraud, and to comply with our legal and tax obligations

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases to process your personal information:

• Contract — to process your order, take payment, and arrange delivery
• Consent — for marketing emails and non-essential cookies, which you can withdraw at any time
• Legitimate interests — for fraud prevention, Site security, and improving our services through analytics
• Legal obligation — to meet tax, accounting, and consumer protection requirements

5. How We Share Your Information

We do not sell your personal information. We share it only where necessary, with:

• Delivery partners and couriers, to get your order to you
• Payment providers, to process payments securely
• IT, hosting, and email service providers, who process data on our behalf under contract
• Analytics and marketing platforms, where you have consented to marketing or analytics cookies
• Law enforcement, regulators, or professional advisers, where required by law or to protect our legal rights

6. How Long We Keep Your Data

We keep personal data only as long as necessary for the purposes described in this policy. As a guide: order and transaction records are kept for 6 years to meet UK tax and accounting obligations; account information is kept until you ask us to delete your account; marketing data is kept until you unsubscribe or object.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate or incomplete data
• Ask us to delete your data, in certain circumstances
• Ask us to restrict how we use your data
• Receive your data in a portable format
• Object to processing based on legitimate interests, including direct marketing
• Withdraw consent at any time, where we rely on consent

To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data properly.

8. International Transfers

Some of our service providers may process data outside the UK or European Economic Area. Where this happens, we put appropriate safeguards in place, such as the UK's International Data Transfer Agreement or the EU Standard Contractual Clauses, to ensure your data remains protected.

9. Data Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and regular security reviews, to protect your personal data against unauthorised access, loss, or misuse. No system is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Site is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. We will post any changes on this page with a revised "effective date". We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@belvanibeds.co.uk or by post at: Belvani Beds, [Registered company address].