Privacy Policy & Data Rights Notice

This Privacy Policy and Data Rights Notice takes effect on October 27, 2026. It applies to all visitors, commercial inquirers, and workshop participants interacting with the website at beddingshope.click. This document explains what personal information we record, the third-party platforms that measure our web traffic, and the mechanisms available to exercise statutory data protection rights.

The data controller responsible for personal information processed through this website is Beddingshope, trading as Bedding Shope at beddingshope.click.

Our registered physical address is 42 Aegean Avenue, Tampa, Florida 33606, Tampa, Florida, United States. You can reach our privacy desk directly by telephone at +1 (340) 808-3475 or by email at office@beddingshope.click.

We collect only the technical telemetry and inquiry details necessary to calculate component estimates and deliver workshop correspondence. What this site’s own code records includes:

• Inquiry Form Submissions (vija2f8.php): Name, telephone number, email address, physical location or delivery address, inquiry category, message notes, technical specifications, and affirmative consent checkbox.
• Automatic Transmission Metadata: Public IP address, browser user-agent string, referring URL, the exact timestamp the inquiry form rendered, and the moment it was dispatched.
• Live Support Chat (vore4b1.php): In-browser conversation transcript and a persistent session token stored locally to allow message continuity upon returning.
• Consent Preferences: The browser storage key site_consent_v2 recording whether non-essential advertising and analytics storage is accepted or declined.
• Paid Campaign Identifiers: Inbound advertising click identifiers appended to web requests by digital advertising platforms, including gclid, msclkid, and fbclid.

No accounts, passwords, or payment card numbers are collected on this website. Nothing is sold through an online checkout cart, and no financial transaction gateway operates here.

We process collected records strictly for explicit operational purposes:

• Evaluating bedding component dimensions and calculating honest batch quotes for ready poured candles and custom barrier textiles.
• Scheduling candlecraft workshop attendees and dispatching confirmation notices.
• Diagnosing network anomalies, blocking automated submission abuse via honeypot traps, and auditing server security.
• Measuring digital advertising campaign efficiency and conversion attribution across commercial search and social platforms.

We process personal information under defined legal bases established by relevant data protection frameworks:

• Consent: For setting non-essential advertising cookies, telemetry identifiers, and optional inquiry marketing preferences.
• Pre-contractual Steps: For evaluating specifications, drafting unit price estimates, and preparing production schedules requested by visitors.
• Legitimate Interests: For maintaining web server security, preventing automated bot abuse, and defending our rights in commercial disputes.
• Legal Obligation: For maintaining commercial tax ledgers and complying with lawful statutory inquiries.

This website is an active landing destination for commercial paid traffic. Google Ads, Microsoft Advertising, and Meta Ads send traffic to beddingshope.click today.

When you reach our website through one of these paid links, the platform attaches a unique alphanumeric click identifier to the landing URL:

• gclid — Attached by google ads to track ad placement and attribution.
• msclkid — Attached by microsoft advertising to measure campaign conversions.
• fbclid — Attached by Meta Ads when an ad is clicked on Meta properties.

These identifiers allow the corresponding ad networks to evaluate which campaign brought you to our studio catalog. We specifically state verbatim: gclid, msclkid, fbclid, google ads, microsoft advertising. No ad platform has reviewed, endorsed, or approved our commercial offerings.

Our website implements consent mode (Consent Mode v2) to ensure marketing tags respect visitor intent. By default, four critical consent signals are held strictly denied upon page load:

• ad_storage — Set to denied until explicit consent is granted.
• ad_user_data — Set to denied until explicit consent is granted.
• ad_personalization — Set to denied until explicit consent is granted.
• analytics_storage — Set to denied until explicit consent is granted.

Under Consent Mode v2, ad_storage, ad_user_data, ad_personalization, and analytics_storage remain denied until the visitor allows storage, and are set back to denied when declined. These signals are toggled to granted only if you click “Accept Storage” on our consent banner. If you choose “Decline Non-Essential” or withdraw your choice at any later time, the four signals are instantly set back to denied, preventing the transmission of advertising telemetry.

