Privacy Policy

Grace Beds is responsible for the personal information described in this policy. You can contact Grace Beds about this notice or how your information is handled. Our current support email, telephone number and business address are published on that page.

We collect information you provide when you create or use a customer account, configure a product, place an order, request an invoice, contact us, submit a refund or warranty request, or leave a product review.

• Identity and contact details, including your name, email address and telephone number.
• Delivery and billing details needed to manage an order.
• Order, product-configuration, invoice, payment-status and customer-service records.
• Refund or warranty details and any evidence you choose to provide.
• Public review content and private review contact details. Your reviewer email is never displayed publicly.
• Necessary technical and security information such as session identifiers, limited device/browser information and privacy-conscious abuse-prevention signals.

We use personal information only where we have a lawful reason. Depending on the activity, this may be necessary to take steps at your request or perform a contract, comply with a legal obligation, protect our legitimate interests in operating and securing Grace Beds, or act on your consent.

• To configure, confirm, deliver and support your order.
• To create and secure the customer account linked to guest or signed-in orders.
• To issue invoices and maintain appropriate business and transaction records.
• To process enquiries, refunds, warranty claims and related communications.
• To moderate product reviews, prevent abuse and publish only approved public review content.
• To protect the website, investigate errors or misuse and maintain reliable services.

We do not sell personal information. Where necessary, information may be shared with service providers that support hosting, communications, secure document storage, delivery, customer support or professional advice; with payment or banking providers where an offline payment or refund requires it; and with regulators, courts or law-enforcement bodies where required by law.

Service providers may use information only for the agreed service and must protect it appropriately. If information is transferred outside the UK, we use an applicable adequacy decision or other legally recognised safeguard.

Grace Beds uses necessary cookies or similar storage to keep the website secure, maintain your session and guest cart, remember essential choices and support sign-in. We do not describe optional advertising or analytics cookies here because they are not part of the current website. If optional tracking is introduced, this policy and the consent controls must be updated first.

We retain information only for as long as needed for the purpose collected, including fulfilling orders and warranties, handling disputes or requests, meeting tax, accounting and other legal duties, preventing fraud and protecting legal rights. Retention is determined by the record type, applicable limitation or legal period, active service relationship and whether a dispute or investigation is open. When information is no longer required, it is securely deleted or anonymised, subject to controlled backup expiry.

Depending on the circumstances and lawful basis, you may have rights to access, correct, erase, restrict or object to use of your information, and to receive portable information. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.

To exercise a right, contact Grace Beds. We may need to verify your identity before disclosing or changing protected information.

Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint for current contact options.

We apply role-based access, customer-ownership checks, private storage for protected evidence and documents, validation, rate limiting, audit records and other technical and organisational safeguards appropriate to the information. No internet service can guarantee absolute security, but suspected incidents are investigated and handled under our operational procedures.

We review this notice when our services, providers or legal obligations change. Material changes will be brought to your attention where required, and the latest version will remain available on this page.