Privacy and GDPR Policy
This is Gone2Sleep’s privacy notice. In this document, “we,” “our,” or “us” refer to Gone2Sleep.co.uk.
Introduction
The purpose of this privacy notice is to notify you how we gather and use any information you provide us or that we obtain from you. It includes information that can identify you (“personal information”) and information that cannot. In legal terms, “process” means collect, store, transfer, use or otherwise act on information.
This notice describes your legal protections and privacy rights. We are committed to safeguarding your privacy and the confidentiality of your personal data. Our approach is not only driven by our legal obligations under UK data protection law but also by our commitment to treating your data with respect.
We comply with the Data Protection Act of 2018 and the UK General Data Protection Regulation (UK GDPR).
Except as set out below, we do not share, sell or disclose to third parties any information collected through our website.
1. Data Protection Officer
To ensure adherence to this privacy notice, we hired a Data Protection Officer (DPO). If you have any questions about this notice, including any requests to exercise your legal rights, please Contact Us, and we will ensure your request is directed to the correct individual.
You can contact our DPO at:
Email: info@gone2sleep.co.uk
2. Data We Process
We may gather, use, keep, and transfer different kinds of personal information, which are categorised as follows:
- Identity Data: First name, last name, title, and similar identifiers.
- Contact Data: Billing address, delivery address, email address, telephone numbers.
- Financial Data: Payment card details (processed via secure third-party gateways).
- Transaction Data: Details of your orders, returns, and customer service interactions.
- Technical Data: IP address, browser type and version, time zone, device and platform.
- Profile Data: Username, password, previous orders, product interests.
- Marketing & Communications Data: Your marketing preferences and survey responses.
We also collect, use and share Aggregated Data such as statistical or demographic data. Aggregated Data does not reveal your identity and is not legally considered personal data.
If we ever combine Aggregated Data with your personal data so it can identify you, we treat the combined data as personal information and use it accordingly.
3. Special Personal Information
Data revealing race or ethnic background, political views, religious beliefs, trade union membership, genetic information, or biometric information are examples of the Special Categories of personal information that we do not gather.
4. If You Do Not Provide Personal Information We Need
If you fail to provide information that we require to fulfil an order or comply with the law, we may be unable to process your order or deliver our services. We will notify you if this situation arises.
5. The Bases on Which We Process Information About You
We use one or more of the following legal justifications when processing personal data:
- Contractual obligations
- Consent
- Legitimate interests
- Legal obligations
If our basis for processing your data changes, we will inform you and explain the new legal ground.
6. Information We Process Because We Have a Contractual Obligation with You
When you place an order or create an account on Gone2Sleep.co.uk, a contract is formed. To fulfil this contract, we must process the data you provide.
We use this information to:
- Confirm your identity and deliver your products.
- Process and track your payments and orders.
- Handle returns and refunds.
- Provide customer service.
- Send you relevant order updates.
We retain this information until the contract between us has ended or is terminated in accordance with our terms and conditions.
7. Information We Process with Your Consent
In situations where no contractual relationship exists, such as when you browse our website or sign up for newsletters, we rely on your explicit consent to process data.
We may share your data with reputable partners for marketing reasons if you have granted us permission to do so. You can email info@gone2sleep.co.uk at any moment to revoke your consent.
Please be aware that certain features or services on our website may be limited if consent is withdrawn.
8. Information We Process for the Purposes of Legitimate Interests
We may process your data when it is reasonably necessary for our legitimate business interests, such as:
- Internal record keeping and order tracking.
- Improving website performance and user experience.
- Responding to enquiries or complaints.
- Preventing fraud and ensuring website security.
- Conducting market analysis for business improvements.
We make sure that your rights and freedoms are not surpassed by our justifiable interests.
- Information We Process Because We Have a Legal Obligation
We may occasionally need to process your data in order to meet legal or regulatory obligations. For example:
- Complying with tax and accounting laws.
- Cooperating with law enforcement or court orders.
10. Information Provided on the Understanding That It Will Be Shared with a Third Party
Some features of our website allow you to share personal content publicly, such as product reviews. If you post content on our website:
- It may be viewed, copied, or used by others.
- We may choose to reuse your content for marketing purposes (with or without attribution).
- You may request deletion of your content by emailing info@gone2sleep.co.uk
The use of publicly published content by third parties is not our responsibility.
11. Complaints Regarding Content on Our Website
We do our best to monitor and moderate user-generated content, but if you believe any content on Gone2Sleep.co.uk is inappropriate or unlawful, please report it.
We will investigate and remove content where justified. We balance our obligation to protect individuals with the right to free expression.
12. Information Relating to Your Method of Payment
All payment processing is handled securely via third-party providers such as Stripe, PayPal, or other certified gateways. Your complete card information is not kept on our servers.
These providers are fully PCI DSS compliant and encrypt your data to ensure your financial safety.
13. Communicating with Us
When you contact us—via phone, email, live chat, or social media—we may retain details of the communication. We use this information to:
- Provide customer support.
- Track service quality.
- Improve our team training and systems.
14. Complaining
If you have any concerns about how your data is handled, please contact us or email at info@gone2sleep.co.uk.
You also have the right to complain with the UK’s supervisory authority for data protection:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
15. Affiliate and Business Partner Information
We may work with affiliate marketers or retail partners who promote our products. If you arrive at our site via a third-party affiliate, some data (e.g. referral source or tracking code) may be recorded.
We do not share your personal details unless it is essential for order fulfilment or where you’ve given consent.
