Last updated: October 2025
At Marshmallow Mattress, we value your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information when you interact with us online or place an order.
1. Information We Collect
We collect the following types of data when you use our website or make a purchase:
-
Contact details: name, email address, phone number, and delivery/billing address.
-
Payment details: securely processed via trusted third-party providers (we never store your full card information).
-
Account and order history: products purchased, preferences, and communication history.
-
Website usage data: collected through cookies and analytics tools to help improve our site and advertising performance.
2. How We Use Your Information
We use your personal data to:
-
Process and deliver your orders.
-
Communicate order updates and customer support responses.
-
Improve our products, website, and customer experience.
-
Send marketing emails or SMS (only if you have opted in).
-
Detect and prevent fraud or misuse of our services.
3. Legal Basis for Processing
We process your data under one or more of the following lawful bases:
-
Contract: to fulfil your purchase or service request.
-
Consent: when you sign up for marketing communications.
-
Legitimate interest: to improve our services or understand customer behaviour.
-
Legal obligation: to meet tax or accounting requirements.
4. Data Sharing
We may share limited information with trusted third parties who help us operate our business, such as:
-
Payment processors (e.g., Stripe, PayPal)
-
Delivery partners (e.g., Royal Mail, DPD)
-
Marketing and analytics providers (e.g., Klaviyo, Meta Ads, Google Analytics)
These partners only process your data under our instructions and in compliance with GDPR. We never sell your personal data.
5. Cookies
Our website uses cookies to improve your browsing experience and measure site performance. You can manage or disable cookies in your browser settings at any time.
6. Data Retention
We retain personal data only for as long as necessary to fulfil your orders, comply with legal obligations, or manage your account.
7. Your Rights
Under UK and EU GDPR, you have the right to:
-
Access a copy of your personal data.
-
Request correction or deletion of your information.
-
Withdraw consent for marketing at any time.
-
Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been misused.
To exercise these rights, contact us at support@marshmallowmattress.co.uk.
8. Updates to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on our website.