Privacy

Who We Are

The shop is run by Beddressed Limited, a company registered in England and Wales under company number 17448351, with its registered office at 25 Artemis Court, Homer Drive, London E14 3UH. We decide what is collected here and why, which makes us the data controller for it.

What We Collect

One thing, and only when you type it in: your email address. There is no account to open, no name asked for, no address stored and no card taken. Nothing on this site can be paid for yet.

When you sign up, several things are written down together:

• the email address you gave us, trimmed and lowercased;
• which form it came from (the letters form in the footer, the launch list in the cart, or the welcome offer);
• the moment it happened, to the second;
• your own share code, worked out from your address so the same address always gets the same one and it says nothing about you on its own;
• and, if you came here from a link we posted, the name we gave that link, so we can see which post somebody found us through. If it was a friend’s own link instead, this records her share code rather than a post’s name, which pairs your sign-up with hers; neither of you learns anything else about the other.

A few more things are kept only if they happen: if you answer the thank-you step’s question, which dress and which size you say you are waiting for; if a friend joins through your link, or you join through a friend’s, a note on both addresses that you each shop a day early. The note on yours holds her share code, never her address; and if a letter to you cannot be delivered, or is reported as spam, a note that the address is one we no longer write to.

If you claimed the welcome offer, one more line is kept: the discount code that was made for your address, what it is worth, and when it was issued. The code is worked out from the address itself, so the same address always gets the same code and asking twice does not make two.

Your cart and the pieces you have hearted are remembered by your own browser, on your own device. They are never sent to us and we cannot see them.

While a form is being posted, the internet address it came from is held in the memory of the server for a minute, so that the same address cannot post a thousand sign-ups. It is never written to disk and never stored with your email address.

How We Use It

To write to you, and to count how many people are waiting for each dress and size when you tell us, and for nothing else. We do not sell addresses, we do not share them for anyone else’s marketing, and we do not build a profile out of one line in a text file.

The lawful basis is your consent: you typed the address in and asked us to write. You can take that consent back at any time, from the link at the foot of any letter, without giving a reason and without writing to us.

The list is kept as an append-only log, which is worth being plain about: unsubscribing does not erase the earlier line, it adds a new one saying you have left, and we stop writing.

Two years after you leave, the address is removed from the list altogether. If you would rather it went sooner, ask and we will remove it.

How We Use Your Email Address for Advertising

If you agree when you give us your address, we share it with Meta (Facebook and Instagram) and Google so that they can show you our adverts, and so that we can tell which of our adverts brought somebody to the shop. We never send your address as readable text: it is turned into a scrambled code (a one-way hash) before it leaves us. That code is not anonymous, because those companies scramble the addresses they already hold the same way and look for a match; it means only that nobody in between can read it. We do this on the basis of your consent, and on nothing else. You can say no without losing anything else: you will still get the letter you signed up for. To withdraw it, unsubscribe from any letter or write to us at the address on this page, and we will stop. You may also object directly to Meta and Google through the advert settings in your own account with them.

Email Letters

Letters are sent from letters@beddressed.com through Resend, an email provider, which handles the sending and can see the address a letter is going to. Their servers for our account are in Ireland.

There is nothing to confirm: you are on the list from the moment you join. We send one letter straight away (a short welcome note, with your own link to share), and after that a letter about once a month, when there is something to say. If a friend joins through your link, we may send you one short letter to say so, once and never again; we never write to her on your behalf. If you claimed the welcome offer, the code is in a letter of its own.

If a letter to your address bounces back as undeliverable, or you mark one of ours as spam, Resend tells us so. We then note the address as one we no longer write to: nothing more is sent to it, and it is left out of every count we keep. The note stays, so that the address is not written to again by mistake; to have it removed as well, ask.

Every letter carries an unsubscribe link. It opens a page with a single Unsubscribe button, and pressing it takes you off the list at once; the button is there because some email security software opens every link in a letter by itself. The letters also carry the header that lets an email app show its own one-click Unsubscribe button, which takes effect immediately. Nothing asks you to reconsider.

Who Else Touches It

Four services, each doing one job:

• Resend sends the letters, and so sees the addresses they go to.
• Railway runs this site and its back office, and holds the list and the discount ledger on a disk attached to them.
• Cloudflare sits in front of the site, serving the pages, filtering the traffic that reaches it, and counting how many people came (see Analytics, below).
• The back office itself is our own, running on Railway, and holds a copy of the list so that the shop can be run without a terminal.

Nobody else, with one exception that is yours to make: if you accept the cookies described under Cookies below, Meta and Google are told that a visit happened, and that is the whole of it. Unless you do, nothing of theirs is loaded. There is no chat widget and no embedded font from someone else’s domain. What is measured for us is counted in two places and no others (by Cloudflare, which is already on the list, and by our own server), and the section below says exactly what each of them counts.

Analytics

We count visits. Cloudflare Web Analytics has been running on this site since the end of August 2026.

