Privacy Policy
Introduction
We, Sextant Limited t/a Piglet in Bed, operate this Privacy and Cookies Policy because we are committed to safeguarding the privacy of our customers and those using our website and the confidentiality of any information that we collect about you.
This Privacy and Cookies Policy sets out how we will use any personal information that we may obtain from you. If we change any of the terms of our Privacy and Cookies Policy, we will post the revised policy on our website at https://www.pigletinbed.com behind the “Privacy and Cookies Policy” link at the bottom of each page.
Our website is not intended for children, and we do not knowingly collect data relating to children.
Whenever you share your information with us, whether through our website, by email, telephone, in person or otherwise, you acknowledge that we will collect and use it as described in this Privacy Policy and our Cookie Policy. You may receive marketing messages from us:
- By Email or SMS if you do not opt out
- By Email if you buy something from our website and do not opt-out during the checkout process
See Section ‘How to stop marketing information being sent to you’ for how to opt-out of marketing messages.
We are committed to ensuring that all personal information we hold is treated properly and in accordance with applicable data protection legislation. We are registered as a data controller with the Information Commissioner’s Office (“ICO”) and our registration number is ZA858085. In accordance with applicable data protection legislation, we are required to explain to you how we will use any personal data which we collect from you. Our registered company number is 02598278 and our registered office address is Sextant Limited t/a Piglet in Bed, Piglet in Bed, Unit 420, Chinaworks, Black Prince Rd, London SE1 7SJ.
You have the right to lodge a complaint with the ICO if you have any concerns with regard to the way in which we process your personal data. You can contact the ICO using the following details:
- Website: https://www.ico.org.uk
- Telephone: 0303 123 1113
- Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
To help us maintain accurate records, please make sure any personal data you provide is correct and kept up to date. If you share personal details about someone else (for example, a family member) with us, please make sure you have their permission first. You should inform them about how their data will be used and direct them to this privacy policy for full details.
What information do we collect?
You can visit and browse some areas of our website without telling us who you are or sharing any personal information.
If you register on our website, place an order, create a customer account, or enter a promotion or competition, we will collect certain personal information. We will also process your personal data if you are a supplier of ours. This may include your:
- Name
- Billing and delivery addresses
- Email address
- Telephone number
- Order number
- Age/birthday
- Gender
- Social media handle / ID
- IP address
- Payment details (such as card information or payment account details like Shop Pay, PayPal, Zip Pay, Google Pay, Amazon Pay, or Clearpay)
- Company name
- Job title
In very rare cases, if a visitor is injured on our premises, we may collect limited health or accident-related information to manage the incident appropriately and comply with health and safety obligations.
If you contact us, we may keep a copy of your correspondence. We may also collect information about how you use our website, such as pages visited, traffic data, location data, and other communications data.
How we use your personal data and our lawful basis for doing so
We are required to have a lawful reason for using your personal data. This means we only process your data when we have a valid lawful basis to do so. Depending on the nature of our relationship with you, this may include:
- Where the processing is necessary to carry out a contract with you or to take steps you have requested before entering into a contract
- Where we need to comply with a legal obligation
- Where it is necessary for our legitimate interests, such as developing our products and services and managing our business
- Where the processing is needed to establish, exercise or defend legal claims
- Where it is necessary for the purposes of carrying out obligations and exercising specific rights in the field of employment and social security and social protection law
In some situations, we may ask for your express consent to process your personal data – for example, if we wish to send you marketing communications by email or SMS. Where consent is used, you will always have the option to withdraw it at any time.
Here’s how we will process your personal data and our lawful bases for doing so:
- To create a customer account for you (which will be used to manage and administer our relationship with you). Lawful basis – performance of a contract.
- Processing and fulfilling orders, including payment, delivery and customer service. Lawful basis – performance of a contract.
- To send you postal marketing to keep you informed about products and services we think may be of interest to you (you can opt out at any time). Lawful basis – legitimate interest .
- When you purchase any goods via our website and have not opted out of receiving marketing communications, we may contact you by Email or SMS. Lawful basis – legitimate interest (soft opt-in under the Privacy and Electronic Communications Regulations (PECR). You can opt-out at any time.
- To send information via Email or SMS about our products and services if you have not previously enquired about our goods or services or have not purchased from us. Lawful basis – consent. You can opt out at any time.
- Developing our services and improving our website. To ensure the site functions effectively. Lawful basis – legitimate interest for essential cookies, consent for non-essential cookies.
