Privacy policy

Bamboo Haven

Privacy Policy

How We Collect, Use, and Protect Your Personal Data

Last Updated: April 2026 | Effective Date: April 2026

At Bamboo Haven, we believe that trust is as important as thread count. Your privacy matters to us, and we are committed to being transparent about how we collect, use, store, and protect your personal data. This Privacy Policy explains your rights and our responsibilities as a UK-based online retailer operating under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using the Bamboo Haven website (www.bamboohaven.co.uk) or purchasing our bamboo bedding products, you confirm that you have read and understood how we handle your personal information.

1. Who We Are (Data Controller)

Bamboo Haven is the data controller responsible for your personal data. We are a UK-based e-commerce retailer specialising exclusively in premium 100% bamboo viscose bedding, including OEKO-TEX® Standard 100 certified duvet covers, fitted sheets, pillowcases, duvets, pillows, comforters, and complete bedding sets.

Business Name: Bamboo Haven

Country of Operation: United Kingdom

Data Protection Contact: info@bamboohaven.co.uk

Website: www.bamboohaven.co.uk

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@bamboohaven.co.uk. We aim to respond to all privacy-related enquiries within 5 working days.

2. What Personal Data We Collect

We only collect personal data that is necessary for the purposes outlined in this policy. The categories of data we may collect include:

2.1 Data You Provide Directly

• Full name and title

• Delivery address and billing address

• Email address

• Phone number (if provided at checkout)

• Payment information (processed securely via third-party payment providers; we do not store full card details)

• Account login credentials (if you create a Bamboo Haven account)

• Communications you send us, including customer service enquiries, reviews, and feedback

• Marketing preferences (if you sign up to our newsletter or promotional emails)

2.2 Data Collected Automatically

When you browse the Bamboo Haven website, we may automatically collect certain technical data, including:

• IP address

• Browser type and version

• Device type and operating system

• Pages visited and time spent on each page

• Referring URLs (how you arrived at our website)

• Clickstream data and interactions with our product pages

This data is collected through cookies and similar tracking technologies. Please refer to Section 9 (Cookies) for full details.

2.3 Data from Third Parties

We may receive limited personal data from third-party sources such as payment processors, delivery partners, and analytics platforms. This data is used only for the purposes set out in this policy and is handled in accordance with UK GDPR.

3. Our Legal Basis for Processing Your Data

Under UK GDPR, we must have a valid legal basis for processing your personal data. We rely on the following legal bases:

3.1 Contract Performance

We process your name, delivery address, email, and payment information because it is necessary to fulfil your order for bamboo bedding products, arrange delivery, and manage any returns or refunds. Without this data, we cannot complete your purchase.

3.2 Legitimate Interests

We process certain technical and behavioural data (such as browsing data and purchase history) based on our legitimate interests in improving our website, understanding how customers interact with our bamboo bedding range, preventing fraud, and maintaining the security of our systems. We always balance our legitimate interests against your rights and will not process data where your interests override ours.

3.3 Legal Obligation

We may be required to process and retain certain data — such as financial transaction records — to comply with legal obligations, including HMRC requirements and consumer protection law.

3.4 Consent

Where we rely on consent — for example, to send you marketing emails about new bamboo bedding collections, seasonal promotions, or sleep wellness content — we will ask for your explicit opt-in. You have the right to withdraw your consent at any time by clicking ‘unsubscribe’ in any marketing email or by contacting us at hello@bamboohaven.co.uk.

4. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

4.1 Order Processing and Fulfilment

• Processing and confirming your order for bamboo bedding products

• Arranging delivery of your order through our nominated courier partners

• Sending order confirmation, despatch notifications, and delivery updates

• Processing returns, exchanges, and refunds

• Handling customer service queries and complaints

4.2 Account Management

• Creating and managing your Bamboo Haven customer account

• Enabling order history and saved preferences

• Resetting passwords and managing account security

4.3 Marketing and Communications (Consent-Based)

• Sending promotional emails about new bamboo bedding products, limited editions, and exclusive offers

• Sharing sleep wellness content, care guides for bamboo bedding, and brand news

• Conducting customer satisfaction surveys

You can opt out of marketing communications at any time. Opting out will not affect your ability to receive transactional emails related to your orders.

4.4 Website Improvement and Analytics

• Analysing how customers browse and interact with our bamboo bedding product pages

• Improving website performance, navigation, and user experience

• Testing new features and content

4.5 Fraud Prevention and Security

• Detecting and preventing fraudulent transactions

• Protecting the security and integrity of our website and customer accounts

• Complying with legal and regulatory requirements

5. Who We Share Your Data With

We do not sell your personal data to third parties. We will never share your information for third-party marketing purposes without your explicit consent. We share your data only where necessary with trusted third parties who support our business operations, including:

5.1 Delivery and Logistics Partners

We share your name, delivery address, and contact details with our courier partners solely for the purpose of delivering your bamboo bedding order. Our couriers are contractually obligated to handle your data securely and only use it for delivery purposes.

5.2 Payment Processors

Payment transactions are processed by secure, PCI DSS-compliant third-party payment providers. We share only the minimum data necessary to process your payment. We do not store your full card details.

5.3 Technology and Platform Providers

We use third-party software providers to operate our website, manage customer communications, and run our e-commerce platform. These providers act as data processors on our behalf and are bound by data processing agreements in compliance with UK GDPR.

5.4 Analytics Providers

We use analytics services (such as Google Analytics) to understand how visitors use our website. These services may process anonymised or pseudonymised data. We have configured these tools to anonymise IP addresses where possible.

5.5 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, or where necessary to protect the rights, property, or safety of Bamboo Haven, our customers, or others.

6. International Data Transfers

Bamboo Haven is based in the United Kingdom. Some of our third-party technology and analytics providers may process data outside the UK. Where data is transferred outside the UK, we ensure that appropriate safeguards are in place, including:

• Transfers to countries with UK adequacy decisions

• Use of the UK International Data Transfer Agreement (IDTA) or equivalent Standard Contractual Clauses

• Binding Corporate Rules where applicable

If you would like more information about the safeguards in place for international data transfers, please contact us at hello@bamboohaven.co.uk.

7. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:

7.1 Order and Transaction Data

We retain records of your orders, including your name, address, and purchase history, for a period of 7 years from the date of purchase. This is in line with HMRC requirements for financial records.

7.2 Customer Account Data

If you hold a Bamboo Haven customer account, your account data is retained for as long as your account remains active. If you request deletion of your account, we will delete or anonymise your personal data within 30 days, except where retention is required for legal or compliance purposes.

7.3 Marketing Data

If you have consented to receive marketing communications, we retain your email address and marketing preferences until you withdraw consent or request removal. We will periodically review inactive subscribers and remove those who have not engaged for 24 months.

7.4 Website Analytics Data

Anonymised or aggregated website analytics data may be retained indefinitely for the purpose of long-term performance analysis.

8. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the following rights in relation to your personal data. We will respond to all valid requests within one calendar month.

8.1 Right of Access

You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). You can submit a SAR by emailing hello@bamboohaven.co.uk with the subject line ‘Subject Access Request’.

8.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update certain information directly through your Bamboo Haven account, or contact us to request a correction.

8.3 Right to Erasure (‘Right to Be Forgotten’)

In certain circumstances, you have the right to request that we delete the personal data we hold about you. This right is not absolute and does not apply where we are required to retain data for legal or compliance reasons, such as financial records.

8.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data or have objected to processing while we consider your request.

8.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit it to another controller where technically feasible.

8.6 Right to Object

You have the right to object to processing based on our legitimate interests, including profiling. You also have an absolute right to object to your data being used for direct marketing purposes.

8.7 Rights in Relation to Automated Decision-Making

Bamboo Haven does not currently use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

8.8 How to Exercise Your Rights

To exercise any of your rights, please contact us at hello@bamboohaven.co.uk. We may need to verify your identity before processing your request. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.

If you are not satisfied with how we have handled your personal data or responded to your request, you have the right to lodge a complaint with the UK’s data protection supervisory authority:

Information Commissioner’s Office (ICO)

Website: www.ico.org.uk

Helpline: 0303 123 1113

9. Cookies and Tracking Technologies

Bamboo Haven uses cookies and similar tracking technologies on our website. Cookies are small text files stored on your device that help us provide a better shopping experience and understand how our bamboo bedding website is used.

9.1 Types of Cookies We Use

Essential Cookies

These cookies are necessary for the website to function correctly. They enable core features such as the shopping basket, secure checkout, and user account login. These cookies cannot be disabled without significantly affecting your experience.

Analytics Cookies

We use analytics cookies (such as Google Analytics) to understand how visitors navigate our website, which product pages are most popular, and how we can improve our bamboo bedding range and site performance. Analytics data is anonymised or pseudonymised wherever possible.

Marketing and Preference Cookies

With your consent, we may use marketing cookies to personalise the content and advertisements you see, and to measure the effectiveness of our campaigns. These cookies may be set by trusted third-party advertising partners.

9.2 Managing Your Cookie Preferences

When you first visit the Bamboo Haven website, you will be presented with a cookie consent banner. You can choose to accept all cookies, reject non-essential cookies, or manage your preferences. You can update your cookie preferences at any time via the cookie settings link in the footer of our website.

You can also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For more information on managing cookies, visit www.allaboutcookies.org.

10. Children’s Privacy

The Bamboo Haven website and our bamboo bedding products are intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 13. If you believe that a child has provided us with personal data, please contact us at hello@bamboohaven.co.uk and we will take prompt steps to delete that information.

11. How We Protect Your Data

Bamboo Haven takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• Secure Sockets Layer (SSL) encryption across the entire Bamboo Haven website

• Encrypted storage of sensitive customer data

• Restricted internal access to personal data on a need-to-know basis

• Regular security reviews of our systems and third-party providers

• PCI DSS-compliant payment processing through trusted third-party gateways

While we take all reasonable precautions, no method of transmission over the internet is completely secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately at hello@bamboohaven.co.uk.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours as required under UK GDPR, and will contact affected individuals without undue delay where required.

12. Links to Third-Party Websites

The Bamboo Haven website may contain links to third-party websites, including social media platforms, review sites, and payment portals. Once you leave our website, this Privacy Policy no longer applies. We are not responsible for the privacy practices of third-party websites and encourage you to read their privacy policies before providing any personal data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our data practices, or the services we offer. Any updates will be published on this page with a revised ‘Last Updated’ date. We encourage you to review this policy periodically.

Where changes are significant, we will take reasonable steps to notify you directly, for example by email or by displaying a notice on our website.

14. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

Email: info@bamboohaven.co.uk

Subject Line: Privacy Enquiry

Website: www.bamboohaven.co.uk

We are committed to handling your data with the same care and attention we bring to every bamboo bedding product we sell. Your trust is something we take seriously.

Bamboo Haven — Premium Bamboo Bedding, Responsibly Made

OEKO-TEX® Standard 100 Certified | 100% Bamboo Viscose | 300 Thread Count