16. Cookies
Gone2Sleep.co.uk uses cookies and similar technologies to enhance your experience. Cookies help us to:
- Remember your preferences.
- Analyse website traffic.
- Show personalised content or offers.
By using our site, you consent to our use of cookies. Your browser’s cookie settings are under your control.
See our Cookie Policy for further information.
17. Personal Identifiers from Your Browsing Activity
When you visit Gone2Sleep.co.uk, we automatically collect data such as:
- IP address
- Device type
- Browsing history
- Referral source
We use this information for analytical purposes and to personalise your experience. This data is anonymised where possible.
18. Our Use of Re-marketing
We may use re-marketing services (e.g., Google Ads, Facebook Pixel) to advertise our products to users who have previously visited our site. These services use cookies to display relevant ads across the web.
You can opt out of such targeted ads via the settings of the relevant platform or by adjusting your browser’s privacy settings.
19. Information We Obtain from Third Parties
Although we do not disclose your personal information to any third party (except as outlined in this policy), we may occasionally receive information indirectly derived from your personal data from trusted third parties whose services we use (e.g., payment processors, delivery services, or analytics tools).
This information is typically anonymised and not personally identifiable to you.
20. Credit Reference
To prevent fraud and ensure secure transactions, we may share relevant data with credit reference agencies. This only applies in cases where customers instruct their credit card provider to reverse a payment without providing a valid reason to us or allowing us the opportunity to resolve the issue or offer a refund.
21. Data May Be Processed Outside the European Union
Our website is hosted in the United Kingdom. However, from time to time we may use cloud-based or outsourced services (e.g., for email marketing, customer service software, or analytics tools) that operate outside the UK or the European Union.
In such instances, we ensure that your data is handled securely and in accordance with UK GDPR by using providers that meet adequacy standards or appropriate safeguards such as Standard Contractual Clauses (SCCs).
22. Your Duty to Inform Us of Changes
The accuracy and timeliness of the personal data we have about you are crucial. Please notify us of any changes to your name, address, email, or payment information to ensure your orders are processed correctly and securely.
You can update your personal details by logging into your account or contacting our customer service team.
23. Access to Your Personal Information
You are entitled to request that your personal information be deleted from our databases. Most of this information is available by logging into your Gone2Sleep account.
To request additional data that may not be available through your account dashboard, please contact us. We will respond within one month and inform you if a nominal administrative fee applies.
24. Removal of Your Information
You have the right to request the removal of your personal data from our systems. If you would like your information deleted, please email us at info@gone2sleep.co.uk.
Please note that this may affect our ability to fulfil past or future orders, issue refunds, or respond to customer service requests.
25. Verification of Your Information
For your protection, we will always verify your identity before granting access to or making changes to your personal data. This may involve verifying your email address, phone number, or requesting identity confirmation.
This ensures that your information remains secure and protected from unauthorised access.
26. Use of Site by Children
Gone2Sleep.co.uk does not sell products or services for purchase by children. We don’t intentionally gather information from anyone younger than eighteen.
If you are under 18, you may only use our site with the consent and supervision of a parent or guardian.
27. Encryption of Data Sent Between Us
We use SSL (Secure Sockets Layer) encryption to protect the transmission of your data across the internet. SSL certificates verify our identity to your browser and encrypt all data between your browser and our server.
Look for the padlock symbol in your browser’s address bar to confirm that a secure connection is in place.
28. How You Can Complain
If you are unhappy with how we collect, use, or protect your personal data, we encourage you to contact us first or email info@gone2sleep.co.uk so we can resolve the issue amicably.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: www.ico.org.uk
29. Retention Period for Personal Data
We only save your personal data for as long as is required in order to:
- Fulfil your orders and provide customer service
- Comply with UK tax and accounting regulations
- Establish, exercise, or defend legal claims
Following this time frame, your data will either be anonymised or safely erased.
30. Compliance with the Law
This privacy policy is designed to comply with UK data protection laws. If you believe it does not meet the legal requirements of your jurisdiction, we would like to hear from you.
However, it remains your choice whether to continue using our website based on this policy.
31. Review of This Privacy Policy
We review and update this Privacy and GDPR Policy regularly. The version that applies to you is the one published on our website at the time of your visit or use.
We recommend printing or saving a copy of this policy for your records. If you have any questions, please contact us or email us at info@gone2sleep.co.uk.
31. Mobile SMS Terms of Service
The Gone2Sleep mobile messaging service (“Service”) is operated by Gone2Sleep (“Gone2Sleep”, “we”, or “us”). By subscribing to our SMS service, you agree to these terms and conditions (“Mobile Terms”). We may modify or discontinue the Service without notice. Continued use of the Service indicates your acceptance of any changes.
By opting into Gone2Sleep’s SMS service, you consent to receive recurring promotional or transactional text messages to the mobile number you provide. These messages may be sent using automated technology and could include cart reminders, delivery updates, offers, or exclusive sales alerts.
You do not need to subscribe to the Service to place an order, and your consent is not a condition of any purchase.
Message and Data Rates: Standard message and data rates may apply depending on your mobile plan.
Opting Out: To opt out, reply STOP to any Gone2Sleep message. You will receive one final message confirming your opt-out. For assistance, reply HELP or contact us.
Responsibility: Gone2Sleep is not liable for delayed or undelivered messages. You agree to provide a valid mobile number and update it if changed.
To the extent permitted by law, we disclaim liability for errors, delivery failures, or reliance on SMS content.