- To provide you with information, goods or services that you request from us or access (including but not limited to via our website). This may include using personal information to personalise products as per your order. Lawful basis – Performance of a contract.
- Monitoring compliance with our terms. Lawful basis – legitimate interest.
- To allow you to participate in interactive features of our website. Lawful basis consent – you can opt-out at any time.
- To administer our loyalty reward scheme (Piglet Perks) if you register. Lawful basis – legitimate interest.
- To notify you about changes or prospective changes to our goods, services and/or our website. Lawful basis – legitimate interest.
- To carry out market research so that we can improve the goods and services we offer (please note that you have the right to opt out of receiving or participating in our surveys at any time.) Lawful basis – legitimate interest.
- When you place an order, you may be redirected to a third-party payment provider (such as Shop Pay, PayPal, Google Pay, or Clearpay) to complete your payment securely. These providers may collect and use your personal data under their own privacy policies, which we recommend you read on their websites. We do not store your payment card details. After the payment has been completed you will be redirected back to our website. We are not liable for the practices of any Payment Service Provider in respect of your personal information.
- If you take part in a competition or promotion on our website, we will use your name and contact details to manage your entry and carry out the competition according to the rules. Lawful basis – legitimate interest
- If you give us feedback or report a problem with our services or website, we may use that information to improve our products and/or services. Sometimes, we may share the information with our suppliers or other users if needed. Lawful basis – legitimate interest
- We may use your information to email or send you SMS messages about special offers, promotions, new products, competitions, pay prompt messaging (such as ‘card abandon’ messages) and updates to our website. If you have previously made a purchase from us or asked about our services, we rely on our legitimate interests to send you these messages. In all other cases, we will only contact you if you have given your consent. You can opt out of receiving these communications at any time. Lawful basis- our legitimate interests, where you have previously purchased from us or enquired about our services; otherwise, your consent
- If you contact us (for example, by email), we may keep a record of the message, your contact details and our response. We may also record calls. This helps us manage our relationship with you and improve our service. Lawful basis – depending on the nature of the correspondence, it may be performance of a contract or legitimate interest.
- In some cases, we may need to use your personal data for purposes not outlined in this Privacy and Cookies Statement. Where appropriate, we may rely on our legitimate interests to carry out this additional processing, but only after informing you clearly about what we intend to do and why. In other situations, we may ask for your consent. If we seek your consent, we will give you full details so you can decide whether to agree. You are not required to give consent as a condition of using our services, and if you do provide it, you can withdraw it at any time using the method we explain when we ask for your consent. Withdrawing consent will not affect any processing we carried out before your withdrawal.
Lawful basis - legitimate interest, where the processing is compatible and you have been informed in advance; otherwise, your consent
- Piglet Perks and ‘Refer a Friend’ affiliates
- If you register with our reward scheme Piglet Perks (https://www.pigletinbed.com/pages/rewards), for the purpose of paying any rewards earned, we will use such information as detailed in the ‘What information do we collect’ section above, to maintain and administer your Piglet Perks account and to make available to you any Piglet Perks to which you become entitled in accordance with the scheme.
- ‘Refer a Friend’. If you refer any other person to us using our website’s referral program (https://www.pigletinbed.com/pages/refer-a-friend) we will generate a link for you to send to that other person. We will not ask you to provide any personal data of any other person to Piglet.
- To set up and maintain accounts with third party suppliers and manage these relationships on an on-going basis. Lawful basis – performance of a contract.
- To process personal data necessary for the management, defense, or settlement of legal claims. Lawful basis – legal obligation and/or legitimate interest.
- To comply with regulatory or legal obligations.
Lawful basis: Compliance with a legal obligation and/or legitimate interests).
If you create an account with us or make a purchase from us using a referral link, then the person who provided you with the link may be notified that they have accumulated points in their Piglet Perks account in connection with the referral, but we will not share any of your personal information with them.
Where we need to collect personal data in connection with any products or services which you request or order from us and you fail to provide that data when requested, we may not be able to provide such products or services or perform any related contract that we have or are trying to enter into with you.
In the rare event that we collect health or accident-related information about visitors to our premises (for example, if you are injured while on-site), we process this special category data in accordance with Article 9(2)(b) and (h) of the GDPR. Lawful basis - Vital Interest. Article 9 condition - It is necessary for the purposes of carrying out obligations and exercising specific rights in the field of employment and social security and social protection law (Article 9(2)(b)).
