Privacy Policy
Devon Duvets Handcrafted Ltd Privacy Policy
Last updated: 11 May 2026
This privacy policy explains how Devon Duvets Handcrafted Ltd collects, uses, stores and protects your personal data when you use our website, place an order, contact us, subscribe to our communications or otherwise interact with us.
It is important that you read this privacy policy together with any other privacy notice or fair processing information we may provide on specific occasions when we collect or process personal data about you. This privacy policy supplements any other notices and is not intended to override them.
1. Who we are
Devon Duvets Handcrafted Ltd is the controller and is responsible for your personal data. In this privacy policy, “Devon Duvets”, “we”, “us” or “our” refers to Devon Duvets Handcrafted Ltd.
Devon Duvets Handcrafted Ltd is a company registered in England and Wales. Our company registration number is 7201126 and our registered office is:
Devon Duvets Handcrafted Ltd
1 Beaumont Way
Langage South
Plympton
Devon
PL7 5FN
United Kingdom
If you have any questions about this privacy policy or how we handle your personal data, please contact us through the Contact Us page on our website, or by writing to us at our registered office address.
You have the right to make a complaint at any time to the Information Commissioner’s Office, the UK regulator for data protection issues: www.ico.org.uk. We would, however, appreciate the opportunity to deal with your concerns first, so please contact us in the first instance.
2. Changes to this privacy policy
We keep our privacy policy under regular review and may update it from time to time.
It is important that the personal data we hold about you is accurate and current. Please let us know if your personal data changes during your relationship with us.
3. The personal data we collect
Personal data means any information that can identify you as an individual. We may collect, use, store and transfer different kinds of personal data about you, including:
Identity Data
This may include your name, title and, where relevant, company name.
Contact Data
This may include your billing address, delivery address, email address and telephone number.
Transaction Data
This may include details of products you have purchased from us, order details, payment information, delivery information, returns, refunds and customer service records.
Technical Data
This may include your internet protocol address, browser type and version, time zone setting and location, device information, operating system and platform, and other technology on the devices you use to access our website.
Usage Data
This may include information about how you use our website, products and services.
Profile Data
This may include your purchases, preferences, feedback, reviews, survey responses and communication history with us.
Marketing and Communications Data
This may include your preferences in receiving marketing from us and your communication preferences.
We do not intentionally collect special category data about you, such as information about your health, race or ethnicity, religious or philosophical beliefs, political opinions, trade union membership, genetic or biometric data, sex life or sexual orientation. We also do not intentionally collect information about criminal convictions or offences.
4. How we collect your personal data
We collect personal data in the following ways:
Directly from you
You may provide us with personal data when you place an order, create an account, contact us, complete a form, subscribe to our newsletter, leave a review, request information, enter a promotion or otherwise communicate with us.
Automatically through our website
As you use our website, we may automatically collect Technical Data and Usage Data through cookies and similar technologies. Please see the cookies section below for more information.
From third parties
We may receive personal data about you from third parties such as payment providers, delivery companies, website analytics providers, advertising platforms, review platforms and technical service providers.
5. How we use your personal data
We will only use your personal data where the law allows us to. Most commonly, we use your personal data in the following ways:
- To process and deliver your order: Identity, Contact, Transaction. Lawful basis: Performance of a contract with you.
- To manage payments, fees, charges, refunds and returns: Identity, Contact, Transaction. Lawful basis: Performance of a contract; legal obligation; legitimate interests.
- To communicate with you about your order or enquiry: Identity, Contact, Transaction, Communications. Lawful basis: Performance of a contract; legitimate interests.
- To provide customer service and respond to questions, complaints or reviews: Identity, Contact, Profile, Communications. Lawful basis: Legitimate interests.
- To manage your account with us, if you create one: Identity, Contact, Profile. Lawful basis: Performance of a contract; legitimate interests.
- To send you marketing communications where permitted: Identity, Contact, Marketing and Communications. Lawful basis: Consent or legitimate interests, depending on the circumstances.
- To personalise and improve our website, products, services and customer experience: Technical, Usage, Profile. Lawful basis: Legitimate interests.
- To understand the effectiveness of our website and marketing: Technical, Usage, Marketing and Communications. Lawful basis: Consent where required for cookies; legitimate interests where applicable.
