MENU 

Privacy Policy

What information do we collect?

We collect information from you when you register on the site, contact us via the website, respond to a survey or communication such as e-mail, or participate in another site feature.

When contacting or registering, we may ask you for your name, e-mail address, mailing address, phone number. You may, however, visit our site anonymously. We do not retain or store your credit/debit card details or other sensitive information on our servers.

Like many websites, we use “cookies” to enhance your experience and gather information about visitors and visits to our websites. Please refer to the “Do we use “cookies”?” section below for information about cookies and how we use them.

How do we use your information?

We may use the information we collect from you when you register, purchase services, enter a contest or promotion, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:

To personalise your site experience and to allow us to deliver the type of content and product offerings in which you are most interested.

To allow us to better service you in responding to your customer service requests.

To administer a contest, promotion, survey or other site feature.

If you have opted-in to receive our e-mail newsletter, we may send you periodic e-mails. If you would no longer like to receive promotional e-mail from us, please refer to the “How can you opt-out, remove or modify information you have provided to us?” section below. If you have not opted-in to receive e-mail newsletters, you will not receive these e-mails. Visitors who register or participate in other site features such as marketing programs and ‘members-only’ content will be given a choice whether they would like to be on our e-mail list and receive e-mail communications from us.

How do we protect visitor information?

We implement a variety of security measures to maintain the safety of your personal information. Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. When you place orders or access your personal information, we offer the use of a secure server. All sensitive/credit information you supply is transmitted via Secure Socket Layer (SSL) technology. We do not retain or store your sensitive information on our servers.

Do we use “cookies”?

Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information. For instance, we use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

We may contract with third-party service providers to assist us in better understanding our site visitors. These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser (like Internet Explorer, Safari or Chrome) settings. Each browser is a little different, so look at your browser Help menu to learn the correct way to modify your cookies. If you turn cookies off, you won’t have access to many features that make your site experience more efficient and some of our services will not function properly. However, you can still place orders over the telephone by contacting customer service.

Do we disclose the information we collect to outside parties?

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information unless we provide you with advance notice, except as described below. The term “outside parties” does not include SleepyGingers. It also does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.

However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

How can you opt-out, remove or modify information you have provided to us?

To modify your e-mail subscriptions, please let us know by modifying your preferences in the “My Account” section. Please note that due to email production schedules you may receive any emails already in production.

To delete all of your online account information from our database, sign into the “My Account” section of our site and remove your shipping addresses and billing addresses. Please note that we may maintain information about an individual sales transaction in order to service that transaction and for record keeping.

Third party links

In an attempt to provide you with increased value, we may include third party links on our site. These linked sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these linked sites (including if a specific link does not work).

Changes to our policy

If we decide to change our privacy policy, we will post those changes on this page. Policy changes will apply only to information collected after the date of the change. This policy was last modified on 1st October 2016.

Questions and feedback

We welcome your questions, comments, and concerns about privacy. Please send us any and all feedback pertaining to privacy, or any other issue.

Online policy only

This online privacy policy applies only to information collected through our website and not to information collected offline.

Your consent

By using our site, you consent to our privacy policy.

Legal Basis for Processing Personal Data

Personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Depending on the activity, we rely on the following lawful bases:

  • Performance of a contract – where processing is necessary to deliver services or meet contractual obligations, including obligations involving TransUnion.
  • Legal obligation – where processing is required to comply with applicable laws, regulatory requirements, or statutory obligations.
  • Legitimate interests – where processing is necessary for legitimate business purposes such as system security, fraud prevention, risk management, audit, and compliance, and where such interests do not override the rights and freedoms of individuals.
  • Consent – where required by law, and where individuals have been provided with a clear choice and the ability to withdraw consent at any time.

Where legitimate interests are relied upon, appropriate assessments are conducted to ensure that the rights and freedoms of data subjects are protected.

The legitimate interests pursued by the controller

Our legitimate interests include operating our business, fulfilling contractual obligations, ensuring system and data security, preventing fraud, supporting audit and compliance activities, and protecting TransUnion data. These interests are balanced against the rights and freedoms of individuals, with appropriate safeguards in place.

The source of personal data 

We may collect personal data about you from:

  • you directly
  • employers/clients when you apply for a role or are considered for an opportunity.
  • referees (where relevant and permitted)
  • publicly available sources (for example professional networking sites, business websites, and public records)
  • credit reference agencies (CRAs) where required for consumer credit, identity, or affordability checks.
  • third party service providers used to support recruitment, screening, and compliance processes.

Details of any international data transfers outside the UK/EU and the safeguards in place.

We may transfer personal data to recipients or service providers located outside the UK and/or European Economic Area (EEA).

