Last updated: 28 August 2026.

Best Bunk Beds Ltd respects your privacy and is committed to protecting your personal information. This policy explains what information we collect, why we use it, who we share it with, how long we keep it and the rights available to you.

This policy applies when you visit bestbunkbeds.co.uk, contact us, request a quotation, subscribe to marketing, place an order, receive delivery or installation services, or otherwise deal with us as a customer, prospective customer, supplier or business contact.

1. Who we are

Best Bunk Beds Ltd is the controller responsible for the personal information described in this policy.

– Legal name: Best Bunk Beds Ltd.
– Company number: 07708913.
– Registered office: 186 Petts Wood Road, Petts Wood, Orpington, Kent, England, BR5 1LG.
– Email: enquiries@bestbunkbeds.co.uk.
– Telephone: +44 (0) 207 232 4600.

Please use the subject line Data protection request or Data protection complaint when contacting us about your information.

2. Personal information we collect

Depending on how you interact with us, we may collect:

– Identity and business information: your name, job title, employer or organisation and relevant procurement details.
– Contact information: your business or personal email address, telephone number, billing address, delivery address and installation location.
– Enquiry and project information: the products, quantities, room or site requirements, delivery restrictions, intended use, messages, drawings, specifications and other information you provide when requesting advice or a quotation.
– Order and transaction information: quotations, purchase orders, contracts, invoices, payment status, delivery records, installation information and after-sales correspondence. We do not ask you to send complete payment-card details through our website forms.
– Marketing information: your newsletter subscription, consent record, communication preferences, email engagement and unsubscribe status.
– Website and device information: internet protocol address, device and browser information, approximate location, page visits, referral source and interactions with our website, where collected through permitted cookies or similar technologies.
– Correspondence: emails, telephone notes, form submissions, complaint records and other communications with us.

Please do not send special-category information, such as health, ethnicity, religion or biometric information, unless it is genuinely necessary for your request and we have agreed an appropriate way for you to provide it.

3. How we collect personal information

We usually collect information directly from you when you:

– complete an enquiry, contact or quotation form;
– contact us by telephone, email or post;
– subscribe to our Mailchimp newsletter and complete the double opt-in process;
– request advice, a site assessment or a quotation;
– place an order or arrange delivery, installation or after-sales support; or
– use our website and consent to analytics cookies.

We may sometimes obtain business contact information from tender documents, procurement portals, referrals, trade directories, company websites or other publicly accessible professional sources. This may include your name, role, organisation, business email address and telephone number. When we contact you, we will identify ourselves and provide a straightforward way to object to further marketing.

4. Why we use personal information and our lawful bases

– Responding to enquiries, giving product advice and preparing quotations.
Information used: identity, contact, organisation, project and correspondence information.
Lawful basis: taking steps at your request before entering into a contract, performing a contract, and our legitimate interest in responding to business enquiries.

– Processing orders, payments, delivery, installation, warranty matters and after-sales support.
Information used: identity, contact, order, transaction, delivery, project and correspondence information.
Lawful basis: performing a contract and complying with legal obligations.

– Maintaining accounts, tax records, contracts, audit trails and legal claims.
Information used: identity, contact, organisation, order, transaction and correspondence information.
Lawful basis: legal obligations and our legitimate interests in administering and protecting our business and legal rights.

– Sending the newsletter and other electronic marketing requested by you.
Information used: name, email address, consent record, preferences and engagement information.
Lawful basis: consent. You may withdraw consent at any time.

– Relevant business-to-business communications using professional contact details obtained from appropriate sources.
Information used: name, role, organisation, business contact details, source and communication history.
Lawful basis: our legitimate interest in developing relevant business relationships, subject to your rights and the Privacy and Electronic Communications Regulations.

– Understanding website use and improving content and performance through Google Analytics 4.
Information used: online identifiers, device information and website activity.
Lawful basis: consent for non-essential cookies and the related processing. Google Analytics 4 should operate only after the required consent has been given.

– Protecting our website, systems, users and business from misuse, fraud and security threats.
Information used: technical, device, access-log and correspondence information.
Lawful basis: our legitimate interests in maintaining secure and reliable services and, where applicable, legal obligations.

– Handling data-protection requests and complaints.
Information used: identity, contact, verification, request, complaint and correspondence information.
Lawful basis: legal obligations and our legitimate interests in demonstrating compliance and resolving concerns.

5. Legitimate interests

Where we rely on legitimate interests, we consider whether the processing is necessary and balance our interests against your rights and reasonable expectations. These interests include responding to business enquiries, administering contracts, maintaining business relationships, securing our systems, improving our services, preventing fraud and protecting legal rights.

Your right to object: you have the right to object at any time to our use of your personal information for direct marketing. You may also object to processing based on legitimate interests. We will stop direct marketing when you object. For other objections, we will consider your circumstances and stop unless we have compelling legitimate grounds or need the information for legal claims.

6. Website forms, analytics and SEO services

Our website is built using WordPress and Elementor. Information submitted through website forms is processed so that we can respond to your message, assess your requirements and, where requested, prepare a quotation or take steps towards a contract.

We use Google Analytics 4 to understand website use. GA4 may collect online identifiers and information about pages, devices and interactions when you consent to analytics cookies. You can refuse or withdraw consent using our website cookie controls. Refusing analytics cookies does not prevent you from using the essential parts of the website.

We use Google Search Console and Ahrefs to review search visibility, website performance, backlinks and technical SEO. These services generally provide us with search-performance, crawl and aggregated website information. We do not use them as a reason to identify individual website visitors. If the way we configure these services changes and they begin collecting additional personal information, we will update this policy and our cookie information.

Strictly necessary technologies may operate without consent where they are required to provide the website, maintain security, remember privacy choices or transmit a communication you request. Non-essential analytics technologies require prior consent. Your browser can also delete or block cookies, although this may affect some website features.

7. Email marketing

We use Mailchimp to manage newsletter subscriptions and marketing emails. Newsletter subscriptions use a double opt-in process, so you must confirm the subscription through the verification message sent to your email address.

You can unsubscribe at any time by using the link in a marketing email or contacting us. Withdrawing marketing consent does not affect processing that occurred before withdrawal. We may retain the minimum information required to record your opt-out and prevent further marketing to that address.

We may send relevant communications to corporate business contacts where permitted by law and where our legitimate interests apply. We will respect objections and apply the consent rules that protect individuals, sole traders and certain partnerships where required by the Privacy and Electronic Communications Regulations.

8. Who we share personal information with

We may share personal information only where necessary with:

– employees, authorised contractors and professional advisers who need the information for their work;
– website, hosting, IT, cybersecurity, email and form-processing providers;
– Google, for consent-based website analytics and search-performance services;
– Intuit Mailchimp, for newsletter subscription management and email marketing;
– Ahrefs, for website crawling, backlink analysis and SEO performance services;
– manufacturers, suppliers, installers, delivery companies and international hauliers where required to fulfil your order or project;
– payment, accounting, banking, insurance, audit, legal and other professional service providers;
– public authorities, regulators, courts, law-enforcement bodies or other parties where disclosure is required or permitted by law; and
– a purchaser, investor or professional adviser if we consider a sale, merger, restructuring or transfer of all or part of our business.

We do not sell personal information.

9. International transfers

Some providers we use, including Google and Mailchimp, may process personal information outside the United Kingdom. Order fulfilment may also require limited contact and delivery information to be shared with service providers in another country where an international delivery or installation has been requested.

Where a restricted transfer is made, we use an available lawful mechanism. This may include UK adequacy regulations or appropriate contractual safeguards such as the International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses, together with any required transfer-risk assessment and supplementary measures.

You may contact us for further information about the safeguard relevant to your information.

10. How long we keep personal information

– Enquiries and quotations that do not become orders: up to 24 months after the last meaningful contact. This allows us to respond to follow-up questions, understand quotation history and manage prospective projects.

– Customer, order, contract, invoice, delivery and accounting records: normally 6 years from the end of the relevant company financial year, or longer where law, an active dispute, warranty or compliance check requires it. This supports contract administration, tax, accounting, warranty matters and legal claims.

– Newsletter and marketing records: while you remain subscribed. A minimal suppression record may be kept after opt-out to manage consent, communication preferences and future suppression.

– Website and security logs: up to 12 months, unless a security incident or legal requirement justifies longer retention. These records support website security, troubleshooting, fraud prevention and incident investigation.

– Data-protection requests and complaints: for as long as reasonably necessary to demonstrate our response and compliance, normally up to 6 years after closure. This supports complaint handling, accountability and the establishment, exercise or defence of legal claims.

We may keep information longer where required by law, a regulator, litigation, an unresolved complaint or another documented business need. We may retain anonymised information that can no longer identify you.

11. Security

We use appropriate technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure. Access is limited to people and providers who need the information for legitimate purposes and who are subject to appropriate confidentiality or contractual duties.

No internet service is completely secure. Please do not send passwords, complete payment-card details or unnecessary sensitive information through ordinary email or website forms.

12. Your data-protection rights

Depending on the circumstances and the lawful basis used, you may have the right to:

– ask whether we process your personal information and obtain a copy;
– ask us to correct inaccurate or incomplete information;
– ask us to erase information in certain circumstances;
– ask us to restrict processing in certain circumstances;
– object to processing based on legitimate interests;
– object at any time to direct marketing;
– receive information you provided in a structured, commonly used and machine-readable format where data portability applies;
– withdraw consent at any time, without affecting earlier lawful processing; and
– complain about how we have used your information.

These rights are not absolute. We may need to verify your identity and may ask for information needed to locate the relevant records. We normally respond within the period required by data-protection law and do not charge a fee unless the law permits us to do so.

13. Automated decision-making

We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.

14. Children’s information

Our products may be used by children, but our website and sales services are directed to adults, organisations and people authorised to make purchasing enquiries. We do not knowingly use the website to collect personal information directly from children for marketing. If you believe a child has provided personal information to us inappropriately, please contact us.

15. Data-protection complaints

You can raise a data-protection complaint by emailing enquiries@bestbunkbeds.co.uk, calling +44 (0) 207 232 4600, or writing to our registered office. Please identify the message as a data-protection complaint and provide enough information for us to understand and investigate the issue.

We will acknowledge receipt within 30 days, take appropriate steps to investigate, keep you informed where necessary and communicate the outcome without undue delay.

If you remain dissatisfied, you may complain to the Information Commissioner’s Office:

– Website: ico.org.uk/make-a-complaint.
– Telephone: 0303 123 1113.
– Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

We would welcome the opportunity to address your concern directly before you approach the ICO.

16. Other websites

Our website may link to websites operated by other organisations. Their privacy practices are outside our control. Please review the privacy information provided by the relevant organisation before submitting personal information.

17. Changes to this policy

We may update this policy when our services, suppliers or legal obligations change. The current version will be published on this page with its latest update date. Where appropriate, we may also notify affected people of a significant change.