It is switched on inside Cloudflare rather than written by us. Cloudflare adds its own small script to the page as it leaves their network, and it can be seen in the page source. What it records is:

• which pages were opened, and how many times;
• the site a visit arrived from, where there was one;
• the country, and the kind of browser and device.

What it does not do is the part worth saying plainly. It sets no cookies and stores nothing on your device. It does not give you an identifier, so it cannot tell a second visit from a first one by you in particular, and it cannot follow you to any other site. We see counts, not people.

It is set to leave out visitors in the European Union altogether, so if you are reading this from an EU country nothing about your visit is counted at all.

We also keep a count of our own, in a log on our own server. It records which dresses are looked at and which buttons are pressed (a size chosen, a dress added to the cart, a search that found nothing), with the page each one happened on, and with no cookie, no identifier, no address and no IP address, so the counts cannot be tied to a person. If you arrived from a link we posted, the name of that link is counted with it.

The counts in that log are kept for thirteen months and then removed, which is long enough to compare one September with the September before it.

Those same presses are also counted by Umami, which is an open-source counter we run on our own server rather than a service we hand your visit to. It is what turns the log into a report somebody can read. It is served from this site’s own address, so no other company’s name is in the page and nothing about your visit goes anywhere else.

It sets no cookie. Instead of recognising you by something kept on your device, it works out a number on the server from your IP address and your browser, which is how two pages read one after the other are counted as one visit and not two. It is not an account, it is not shared with anybody, and it is never used to recognise you on another site. If your browser sends a Do Not Track signal, it is set to honour it and counts nothing at all.

When you join the list, we note which pages of our site you looked at during that visit, so we can understand what brought you here. We never share this.

Apart from that, none of this counting reaches us joined to an email address, and none of it is sold or shared for anyone’s advertising.

Cookies

The cookies the shop’s own pages set are Meta’s and Google’s, and only if you say yes to them. Nothing we do here needs one of our own: they belong to Meta’s advertising pixel and to Google’s tag, which are how we can tell whether an advert we have paid for brought somebody here and how many people read a page.

A bar at the foot of the page asks you the first time you arrive. It offers three answers of one size (yes to everything, no to everything, or choose one at a time), and each of them is one press. You do not have to answer it to read, browse or join the list, and until you do nothing is fetched (no script, no cookie, no request of any kind), and whatever you refuse is never fetched at all. The page works exactly the same either way, and nothing is held back from you for saying no.

If you say yes, this is what happens:

• a file of Meta’s is loaded into the page, and it tells them that a visit happened and which page it was on;
• a cookie named _fbp is written in your browser. It holds a number that identifies the browser rather than you by name, and it is how two pages you read one after the other are counted as one visit and not two;
• and, if you came to us by clicking one of our adverts, a second cookie named _fbc, which holds the identifier Meta put on that link so they can tell which advert the visit came from. Somebody who arrives any other way does not get it;
• a file of Google’s is loaded into the page, and it tells them that a visit happened and which page it was on;
• cookies named _ga and _ga_ followed by a code are written in your browser. They hold a number that identifies the browser rather than you by name, and they are how two pages you read one after the other are counted as one visit and not two;
• and, if you came to us by clicking one of our adverts, cookies whose names begin _gcl_, which hold the identifier Google put on that link so they can tell which advert the visit came from. Somebody who arrives any other way does not get them;
• how long any of them last is theirs to set and not ours, and their files are theirs to change. We have read them for the cookies they write and those are the ones named here. If another appears, this list is where it will be written down rather than quietly left out;
• if you have an account with Meta (Facebook, Instagram or anything else of theirs) or with Google, they may join that visit to their own record of you. That part is theirs and is governed by their terms, not ours.

Your answer is kept by your own browser for a year and is never sent to us. To change it, use Cookie Choices at the foot of any page: the same three answers, and the same toggles, whenever you like. Saying no there deletes every one of those cookies from your browser on the spot, takes the tag out of the page you are reading so nothing further is sent, and no page loads it again while the answer stands.

Nothing else on the shop’s own pages uses a cookie. Everything we count for ourselves is counted without one, as the section above says, and your cart is remembered by your own browser, on your own device, and is never sent to us.

The checkout is the exception: it is run for us by Shopify, and when you open it Shopify sets its own cookies in your browser.

Your Rights

Under United Kingdom data protection law you can ask us to show you what we hold about you, to correct it, to delete it, to stop using it, or to hand it over in a form you can take elsewhere. You can object to us using it, and you can withdraw your consent at any time. None of it costs anything and we will answer within a month.

For the list, most of that is one link: the unsubscribe at the foot of any letter. For anything else, write to us at info@beddressed.com.

If you think we have handled your data badly, you can complain to the Information Commissioner’s Office, the United Kingdom’s data protection regulator, at ico.org.uk. We would rather you told us first, but you do not have to.

Contact

Write to us at info@beddressed.com about anything on this page. Post reaches us at 25 Artemis Court, Homer Drive, London E14 3UH.