Privacy Policy

1. Introduction

Simply Beds Sussex Ltd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Trade Ordering Portal website and services.

2. Information We Collect

We collect information that you voluntarily provide to us, including:

• Your full name and contact information (email address, phone number)
• Delivery addresses and property details
• Business information (company name, organization details)
• Order history and preferences
• Account credentials and login information
• Any communications or notes you provide regarding orders

3. How We Use Your Information

We use your information for the following purposes:

• Processing and fulfilling your orders
• Coordinating deliveries and managing logistics
• Communicating with you about your orders via email and phone
• Sending transactional and order update notifications
• Improving our services and user experience
• Complying with legal and regulatory obligations
• Managing disputes and troubleshooting issues

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under UK GDPR:

• Contract performance: To fulfill our contractual obligations when processing your orders
• Consent: Where you have explicitly consented (e.g., email notifications)
• Legal obligations: To comply with applicable UK and EU laws
• Legitimate interests: To maintain and improve our services

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Delivery and logistics partners (only necessary address and contact information)
• Service providers assisting with our operations (e.g., email providers)
• Legal authorities when required by law

6. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Order information is typically retained for 6 years for accounting and legal purposes. You may request deletion of your data subject to legal retention requirements.

7. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate information
• Right to erasure: Request deletion of your data (subject to legal requirements)
• Right to restrict processing: Limit how we use your information
• Right to data portability: Receive your data in a portable format
• Right to object: Object to certain types of processing

To exercise any of these rights, please contact us at trade@simplybedssussex.co.uk or call 01273 720 400.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure.

9. Cookies

Our website uses cookies to enhance your experience. Cookies are small files stored on your device that help us remember your preferences and understand how you use our portal. You can control cookie settings through your browser, though some features may not function properly if cookies are disabled.

10. Email Notifications

We send transactional emails (order confirmations, status updates) and optional marketing communications. You can manage your email preferences in your account settings. You may unsubscribe from non-essential emails at any time.

11. Children's Privacy

Our portal is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we discover such information, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Your continued use of our portal constitutes acceptance of any changes.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

14. Data Protection Authority

If you believe we are not complying with data protection laws, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.