Where such transfers take place, we ensure appropriate safeguards are in place to protect personal data in accordance with applicable data protection laws. These safeguards may include the use of approved standard contractual clauses, international data transfer agreements, or transfers to countries that have been recognised as providing an adequate level of data protection.

The data retention period 

We keep personal data only for as long as necessary for its purpose and to meet legal or regulatory obligations. Data used for credit reference or affordability checks is retained only for as long as required and then securely deleted.

The rights of data subjects

Under UK data protection law, you have the following rights in relation to your personal data:

• Right of access – You have the right to request a copy of the personal data we hold about you and information about how it is used.

• Right to rectification – You have the right to request that inaccurate or incomplete personal data is corrected.

• Right to erasure (“right to be forgotten”) – You have the right to request that we delete your personal data where there is no lawful reason for us to continue processing it.

• Right to restrict processing – You have the right to request that we limit how we use your personal data in certain circumstances.

• Right to data portability – You have the right to receive your personal data in a structured, commonly used, and machine readable format, and to request that we transfer it to another organisation where technically feasible, readable format, and to request that we transfer it to another organisation where technically feasible.

• Right to object – You have the right to object to the processing of your personal data where we rely on legitimate interests or where data is used for direct marketing.

The right to lodge a complaint with the Information Commissioner’s Office (ICO)

You have the right to complain to the UK Information Commissioner’s Office (ICO) or another relevant data protection authority if you are dissatisfied with how we manage your personal data.

Provision of Personal Data 

Is the provision of personal data statutory or contractual? 

The provision of certain personal data is primarily contractual and, in some circumstances, required to meet legal and regulatory obligations. 

Personal data is required to: 

  • enter into and perform contracts with customers, suppliers, or business partners. 
  • process orders, manage accounts, and deliver goods and services. 
  • verify identity and prevent fraud; and 
  • comply with applicable legal, regulatory, accounting, and tax obligations. 

What are the consequences of not providing personal data? 

If you choose not to provide the personal data, we request: 

  • we may be unable to enter into a contract with you. 
  • we may be unable to fulfil orders, supply goods, or provide services. 
  • we may be unable to conduct necessary verification, compliance, or fraud prevention checks; and 
  • as a result, our services may be delayed, restricted, or declined. 

Where personal data is requested for optional purposes, such as marketing communications, providing this data is not mandatory, and you may withdraw your consent at any time without affecting your ability to receive goods or services from us. 

Automated or Non automated decision making – this will need to selected based on your business

Non-Automated Decision Making and Profiling 

We may use automated systems and tools to support certain business processes, such as risk assessment, fraud prevention, affordability checks, identity verification, or record management. 

These tools may analyse personal data using predefined criteria or rules to generate indicators, scores, or recommendations. However, we do not make decisions that have a legal or similarly significant effect on individuals based solely on automated processing. Any such decisions are subject to meaningful human review. 

The use of these tools may influence the speed or level of review applied to an application or request, but individuals will not be subject to automatic rejection or adverse decisions without human involvement. 

Automated Decision Making 

Automated Decision Making and Profiling 

In some circumstances, we may conduct automated decision making or profiling using personal data. This involves the use of automated systems to evaluate certain information about an individual, such as risk factors, affordability indicators, or fraud signals, based on predefined rules or algorithms. 

Where automated decision making is used, it may result in decisions such as the approval, restriction, or rejection of an application or service. 

Individuals have the right to request human intervention, to express their point of view, and to challenge decisions made solely by automated means. Further information about automated decision making and how to exercise these rights can be obtained by contacting us using the details provided in this Privacy Policy. 

—

Credit Reference and Affordability Checks

To help us assess applications, prevent fraud, and meet our legal and regulatory obligations, we may obtain information about you from credit reference agencies (CRAs).
We obtain this information via Creditsafe, which uses its data partner TransUnion to supply consumer credit and identity data.

  • Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority
    FCA Firm Reference Number: 742313
  • TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority
    FCA Firm Reference Number: 805757

The information we receive may include data relating to your identity, credit commitments, payment history, and public record information. This data is used solely for legitimate business purposes, including creditworthiness assessment, identity verification, and fraud prevention, in accordance with applicable data protection laws.

Further information about how Creditsafe and TransUnion process your personal data can be found in their respective privacy notices:

..

1. Identity and contact details of the data controller

  • Organisation name (legal entity) – Platinum Estates Derbyshire Ltd
  • Registered address – York House, 3 George Street, Derby, DE1 1EH
  • Contact email or phone number. – enquiries@platinumestatesltd.com / 01332 204832
  • Company registration number – 09482461
  • ICO registration number – NA

2. Contact details of the Data Protection Officer (DPO)

Nindi Mann / enquiries@platinumestatesltd.com

Privacy Policy updated 23/06/2026