Privacy Policy
Last updated: 9 November 2026
WOOLEN TRADING LTD (company number 17570152), 71-75 Shelton Street, London, WC2H 9JQ, UK, trading as Woolen Sleep, is the data controller for this site. We use your data to process orders, keep tax records and prevent fraud. Some providers (Vercel, PayPal) process data in the US, under the UK–US Data Bridge or UK transfer agreements. Under UK GDPR you can access, correct or delete your data: contact@woolensleep.com. You can complain to the ICO (ico.org.uk).
This policy explains how we use your personal data when you visit woolensleep.com or buy from us, and your rights under UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1. Who we are
The data controller is WOOLEN TRADING LTD, trading as Woolen Sleep, company number 17570152, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Contact: contact@woolensleep.com.
2. Data we collect
- Contact and order details: name, delivery and billing address, email, phone number, items ordered, returns.
- Payment details: handled directly by our payment providers. We only see limited details such as card type and last four digits.
- Messages you send to our customer service.
- Website data: IP address, device, browser and pages viewed, collected through cookies (see our Cookie Policy).
- Marketing preferences.
3. Why we use it
| Purpose | Legal basis |
|---|---|
| Process, deliver and refund your orders; customer service | Contract |
| Keep accounting and tax records | Legal obligation |
| Prevent fraud and keep our website secure | Legitimate interests |
| Marketing emails and SMS | Consent, or the PECR "soft opt-in" for existing customers — unsubscribe at any time |
| Analytics and advertising cookies | Consent |
Our payment providers use automated fraud checks. You can ask for a human review of any decision.
4. Who we share it with
We never sell your data. We share it only with providers who help us run our store, under contract:
- Vercel Inc., United States (website hosting)
- PayPal, our only payment provider
- Our suppliers and delivery carriers, to ship your order
- Our customer service team and tools, including team members working outside the UK
- Email marketing and analytics/advertising providers such as Google, Meta and TikTok (with your consent)
- Our accountants, and authorities such as HMRC where the law requires
5. International transfers (UK → USA and others)
Some providers process data outside the UK, including in the United States, the EU, Canada and Asia. We protect these transfers using UK adequacy regulations, the UK–US Data Bridge for certified US companies, or the ICO's International Data Transfer Agreement / UK Addendum to the Standard Contractual Clauses.
6. How long we keep it
Order and tax records: 6 years (UK legal requirement). Customer service messages: up to 3 years. Marketing data: until you unsubscribe. Cookies: see our Cookie Policy.
7. Your rights
You have the right to access, correct, delete, restrict or transfer your data, to object to its use (including direct marketing at any time), and to withdraw consent. Email contact@woolensleep.com. It is free, and we reply within one month.
8. Complaints
Please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF · 0303 123 1113 · www.ico.org.uk/make-a-complaint.
9. Security
Our website uses encrypted (HTTPS) connections and PCI-DSS compliant payment processing. Access to your data is restricted to people who need it.
10. Children
Our store is not intended for anyone under 18, and we do not knowingly collect their data.
11. Changes
We may update this policy. The date at the top shows the latest version.