This Privacy Policy explains how Luxury Bedding, a trading name of Caruso Consulting Co Ltd (VAT 0765554000332), collects, uses, shares and protects your personal data when you visit luxurybedding.online or any of our regional stores.

1. Who We Are

Luxury Bedding is a division of Caruso Consulting Co Ltd, a company registered in Thailand.

2. Data We Collect

2.1 Information You Provide Directly

When you place an order or contact us, we collect:

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

3. How We Use Your Data

We use your personal data for the following purposes:

4. Third-Party Services and Tracking Tools

4.1 Google Analytics and Google Ads

We use Google Analytics to understand how visitors interact with our website. Google Analytics collects anonymised data including page views, session duration and traffic sources. We may also use Google Ads conversion tracking to measure the performance of our advertising campaigns. Google's privacy policy is available at policies.google.com/privacy.

4.2 Meta (Facebook) Pixel

We use the Meta Pixel to measure the effectiveness of our Facebook and Instagram advertising and to show you relevant ads on Meta platforms. The Meta Pixel collects information about your actions on our website (such as pages visited and purchases made) and sends this to Meta. Meta's data policy is available at facebook.com/privacy/policy.

4.3 Payment Processors

Payment transactions are processed by PCI-DSS compliant third-party payment providers. These providers have their own privacy policies, and we only share the information necessary to process your payment.

4.4 Shipping Partners

To fulfil your order, we share your name and delivery address with our logistics and shipping partners. These partners are bound by confidentiality obligations and may not use your data for any other purpose.

4.5 Email Marketing (Klaviyo / Mailchimp)

Where you have opted in to receive marketing emails, your email address may be stored and managed using a third-party email marketing platform. You can unsubscribe at any time using the link in any marketing email.

5. Cookies

We use cookies — small text files stored on your device — to make our website function correctly and to improve your experience. Cookies we use include:

Strictly Necessary Cookies

Required for the website to function. These cannot be disabled. They include session cookies for shopping cart and security.

Analytics Cookies

Used to understand how visitors use our website (Google Analytics). These are set only with your consent.

Marketing Cookies

Used to track visits and conversions from our advertising campaigns (Google Ads, Meta Pixel). These are set only with your consent.

You can manage your cookie preferences via the banner displayed on your first visit, or by adjusting your browser settings. Note that disabling certain cookies may affect website functionality.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

7. Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal, accounting and reporting requirements. Order data is typically retained for seven years in line with standard business record-keeping requirements. Marketing data is retained until you unsubscribe or request deletion.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. All payment transactions are encrypted using TLS/SSL. We regularly review our security practices and update them as necessary.

9. International Transfers

As a company operating globally, your data may be transferred to and processed in countries outside your home country, including Thailand (where our company is registered). Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection law.

10. Children's Privacy

Our website and products are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: