Privacy Policy

InstaMattress is a trading name of Saso (UK) Ltd, Company Registration 08100985, Calder House, Savile Road, Castleford, West Yorkshire WF10 1BJ. Saso (UK) Ltd is the data controller responsible for your personal data.

Contact our Data Protection lead: email info@instamattress.co.uk or call 01977 559979.

• Order details — your name, email, phone and delivery address — so we can fulfil your order and send you delivery updates.
• ComfortDNA™ quiz answers — your sleep preferences — so we can generate mattress recommendations and power your matches. These answers are retained to keep your recommendations accurate and to support any exchange.
• Payment information — handled entirely by Stripe and Klarna. We never see or store your full card details.
• Reviews and exchange requests — the details you submit when leaving a review or requesting an exchange.
• Supplier application data — the company and contact details submitted by prospective suppliers.

We rely on the following lawful bases under UK GDPR:

• Contract — to take and fulfil your order, and to handle exchanges and returns.
• Legitimate interest — for service emails, delivery updates, fraud prevention and record-keeping required by law.
• Consent — for any marketing, only when and if we send it. You can withdraw consent at any time using the unsubscribe link or by emailing us.

We only share your data with trusted partners where it is necessary to run the service:

• Delivery partners — your name, address and contact details, to deliver your mattress.
• Stripe and Klarna — to process payments securely.
• Resend — to send you transactional emails such as order confirmations and delivery updates.
• Google — for analytics (see Cookies & analytics below).

We never sell your data, and we do not share it for advertising purposes.

We use Google Analytics 4 (GA4) to understand how the site is used — which pages are visited, how visitors arrived and roughly where they are (country level). This helps us improve the site. GA4 uses cookies to measure usage.

You can opt out by adjusting your browser to block third-party cookies, or by using Google’s Analytics opt-out browser add-on.

To deliver your order, we share some of your personal information with carefully selected third parties:

Manufacturers and brand suppliers. When you place an order, we send the manufacturer or brand supplier of your chosen product(s) your name, delivery address, contact telephone number, email address, and any delivery instructions you provide, so they can prepare and despatch your order.

Delivery and logistics partners. Depending on the products you order, your delivery may be handled by one or more of our delivery partners, or directly by the manufacturer. We send whichever partner is responsible for your delivery the same details so they can book, schedule, and complete your delivery, and contact you about your delivery slot.

Order confirmation pages. Our suppliers and delivery partners confirm receipt, despatch, and delivery of your order through secure, order-specific web pages. These pages display only the information needed to identify your order and delivery — never your payment details.

We only share the information needed to fulfil and deliver your order. We never share your payment details or the price you paid with these parties. Each party acts as a data processor or independent controller for delivery purposes only and is not permitted to use your information for marketing or any other purpose. Your information is shared under UK GDPR Article 6(1)(b) — processing necessary for the performance of a contract.

We also send you service emails about your order, including order confirmation and delivery completion notifications. These are transactional emails required to fulfil our contract with you and are not marketing.

If you have any questions about how your information is shared, contact us at the details in the “Contact Us” section of this policy.

We keep your order data for the legal and accounting periods required by UK law (typically six years). Your ComfortDNA™ quiz answers are retained so we can keep powering your recommendations and support any exchange. We delete or anonymise data no longer needed.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete your personal data in certain circumstances.
• Complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.

To exercise any of these rights, email info@instamattress.co.uk. We will respond within one month.