Privacy policy
Privacy Policy
1. Who we are
This website is operated by two companies, both trading as Nimbus Beds. Each is a data controller for the personal information it holds. The company that contracts with you for your purchase is the controller of your order data, and is identified on your order confirmation.
| Company | Details |
|---|---|
| Nimbus Beds Ltd | Registered in Scotland, company number SC556435 Unit 3 Cupar Retail Park, South Road, Cupar, Fife, KY15 5JE Telephone 01334 845015 |
| Nimbus Beds Thornton Ltd | Registered in Scotland, company number SC803577 Unit 12/13 Strathore Business Park, Thornton, Kirkcaldy, Fife, KY1 4EH Telephone 01592 381673 |
For any data protection question, contact contact@nimbusbeds.com, or write to us at either address above.
We process personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
2. Information we collect
| Category | Examples |
|---|---|
| Identity and contact | Name, delivery and billing address, email, telephone number |
| Order and transaction | Products ordered, order value, deposit and payment status, delivery date |
| Payment | Card payment confirmation and reference. We do not receive or store full card numbers |
| Finance application | Information you provide to support a credit application, and the decision outcome |
| Service and warranty | Correspondence, complaint records, fault reports, photographs of reported faults |
| Marketing preferences | Consent status and subscription history |
| Website and device | IP address, browser and device type, pages viewed, cookie identifiers — where you consent |
| Recruitment | Application and employment information |
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Taking and fulfilling your order, arranging delivery and assembly | Performance of a contract |
| Handling a finance application and passing it to the lender | Performance of a contract, or steps taken at your request before entering one |
| After-sales support, warranty claims and complaints | Performance of a contract, and our legitimate interests in resolving issues properly |
| Accounting, VAT and business records | Legal obligation |
| Preventing and detecting fraud | Legitimate interests, and legal obligation where applicable |
| Marketing emails or text messages | Consent, which you may withdraw at any time |
| Non-essential cookies and website analytics | Consent |
| Establishing, exercising or defending legal claims | Legitimate interests |
| Considering job applications | Steps taken at your request before entering a contract |
4. Finance applications and credit reference agencies
If you apply for finance through us, we pass the information needed to process that application to our finance provider, who acts as an independent data controller from that point. They may carry out identity and affordability checks and may search records held by credit reference and fraud prevention agencies. Those searches may be recorded and may be visible to other lenders.
The lender will give you its own privacy information explaining how it uses your data, including which credit reference agencies it uses. We recommend you read it.
We keep a record that an application was made and its outcome, so we can service your order and handle any later query or complaint.
5. Who we share your information with
- Our finance provider, where you apply for or take finance
- Manufacturers and suppliers, where a warranty claim requires assessment or a replacement part
- Delivery and installation partners, including our third-party courier, limited to what's needed to complete your delivery
- Shopify, which hosts this website and processes online orders
- Payment providers, including Klarna, PayPal and Shop Pay, where you use those methods
- Our accountants and professional advisers, where necessary
- Regulators, law enforcement and courts, where we are legally required to disclose
We do not sell your personal information, and we do not share it for third-party marketing.
6. International transfers
Some service providers we use may process data outside the UK. Where that happens we rely on a UK adequacy decision, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so your information continues to receive an equivalent standard of protection.
7. How long we keep it
| Record | Retention period |
|---|---|
| Order, delivery and payment records | 6 years from the end of the relevant accounting year |
| Finance application records | 6 years from the end of the agreement |
| Warranty and after-sales records | The length of the warranty, plus 6 years |
| Complaint records | 6 years from closure |
| Marketing consent records | Until consent is withdrawn, plus 2 years to evidence the withdrawal |
| Unsuccessful job applications | 12 months |
| Website analytics and cookie data | As set out in our cookie banner, and no longer than 24 months |
8. Marketing
Where you've consented, we may send you marketing by email or text. Every message includes an unsubscribe link, and you can reply STOP to any text. You may also withdraw consent at any time by emailing contact@nimbusbeds.com.
Where we run a prize draw or competition, entering it is separate from consenting to marketing — you may enter without agreeing to receive marketing.
Withdrawing consent doesn't affect the lawfulness of anything we did beforehand, and doesn't affect messages we need to send you about an order you've placed.
9. Cookies
Essential cookies are needed for the site to work, including keeping items in your basket and processing checkout. Non-essential cookies, including analytics and advertising cookies, are used only where you consent through our cookie banner. You can change or withdraw your preferences at any time through the banner or your browser settings.
10. Your rights
You have the right to:
- be told how your personal information is used, which is the purpose of this notice
- request a copy of the personal information we hold about you
- have inaccurate information corrected
- have information erased, where there's no continuing lawful reason for us to keep it
- restrict how we use your information while a query about it is resolved
- object to processing we carry out on the basis of legitimate interests
- receive certain information in a portable format
- withdraw consent at any time, where consent is the basis on which we process
To exercise any of these, contact contact@nimbusbeds.com or write to either store address. We'll respond within one month. If your request is complex we may extend that by up to two further months and will tell you if we do. We may need to verify your identity first.
11. Automated decision-making
We don't make automated decisions about you. Where you apply for finance, the lender may use automated processing to reach a lending decision. Their privacy information explains your rights in relation to that decision, including your right to ask for human review.
12. Security
We use encrypted connections across this website, restrict access to personal information to staff who need it, and require our suppliers to hold appropriate safeguards. We do not receive or store full payment card details.
13. Children
Our products are sold to adults. We don't knowingly market to or collect information from children. Where a purchase relates to a child's bed, the contracting customer must be aged 18 or over.
14. Complaints
If you're unhappy with how we've handled your personal information, please contact us first at contact@nimbusbeds.com so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/concerns, on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
15. Changes to this notice
We review this notice at least annually and update it when our processing changes. The version that applies to you is the one published here at the time.