Third Party Disclosures
We may disclose personal information about you:
- To third parties who are directly involved in dealing with any request, enquiry, order, competition/promotion entry, complaint or other correspondence submitted by you or in the performance of any contract between us and you. This may include our affiliated US company (Sextant Limited USA, Inc.) if you place an order for delivery to an address in the United States of America.
- To third parties who process it on our behalf only for specified purposes and strictly according to our instructions. These third parties act as our processors.
- Where we are legally required to do so, for example by law enforcement or regulatory authorities.
- To third parties who are providing us with professional advice, where necessary for our legitimate interests in obtaining such advice and permitted by law.
- In connection with criminal investigations, legal proceedings or prospective legal proceedings where necessary for our related legitimate interests and where permitted by law.
- Where necessary for our legitimate interests and permitted by law in establishing, exercising or defending our legal rights (including providing information to others for the purposes of fraud prevention, debt collection and debt tracing actions) and protecting the rights, property or safety of Piglet in Bed, our customers, our employees, suppliers or others; and
- Where we have stated or informed you otherwise (e.g. in this Privacy and Cookies Policy or on our website).
We work with Epsilon Abacus (registered as Epsilon International UK Ltd), a company that manages the Abacus Alliance on behalf of UK retailers and charities. The participating retailers are active across several categories including (but not limited to) clothing, collectables, food & wine, health & beauty and household goods. These organisations share customer and supporter information about purchases and donations. Epsilon Abacus acts as a data processor, combining this information with third-party data to help participating organisations better understand individual behaviour and preferences. This enables them to send you personalised offers and appeals that may interest you. You can learn more about how Epsilon Abacus processes your personal data by visiting their Privacy Policy here: https://www.epsilon.com/abacus/services-privacy-policy.
We may disclose your personal information to third parties if we are considering disposing of, acquiring, or merging any business or assets. In such cases, we may share your information with prospective buyers, sellers, or their professional advisors. Any disclosure will be strictly necessary for the legitimate interests of both parties involved in the proposed transaction. However, we will only transfer your personal information to these third parties if we have verified that they can provide an adequate level of protection for your data.
Except as provided in this Privacy and Cookies Policy, we will not provide or disclose your information to third parties without your express consent for any purpose (including but not limited to direct marketing). We do not sell personal information under any circumstances.
How to stop marketing information being sent to you
You can opt out of receiving marketing communications from us at any time by:
- Emailing us at team@pigletinbed.com
- Writing to us at Piglet in Bed, Piglet in Bed, Unit 420, Chinaworks, Black Prince Rd, London SE1 7SJ
- Clicking the unsubscribe link in the footer of any marketing Email
- Following the opt-out instructions in any SMS message
We may send marketing communications based on either your consent or our legitimate interests, depending on the context.
If you have given consent, you have the right to withdraw it at any time, and we will immediately stop sending you marketing communications based on that consent. If you have previously given consent and then choose to withdraw it, this will not affect the lawfulness of any marketing we sent before you withdrew your consent.
If we rely on legitimate interests as our lawful basis, you have the right to object to marketing communications at any time, and we will promptly respect your objection.
Regardless of the lawful basis, your withdrawal of consent or objection will be acted upon promptly and in line with our legal obligations under the UK GDPR and the PECR.
Security
We have implemented appropriate technical and organisational security measures to protect your personal information against accidental loss, unauthorised access, use, alteration, or disclosure. Access to your personal data is restricted to employees, agents, contractors, and other third parties who have a legitimate business need to know the information. However, please be aware that data transmitted over the Internet cannot be guaranteed to be completely secure. We cannot guarantee the security of any information you disclose online and will not be liable for any unauthorised access or loss unless it results from our negligence or wilful misconduct.
We have put in place procedures to deal with any suspected data security breach and will notify you and/or any applicable regulator of a suspected breach where we are legally required to do so.
All direct payment gateways used by our website adhere to the encryption and other standards of the Payment Card Industry Data Security Standard (PCI-DSS).
International Data Transfers
Please note that to deliver our products and services and manage our business, it may be necessary to transfer your personal data outside the UK/EEA. For example, we may use affiliated companies or suppliers outside the UK and EEA to provide services described in this Privacy and Cookies Policy (for example, passing your data to our US affiliate, Sextant Limited USA, Inc, to fulfil an order shipped from the UK to the US).
