Privacy Policy
Last updated: 12 May 2026
At Dream Factory Beds, we are committed to protecting your privacy and handling your personal data lawfully, fairly, and transparently.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website, place an order, contact us, sign up to marketing, or otherwise interact with us.
Who We Are
This website is operated by Dream Factory Beds Ltd.
- Company name: Dream Factory Beds Ltd
- Company number: 16745205
- Registered office: 20 Wenlock Road, London, England, N1 7GU
- Email: info@dreamfactorybeds.co.uk
- Telephone: 01353 888808
For the purposes of UK data protection law, including the UK GDPR and the Data Protection Act 2018, Dream Factory Beds Ltd is the data controller of the personal data we collect and process.
We have not appointed a Data Protection Officer. If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at info@dreamfactorybeds.co.uk.
Personal Data We Collect
We may collect and process the following types of personal data:
- Identity details: your name and account details, where applicable.
- Contact details: billing address, delivery address, email address, and telephone number.
- Order details: products ordered, sizes, colours, fabric choices, delivery details, order notes, returns, refunds, and warranty information.
- Payment details: payment method, transaction confirmation, refund information, and fraud-prevention checks. We do not store your full card details.
- Communication details: messages, emails, phone calls, complaints, reviews, feedback, and customer service records.
- Marketing details: your marketing preferences, consent records, email subscription status, and engagement with our marketing emails.
- Technical and usage data: IP address, browser type, device type, operating system, pages viewed, referral source, session information, cookie identifiers, and website interaction data.
- Analytics and advertising data: information collected through tools such as Google Tag Manager, Google Analytics 4, Meta Pixel, and similar tracking technologies, where enabled and consented to where required.
How We Collect Personal Data
We collect personal data when you:
- visit or browse our website;
- place an order or create an account;
- contact us by email, telephone, website form, live chat, or social media;
- subscribe to our email list or marketing communications;
- respond to surveys, promotions, reviews, or feedback requests;
- use cookies or similar technologies on our website, where permitted.
We may also receive personal data from third-party service providers, including payment providers, delivery partners, marketing platforms, analytics providers, and fraud-prevention services.
How We Use Your Personal Data
| Purpose | Personal Data Used | Lawful Basis |
|---|---|---|
| To process and deliver your order | Name, contact details, delivery address, order details | Performance of a contract |
| To take payments, issue refunds, and prevent fraud | Payment details, order details, transaction details, technical data | Performance of a contract, legal obligation, and legitimate interests |
| To provide customer support | Name, contact details, order details, communication records | Performance of a contract and legitimate interests |
| To manage returns, refunds, complaints, and warranty claims | Order details, contact details, delivery details, complaint records | Performance of a contract, legal obligation, and legitimate interests |
| To send order updates and service messages | Name, email address, phone number, order details | Performance of a contract |
| To send marketing emails and offers | Name, email address, marketing preferences, consent records | Consent, or legitimate interests where permitted by law |
| To improve our website and customer experience | Technical data, usage data, analytics data | Consent where required for cookies, and legitimate interests for service improvement |
| To run online advertising and measure ad performance | Cookie identifiers, device data, website activity, advertising interaction data | Consent where required |
| To comply with legal, tax, and accounting requirements | Order details, payment records, invoices, correspondence | Legal obligation |
| To protect our business, website, customers, and legal rights | Technical data, order records, communication records, fraud-prevention data | Legitimate interests and legal obligation |
Marketing Communications
If you sign up to our email list or agree to receive marketing communications, we may send you emails about products, offers, promotions, and updates from Dream Factory Beds.
We may use email marketing platforms such as Klaviyo to manage email subscriptions, send marketing messages, record consent, and understand how customers interact with our emails.
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in our emails or by contacting us at info@dreamfactorybeds.co.uk.
Even if you unsubscribe from marketing, we may still send you important service-related messages about your order, delivery, return, refund, warranty, or account.
Cookies and Similar Technologies
Our website uses cookies, pixels, tags, scripts, and similar technologies to make the website work, improve performance, analyse traffic, and support advertising.
Some cookies are strictly necessary for the website to function, such as cart, checkout, security, and payment cookies. These cannot usually be switched off because the website would not work properly without them.
Non-essential cookies, including analytics and advertising cookies, will only be used where required consent has been given.
Types of Cookies and Technologies We May Use
| Category | Examples | Purpose |
|---|---|---|
| Strictly necessary cookies | Shopify cart, checkout, payment, security, and session cookies | To operate the website, process orders, remember basket contents, and keep the website secure |
| Analytics cookies | Google Analytics 4, including measurement ID G-87YQWKB04Z | To understand how visitors use our website and improve performance |
| Tag management | Google Tag Manager, including container GTM-N2PK878B | To manage website tags and control analytics or advertising scripts |
| Advertising and retargeting technologies | Meta Pixel and similar advertising pixels | To measure advertising performance, build audiences, and show relevant ads where permitted |
| Email marketing and onsite tracking | Klaviyo cookies, forms, and email tracking | To manage email sign-ups, marketing preferences, and email campaign performance |
| Functional cookies | Preference, region, and website setting cookies | To remember preferences and improve your browsing experience |
You can manage your cookie choices through our cookie banner or cookie settings tool where available. You can also control cookies through your browser settings. Please note that disabling some cookies may affect how the website works.
