Privacy Policy

This Privacy Policy sets out how NightKnight (“we”, “our”, “us”) collects, uses, stores and protects personal data when you visit or make use of our website. NightKnight is a business registered and operating in Northern Ireland.

1. Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

NightKnight
Email: info@nightknightsleep.com
Based in Northern Ireland

2. Information We Collect

We may collect and process the following categories of personal data:

  • Identity and contact information (such as name, billing and delivery address, email address, telephone number).
  • Financial information required to process transactions (note: full card details are not retained by us).
  • Transactional and order history.
  • Technical data including IP address, browser type, and information obtained via cookies (see our Cookies Policy).
  • Records of correspondence when you contact us.

3. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

  • To perform a contract with you (e.g. to process and deliver your order).
  • To comply with legal obligations.
  • For our legitimate interests (such as improving services and fraud prevention).
  • With your consent, where applicable (e.g. for direct marketing communications).

4. Use of Data

Your data may be used for the following purposes:

  • Processing payments and fulfilling orders.
  • Managing your customer account and providing support.
  • Communicating important information regarding your order or our services.
  • Analysing website usage and improving our offerings.
  • Complying with legal or regulatory obligations.

5. Sharing of Data

We will only share your personal data with:

  • Payment service providers (such as Stripe and PayPal).
  • Delivery and logistics partners to fulfil orders.
  • Professional service providers (such as IT and web hosting companies).
  • Regulatory authorities where required by law.

We do not sell personal data to third parties.

6. International Transfers

Where data is transferred outside the UK, we ensure that adequate safeguards (such as the UK International Data Transfer Agreement or equivalent) are in place.

7. Data Retention

We retain personal data only for as long as is reasonably necessary for the purposes set out in this Privacy Policy, including for the fulfilment of legal, accounting, or reporting requirements.

8. Your Rights

Under UK GDPR, you have the right to:

  • Request access to your personal data.
  • Request correction or erasure of your personal data.
  • Object to or restrict the processing of your personal data.
  • Withdraw consent at any time, where processing is based on consent.
  • Request the transfer of your personal data (data portability).

All requests should be directed to info@nightknightsleep.com.

9. Complaints

If you are dissatisfied with how we handle your personal data, you may lodge a complaint with the UK Information Commissioner’s Office (ICO).

10. Updates

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last revised” date.