As the data controller, we ensure that any such international transfer of your personal data is protected by appropriate safeguards. These may include UK Addendum to the EU Standard Contractual Clauses (EU SCC UK Addendum), International Data Transfer Agreements, and technical and organisational security measures as pbommart of our agreements with these affiliates or suppliers.
Your Rights
Under data protection laws, you have the following rights regarding your personal information:
- Right to be informed — You have the right to clear information about how we collect and use your data.
- Right of access — You can request a copy of the personal data we hold about you.
- Right to rectification — You can ask us to correct inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”) — You can request deletion of your data in certain situations.
- Right to restrict processing — You can ask us to limit how we use your data in some cases.
- Right to data portability — You can request your data be provided to you or another organisation in a structured, machine-readable format.
- Right to object — You can object to our processing of your data, including for direct marketing or based on legitimate interests.
- Rights related to automated decision-making and profiling — You have protections against decisions made solely by automated processes that significantly affect you.
Please note, these rights are not absolute. The extent to which they apply depends on the lawful basis we rely on for processing your personal data and the specific context. For example, some rights may be limited where we have legitimate interests or legal obligations.
Requests of the nature set out above can be made by:
- Emailing team@pigletinbed.com
- Writing to Information Compliance Officer, Piglet in Bed, Piglet in Bed, Unit 420, Chinaworks, Black Prince Rd, London SE1 7SJ, United Kingdom
Please contact the same address if you have any reason to believe that any information we hold about you is inaccurate.
We will respond to your request as soon as possible and, in any event, within one month of the date of receiving the request. Please note that we may, where legally permitted, reject any such request or limit the scope of our response (e.g. if, in the circumstances, the right does not apply to you).
In accordance with the applicable data protection legislation, we follow security procedures in the storage, and disclosure of your information. We may therefore request proof of your identity before disclosing certain information to you or complying with any other data subject rights request.
You will not generally have to pay a fee to exercise any of your rights described above. However, we may charge a reasonable fee if you make a request to see a copy of your personal information which is clearly unfounded or excessive. Alternatively, we may refuse to comply with your request in such circumstances.
Retention and Destruction of your Personal Information
We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, regulatory, and business requirements. Typical retention periods are:
- Customer data: retained for six years after the last transaction date
- Recruitment data: retained no longer than 2 years after the vacancy is filled
- Employee data: retained for six years from the date of termination of employment
- Accounting data: retained for six years after the last transaction
Full details of our retention periods can be requested using the contact details provided throughout this Privacy Policy.
Except for any marketing contact preferences that are retained indefinitely after you withdraw consent or opt out (as explained above), your personal information will be securely deleted or destroyed once the relevant retention period expires.
We retain only the minimum amount of data necessary for our suppression list to ensure we comply with your opt-out requests and avoid sending you unwanted marketing communications in the future, in line with our legal obligations under data protection and electronic communications laws.
Whilst taking into consideration our legal obligations, we will on an ongoing basis: review the length of time that we retain personal data for; consider the purpose or purposes for which we hold the personal data in deciding whether (and for how long) to retain it for; securely delete personal data that is no longer needed for such purpose or purposes; and update, archive or securely delete information if it goes out of date.
Cookies and other tracking technologies
Our website uses “cookies” and tracking technologies to ensure that you receive the best possible visitor experience. Cookies are small files which are sent by a web server to an individual’s computer which are then stored on that computer’s hard drive. A cookie contains text and is like an identification card which can only be translated by the server it originated from.
Cookies cannot tell us information such as your email address, which we can only collect where you tell us, for example if you subscribe to our mailing list. However, we may (where we have appropriate consent) use them to send focused online banner advertisements or similar promotional content.
In addition to the performance cookies mentioned above, our marketing emails will (where you provide us with consent in relation to performance cookies and tracking technologies) each include an email tracking pixel which will track when the recipient of the email has opened the email (if the recipient has images enabled in their email client/mailbox). This mechanism is consistent with the standard approach in the e-commerce industry for measuring email ‘open and click’ rates and is used by a wide range of other email platforms in the market.
Full details of the cookies and tracking technologies we use on our website can be found in our Cookies Policy
Contact
If you have any questions about this Privacy and Cookies Policy or our treatment of personal data, please write to us at Piglet in Bed, Piglet in Bed, Unit 420, Chinaworks, Black Prince Rd, London SE1 7SJ or email us via team@pigletinbed.com.