- To protect our website, business and customers from fraud, misuse or security threats: Identity, Contact, Technical, Transaction. Lawful basis: Legitimate interests; legal obligation.
- To comply with legal, tax, accounting and regulatory obligations: Identity, Contact, Transaction. Lawful basis: Legal obligation.
6. Marketing communications
We may send you marketing communications if you have requested information from us, purchased goods from us, subscribed to our newsletter, or otherwise provided your details and have not opted out of receiving marketing.
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in our emails or by contacting us.
Where we rely on your consent to send marketing, you have the right to withdraw that consent at any time.
We will not sell your personal data to third parties.
7. Cookies
Our website uses cookies and similar technologies. Cookies are small files placed on your device that help websites function properly, improve your browsing experience, analyse website use and, where permitted, support marketing and advertising.
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Please note that if you disable or refuse certain cookies, some parts of our website may become inaccessible or may not function properly.
Our website uses Cookiebot as our consent management platform. Cookiebot helps us identify cookies and trackers, provides a banner or settings tool so visitors can accept, decline or manage non-essential cookies where applicable, and records cookie preferences.
You can update or withdraw your cookie consent at any time by revisiting the cookie settings available through the Cookiebot banner or cookie settings link on our website.
Certain cookies are strictly necessary for the website to function, such as those required for shopping basket functionality, checkout, security or account login.
Non-essential cookies, such as analytics or advertising cookies, will only be used where the necessary consent has been given.
8. Sharing your personal data
We may share your personal data with trusted third parties where necessary for the operation of our business, including:
- payment providers;
- delivery and courier companies;
- website hosting and IT support providers;
- email marketing and customer communication providers;
- analytics and advertising providers, where permitted;
- review platforms;
- fraud prevention and security providers;
- professional advisers, including lawyers, accountants, insurers and auditors;
- HM Revenue & Customs, regulators, law enforcement agencies or other authorities where required by law.
We require third parties to respect the security of your personal data and to handle it in accordance with the law. Where third parties process personal data on our behalf, they are only permitted to do so for specified purposes and in accordance with our instructions.
9. Payment information
When you place an order on our website, your payment will be processed by our payment provider. We do not store your full card details on our own systems.
Payment providers may process your personal data in accordance with their own privacy policies and legal obligations.
10. International transfers
Some of our service providers may process personal data outside the United Kingdom. Where this happens, we will take steps to ensure that your personal data receives an appropriate level of protection in accordance with applicable data protection laws.
11. Data security
We have put in place appropriate security measures to help prevent your personal data from being accidentally lost, used, accessed, altered or disclosed without authorisation.
We also limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.
12. How long we keep your personal data
We will only keep your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying legal, accounting, tax, reporting or customer service requirements.
For example, we may keep order and transaction records for the period required by tax and accounting law. We may also keep customer service records for a reasonable period so that we can respond to queries, deal with complaints, manage returns and maintain accurate records of our relationship with you.
Where you have subscribed to our marketing communications, we will keep your contact details and marketing preferences unless you unsubscribe or ask us to remove your details, subject to any lawful retention requirements.
When your personal data is no longer required, we will securely delete it or anonymise it.
13. Your legal rights
Under data protection law, you may have rights in relation to your personal data. These may include the right to:
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete personal data;
- request erasure of your personal data in certain circumstances;
- object to our processing of your personal data in certain circumstances;
- request restriction of processing in certain circumstances;
- request transfer of your personal data to you or a third party;
- withdraw consent at any time where we rely on consent to process your personal data.
If you wish to exercise any of these rights, please contact us using the contact details set out in this privacy policy.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data, or to exercise any of your other rights. This is a security measure to ensure that personal data is not disclosed to anyone who does not have the right to receive it.
14. Third-party links
Our website may include links to third-party websites, plug-ins or applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you.
We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
15. Change of purpose
We will only use your personal data for the purposes explained in this privacy policy.
If we need to use your personal data for a different purpose, we will only do so where that new purpose is compatible with the original reason we collected it, or where we are legally permitted or required to do so.
If we need to use your personal data for an unrelated purpose, we will notify you where required and explain the legal basis that allows us to do this.