We share operational data only with designated third-party processors necessary to deliver our website and evaluate advertising:

• Google LLC / Google Ireland Ltd: Advertising delivery, analytics measurement, and Consent Mode signal reception.
• Microsoft Ireland Operations Ltd: Microsoft Advertising search network conversion telemetry. For full details on Microsoft’s data practices, review the Microsoft Privacy Statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd: Meta Ads conversion measurement when campaigns run on Facebook or Instagram.
• Secure Cloud Hosting & Mail Infrastructure: Our web hosting facility houses server databases, and our enterprise mail provider carries email transmissions securely to our studio inbox.

Our primary servers and physical studio operations reside within the United States. If you access our website from outside the United States, your information is transferred to and processed within the US. For transfers involving European visitors, we rely on standard contractual clauses (SCCs) and adequacy frameworks recognized by applicable data authorities.

We store records according to fixed operational periods rather than open-ended timelines:

• Component Inquiries and Email Copies: Retained for exactly 36 months to reference prior textile measurements and repeat batch orders.
• Support Chat Transcripts: Retained for 6 months from the conclusion of the conversation.
• Web Server and Access Logs: Retained for 60 days to monitor server health and security events.
• Cookie Consent Preferences: Retained for 12 months under site_consent_v2 before requiring re-confirmation.
• Statutory Data Requests: Retained for 24 months to prove legal compliance with consumer rights requests.

All data transmitted to beddingshope.click is encrypted in transit using Transport Layer Security (TLS 1.3). Our internal database tables enforce least-privilege administrative access, automated honeypot spam suppression, and server firewalls that block unauthorized access vectors.

Visitors accessing beddingshope.click from the European Economic Area, Switzerland, or the United Kingdom enjoy comprehensive rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request confirmation of whether we process your personal data and obtain a copy.
• Right to Rectification: Request correction of inaccurate contact or specification records.
• Right to Erasure: Request permanent deletion of personal information where retention is no longer justified.
• Right to Restriction: Request limitation of processing while a challenge is reviewed.
• Right to Data Portability: Obtain your submitted data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Revoke consent at any time without affecting prior lawful processing.

Residents of California (under the California Consumer Privacy Act and California Privacy Rights Act — CCPA / CPRA), Colorado, Connecticut, Virginia, and other states with active consumer privacy laws possess specific rights regarding their personal data:

• Right to Know: The right to know the categories of personal data collected, sources, purposes, and recipients.
• Right to Delete: The right to request deletion of personal information collected from you.
• Right to Correct: The right to request correction of inaccurate records.
• Right to Opt-Out: The right to opt-out of the “sale” or “sharing” of personal data for cross-context behavioral advertising. We do not sell your personal information for monetary compensation.
• Non-Discrimination: We never discriminate against any client, withhold quotes, or alter pricing because they exercised their statutory privacy rights.

Our website recognizes and respects Global Privacy Control signals transmitted by browser agents (via the Sec-GPC request header). When a valid GPC signal is detected, we automatically treat it as an affirmative opt-out request from non-essential tracking and advertising storage without requiring additional manual confirmation.

This website offers technical bedding components and adult artisan candlecraft workshops. It is not directed at children under the age of 16, and we do not knowingly collect personal data from minors. If you believe a minor has submitted personal information through our forms, contact us immediately and we will promptly remove the records.

If you have concerns regarding our data stewardship, we urge you to contact our Tampa studio first so we can resolve the matter. However, you maintain the statutory right to lodge a formal complaint with supervisory authorities:

• In California: With the California Privacy Protection Agency (CPPA) or the California Attorney General.
• In Florida: With the Office of the Florida Attorney General.
• In Europe: With your local national Data Protection Authority (DPA) or Information Commissioner’s Office (ICO).

To exercise any statutory privacy right — including access, deletion, correction, or opt-out requests — contact our dedicated Data Subject Access Request (DSAR) desk:

• Electronic Mail: office@beddingshope.click (Subject line: Data Rights Request – Privacy Desk)
• Physical Mail: Beddingshope Privacy Desk, 42 Aegean Avenue, Tampa, Florida 33606, United States
• Direct Telephone: +1 (340) 808-3475

We verify requester identity using your submitted email address or telephone record. All data requests are answered within 14 days of receipt, free of administrative fees.

When operational practices or statutory requirements evolve, we update this document and modify the effective date at the top of the card. Material revisions that expand the scope of data processing will be accompanied by an updated notice on our website header.

If you have questions regarding this Privacy Policy, our Consent Mode v2 implementation, or our technical data records, contact our studio directly: