Privacy policy

This Privacy Policy explains how Bed Intentions Pty Ltd (“Bed Intentions”, “we”, “us”, “our”) collects, uses, discloses and protects personal information when you visit or make a purchase from our website (the “Site”), interact with our content, or contact us.

We aim to be transparent and clear about what we do with your information, in line with applicable privacy laws including the UK GDPR (for individuals in the United Kingdom).

1. Who we are 

Controller: Bed Intentions Pty Ltd (ABN 60 664 224 346)
Email: hello@bedintentions.com
Address: 71 Ricky Way, Epping, VIC 3076, Australia
Phone: +61 402 535 122

If you have questions or want to exercise your rights, contact us using the details above.

UK representative 

Melber Consulting LTD

Address: 1 Charterhouse News London EC1M 6BB

2. What personal information we collect

We collect personal information in the following ways:

A. Information you provide to us

  • Order and account details: name, billing/shipping address, email, phone, order history, returns/exchanges.

  • Payment details: payments are processed by third-party payment providers; we do not typically store full card details (we may store limited payment tokens and transaction references).

  • Customer support: messages you send us (email or contact forms), and any information you choose to include.

  • Marketing preferences: email subscription status and preferences.

  • Reviews/feedback: content you submit, if you choose to do so.

B. Information we collect automatically 

When you visit the Site, we may automatically collect:

  • device information (browser, IP address, time zone, device identifiers),

  • browsing information (pages viewed, clicks, referring pages),

  • approximate location derived from IP,

  • cookie identifiers and similar tracking data.

This is commonly collected via cookies and similar technologies (see Section 6).

3. How we use your personal information (and our lawful bases)

UK GDPR requires us to have a lawful basis for using personal data.
Where UK GDPR applies, we rely on the following:

A. To process and deliver your order (Contract)

  • confirming orders, taking payment, shipping, delivery updates,

  • providing customer service related to your purchase,

  • handling returns, refunds, replacements.

B. To comply with legal obligations (Legal obligation)

  • record keeping for tax/accounting,

  • fraud prevention, compliance and responding to lawful requests.

C. To run and improve our business (Legitimate interests)

  • keeping the Site secure and preventing abuse/fraud,

  • improving products, customer experience and site performance,

  • measuring general site usage in a privacy-conscious way (where consent is not required), and troubleshooting.

We balance our legitimate interests against your rights and expectations.

D. For marketing and targeted advertising (Consent where required)

  • sending marketing emails where you have opted in (or where otherwise permitted),

  • showing advertising and measuring ad performance.

For the UK, analytics and advertising cookies/pixels generally require opt-in consent (not “legitimate interests”), which is handled through your cookie choices (Section 6).

4. Who we share personal information with

We share personal information with trusted service providers where needed to operate our business, including:

  • E-commerce platform: Shopify (storefront, checkout, order management).

  • Payment processors: providers that process card or alternative payments (e.g., Shopify Payments and other payment providers you choose at checkout).

  • UK fulfilment and delivery partners: our fulfilment warehouse/partner(s), shipping carriers and logistics providers to deliver your order and manage returns.

  • Analytics: Google Analytics 4 (to understand site usage and improve performance).

  • Advertising: Meta Platforms, Inc. Pixel (to measure advertising effectiveness and show relevant ads where you consent).

  • Professional advisers: legal, accounting, insurance and other advisers as needed.

  • Authorities / legal: where required to comply with law or protect rights/safety.

We do not sell your personal information in the ordinary sense. We may share information as part of a merger, acquisition or asset sale.

5. International transfers (including UK GDPR)

Although we use UK fulfilment, some of our service providers and systems may process data outside the UK (for example, where a vendor’s infrastructure is located overseas). If UK GDPR applies, transferring personal data outside the UK may require “appropriate safeguards”, such as the UK’s International Data Transfer Agreement (IDTA) or the UK Addendum to EU standard clauses.

Where relevant, we use appropriate safeguards required by law for these transfers.

6. Cookies, pixels and similar technologies

We use cookies and similar technologies to:

  • keep the Site working (e.g., cart functionality, security),

  • remember preferences,

  • understand site performance (analytics),

  • measure advertising and show relevant ads (where enabled).

UK/EEA cookie consent

For UK visitors, non-essential cookies (including most analytics and advertising cookies) generally require your consent.
You can manage your preferences via our cookie banner and at any time via [COOKIE SETTINGS LINK].

Cookie categories we use may include:

  • Strictly necessary: required for the Site to function.

  • Analytics: helps us understand how people use the Site (e.g., GA4).

  • Marketing: helps us measure and improve ads (e.g., Meta Pixel).

7. Marketing communications

If you sign up to receive marketing, we may email you about new products, content, events and offers. You can opt out at any time by:

If you opt out, we may still send non-marketing messages (e.g., order confirmations, shipping updates, important service notices).

8. How long we keep your information

We keep personal information only as long as necessary for the purposes described above, including:

  • Orders and financial records: typically retained for the period required by tax/accounting laws (often several years).

  • Customer support records: retained as long as needed to resolve enquiries and for reasonable follow-up.

  • Analytics/advertising data: retained according to the settings and retention controls in our analytics/advertising platforms and cookie preferences.

9. Your rights

You have rights over your personal data, including:

  • access to your data,

  • correction,

  • deletion,

  • restriction of processing,

  • data portability,

  • objection (in certain cases),

  • withdrawing consent (where processing is based on consent).

These are part of the UK GDPR “right to be informed” framework and related rights.

To exercise your rights, contact us at hello@bedintentions.com. We may need to verify your identity before responding.

Complaints

If you are in the UK and are unhappy with how we handle your data, you can complain to the UK regulator, the Information Commissioner's Office (ICO).
We’d appreciate the chance to resolve it first—please contact us.

10. Security

We take reasonable technical and organisational steps to protect personal information, including limiting access, using secure service providers, and applying security controls appropriate to the risk. No method of transmission or storage is 100% secure.

11. Children

Our Site is not intended for individuals under 18. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal or regulatory changes. We will post the updated version on this page and update the “Last updated” date.

13. Contact us

For privacy questions, requests or complaints:
Email: hello@bedintentions.com
Address: 71 Ricky Way, Epping, VIC 3076, Australia