Privacy policy

This policy explains what personal information we collect when you visit this website or place an order, why we collect it, and what rights you have. It is written to meet the UK GDPR and the Data Protection Act 2018.

Who is responsible for your information

The data controller is Camil in bed, 30 N Gould St, Sheridan, WY 82801, United States. For anything in this policy, write to contact@camilinbed.com.

What we collect

Contact and order details — your name, email address, billing address, delivery address, telephone number where you give one, and the contents and history of your orders.
Payment information — payment is handled by our payment providers. We receive confirmation of payment and limited details such as the card type and last four digits. We never see or store your full card number.
Account information — where you create an account, your login details and saved preferences.
Correspondence — what you write to us and what we reply.
Technical and usage information — your IP address, device and browser type, and how you move around the site, collected through cookies and similar technologies.

Why we use it, and on what legal basis

To perform our contract with you — taking payment, dispatching your order, handling returns and refunds, and answering questions about an order.
To comply with legal obligations — keeping accounting and tax records for the periods the law requires.
For our legitimate interests — preventing fraud, keeping the site secure, understanding how the site is used, and improving what we sell and how we sell it. We balance these against your rights and interests.
With your consent — marketing emails, and non-essential cookies. You may withdraw consent at any time, and every marketing email contains an unsubscribe link.

Who we share it with

We share personal information only with parties who need it to run the business:

Shopify, which hosts this store and processes orders on our behalf.
Payment providers, which process your payment.
Carriers and fulfilment partners, which deliver your order.
Email and analytics providers, which we use to communicate with you and understand site usage.
Professional advisers and authorities, where the law requires it.

We do not sell your personal information.

Transfers outside the United Kingdom

Some of our providers are based outside the UK. Where personal information is transferred abroad, we rely on the UK Government's adequacy regulations where they apply, or on the International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses.

How long we keep it

Order and transaction records are kept for as long as tax and accounting law requires. Account information is kept while your account is open. Marketing consent records are kept until you withdraw consent and for a reasonable period afterwards so that we can prove the withdrawal was honoured. Enquiries that do not lead to an order are deleted once they are resolved and no longer needed.

Cookies

This site uses cookies that are necessary for it to work — remembering your basket and keeping your session secure — and, with your consent, cookies that measure how the site is used and support advertising. You can change your choices at any time through the cookie settings on the site, and you can block or delete cookies in your browser, though some parts of the site may then not work properly.

Your rights

You have the right to ask us for a copy of the personal information we hold about you; to have inaccurate information corrected; to have information erased in certain circumstances; to restrict or object to our processing, including objecting to direct marketing at any time; and to receive certain information in a portable format. Where processing is based on consent, you may withdraw it at any time without affecting what we did before.

To exercise any of these, write to contact@camilinbed.com. We reply within one month. We will never treat you less favourably for exercising a right.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk.

Children

This site is not intended for children, and we do not knowingly collect personal information about them.

Security

We take reasonable technical and organisational measures to protect personal information. No system is perfectly secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy. The version published on this page is the one that applies.