Privacy Policy

Last updated: 20 April 2026

This Privacy Policy explains how Zora Beds (“we”, “us”, “our”) collects, uses, and protects your personal data when you use our website.

We are committed to protecting your privacy and handling your data in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are (Data Controller)

Zora Beds is the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or your data, you can contact us at:
📧 support@zorabeds.co.uk

2. What Personal Data We Collect

We may collect and process the following types of personal data:

Full name
Billing and delivery address
Email address
Phone number
Payment and transaction details
Order history and purchased products
Account login details (if applicable)
Communication records (emails, messages, support queries)
Marketing preferences
Information from surveys, promotions, or customer feedback
Technical data (IP address, browser type, device information)

3. How We Use Your Personal Data

We use your personal data for the following purposes:

To process and deliver your orders
To manage payments and transactions
To communicate with you regarding orders or enquiries
To provide customer support
To improve our products, services, and website experience
To send marketing communications (where you have consented)
To prevent fraud and ensure website security

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases:

Contract – to process and deliver your orders
Legal obligation – for accounting, tax, and compliance requirements
Legitimate interests – to improve our services, prevent fraud, and enhance user experience
Consent – for sending marketing emails, SMS, or promotional offers

You may withdraw your consent at any time.

5. Marketing Communications

If you opt in to receive marketing, we may send you updates about products, promotions, and offers.

You can unsubscribe at any time by:

Clicking the “unsubscribe” link in emails
Contacting us directly

6. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

Improve website functionality
Analyse user behaviour
Personalise your experience

You can control or disable cookies through your browser settings.

7. Sharing Your Data

We may share your data with trusted third parties, including:

Payment processors
Delivery and logistics providers
IT and website service providers
Marketing platforms (if applicable)

All third parties are required to respect the security of your personal data and process it lawfully.

8. International Data Transfers

Some of our third-party service providers may process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as:

UK-approved standard contractual clauses
Adequacy regulations

9. Data Retention

We retain your personal data only for as long as necessary to:

Fulfil the purposes we collected it for
Comply with legal, accounting, or reporting requirements

When data is no longer required, it is securely deleted or anonymised.

10. Data Security

We take appropriate technical and organisational measures to protect your data, including:

Secure servers and encryption
Restricted access to personal data
Firewalls and security monitoring

However, no online transmission is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Under the UK GDPR, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data
Restrict or object to processing
Request transfer of your data (data portability)
Withdraw consent at any time

To exercise your rights, contact us at:
📧 support@zorabeds.co.uk

12. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the
Information Commissioner's Office (ICO).

Website: https://www.ico.org.uk

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before submitting personal data.