Davey Down utilises industry-standard secure server technology to ensure that all customer records and transactional information are protected to the highest standards. We never sell, rent, or trade your personal details to third parties for independent marketing purposes.
1. Information We Collect
When you interact with our website or place an order for luxury bedding, we collect the necessary personal data to process and complete your contract with us:
- Customer Identity & Contact: Name, invoice address, delivery address, contact telephone number, and email address.
- Transactional Information: Order numbers, line items purchased, variant specifications, and lead times. (Payment card data is encrypted and handled exclusively by Stripe; full card numbers are never stored on our servers.)
- Device & Telemetry Data: IP address, browser type, and navigation flow collected via Cookiebot-consented analytics cookies.
2. How We Use Your Data
We process personal details strictly under legitimate business interests, contractual fulfilment obligations, and statutory requirements:
- To fulfil, manufacture, pack, and deliver your bedding orders.
- To transmit dispatch notifications, digital VAT invoices, and tracking links.
- To provide direct pre-sale customer consultations and after-sale support regarding product care, warranties, or exchanges.
- To send periodic email updates and seasonal offers where you have explicitly opted in (you may unsubscribe at any time via the link in every newsletter).
3. Third-Party Service Providers & Manufacturing Partners
To fulfil your order, we work with selected third-party partners. We only pass the minimum required data necessary to execute specific operational functions:
Third-Party Manufacturing & Direct Fulfilment Disclosure
You acknowledge and confirm that for direct factory fulfilment and bespoke made-to-order bedding items (including custom handcrafted mattress toppers and tailored duvets), we pass end-user delivery information—specifically your recipient name, delivery address, contact telephone number, and email address—to our vetted third-party manufacturing and fulfilment partners for the purpose of direct shipping and courier dispatch. These partners are contractually bound under UK data protection standards to process your data strictly for order completion and delivery logistics.
- Payment Gateways (Stripe Inc.): Handles encrypted credit/debit card transactions and fraud prevention under strict PCI-DSS Level 1 certification.
- Couriers & Logistics Networks: Third-party carriers (such as DPD, DX Freight, and Royal Mail) receive recipient name, delivery address, and contact numbers strictly for transit routing, delivery execution, and SMS tracking alerts.
- Cookie Consent Management (Cookiebot): Manages and records user consent preferences in compliance with UK PECR and GDPR requirements.
4. Data Retention & Security
Order transaction records and invoices are retained for the statutory period required by UK tax legislation (HMRC). Personal data stored on our systems is protected using multi-layer access controls, firewall inspection, and TLS/SSL encryption.
5. Your Legal Rights Under UK GDPR
As a UK consumer, you hold clear statutory rights regarding your personal data:
- The right to access a copy of the personal information we hold about you.
- The right to request rectification of inaccurate contact or shipping records.
- The right to request erasure of your data where retention is no longer legally mandated.
- The right to withdraw marketing consent at any time.
For any data enquiries or to exercise your rights, please contact our Data Protection representative at customerservices@daveydown.com.