Third-Party Service Providers
We may share personal data with trusted third-party service providers where necessary to operate our business, process orders, provide services, and improve our website.
| Provider or Category | Purpose |
|---|---|
| Shopify | Website hosting, ecommerce platform, checkout, order management, and store functionality |
| Payment providers shown at checkout | Payment processing, refunds, fraud prevention, and transaction security |
| Delivery and courier partners | Order delivery, delivery updates, collection, and logistics |
| Klaviyo | Email marketing, newsletter sign-ups, consent management, and marketing performance |
| Google Tag Manager | Managing website tags, analytics scripts, and marketing scripts |
| Google Analytics 4 | Website analytics, traffic measurement, and performance reporting |
| Meta Platforms, including Meta Pixel | Advertising measurement, retargeting, and audience creation where consent has been given |
| Website, IT, security, and support providers | Website maintenance, hosting support, security, backups, and troubleshooting |
| Professional advisers | Accounting, legal, insurance, compliance, and dispute resolution |
| Regulators, courts, authorities, or law enforcement | Where required by law or necessary to protect legal rights |
We only share personal data where necessary and require service providers to handle personal data securely and lawfully.
International Data Transfers
Some of our service providers may process personal data outside the United Kingdom, including in the European Economic Area, the United States, Canada, or other countries.
Where personal data is transferred internationally, we take steps to ensure appropriate safeguards are in place, such as adequacy regulations, approved contractual safeguards, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other lawful transfer mechanisms.
How Long We Keep Your Personal Data
We only keep personal data for as long as necessary for the purposes described in this Privacy Policy, including to meet legal, accounting, tax, warranty, dispute, and customer service requirements.
| Type of Data | Typical Retention Period |
|---|---|
| Order, payment, invoice, and accounting records | Usually 6 years from the end of the relevant financial year, or longer where required by law |
| Customer service, return, refund, complaint, and warranty records | Up to 6 years after the matter is resolved, where needed for legal or dispute purposes |
| Account information | For as long as your account remains active, then for a reasonable period afterwards where needed for legal or business purposes |
| Marketing subscription data | Until you unsubscribe or withdraw consent. We may keep a suppression record to make sure we do not send you further marketing |
| Cookie consent records | For a reasonable period to evidence your preferences, unless refreshed or withdrawn earlier |
| Analytics and advertising data | According to the relevant platform settings and cookie duration, unless consent is withdrawn earlier |
How We Protect Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
These measures may include secure systems, access controls, password protection, encryption where appropriate, payment security controls, and limiting access to personal data to those who need it for business purposes.
No method of transmission over the internet or electronic storage is completely secure. However, we take reasonable steps to protect your personal data.
Your Data Protection Rights
Under UK data protection law, you may have the following rights:
- Right to be informed about how your personal data is used.
- Right of access to request a copy of the personal data we hold about you.
- Right to rectification if your personal data is inaccurate or incomplete.
- Right to erasure in certain circumstances.
- Right to restrict processing in certain circumstances.
- Right to data portability in certain circumstances.
- Right to object to certain processing, including direct marketing.
- Right to withdraw consent where we rely on consent, including for marketing or non-essential cookies.
- Rights relating to automated decision-making and profiling where applicable.
Your rights may depend on the lawful basis we rely on and may be subject to legal exceptions.
To exercise your rights, please contact us at info@dreamfactorybeds.co.uk.
We may need to verify your identity before responding to a request. We will usually respond within one month, unless the request is complex or we are legally permitted to extend the response period.
Your Right to Object to Direct Marketing
You have an absolute right to object to direct marketing at any time.
You can opt out by clicking the unsubscribe link in our marketing emails or by contacting us at info@dreamfactorybeds.co.uk.
Automated Decision-Making and Profiling
We do not use personal data to make decisions that produce legal or similarly significant effects about you solely by automated means.
We may use analytics, advertising, and marketing tools to understand customer behaviour, measure website performance, and show relevant advertising where permitted. This may involve limited profiling for marketing purposes, based on your website activity, purchases, or marketing interactions.
Children’s Privacy
Our website and products are not directed at children. We do not knowingly collect personal data from children for marketing purposes.
Third-Party Links
Our website may include links to third-party websites, social media platforms, or external services. We are not responsible for the privacy practices, content, or cookie practices of those third-party websites.
We recommend reading the privacy policies of any third-party websites you visit.
Complaints
If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve your concern.
You also have the right to complain to the UK data protection regulator:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, technology, legal obligations, or the way we use personal data.
The latest version will always be available on this page. Please check this page periodically for updates.
Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Dream Factory Beds Ltd
20 Wenlock Road
London
England
N1 7GU
Email: info@dreamfactorybeds.co.uk
Telephone: 01353 888808