1. Who We Are
Data Controller: BASH TABLEWARE
Company Registration Number: [Insert Number]
Email: info@bashtableware.com
2. What Personal Data We Collect
When you interact with our Website (e.g., browse, register, or make a purchase), we may collect the following data:
a. Identity & Contact Data
- Name
- Email address
- Phone number
- Billing and shipping addresses
b. Payment Data
- Partial credit/debit card details (via secure payment processors)
- Transaction details
Note: We do not store full card information. All payment data is handled by secure, PCI-compliant third-party providers such as Stripe, PayPal, etc.
c. Technical Data
- IP address
- Browser type and version
- Device type and operating system
- Referring to website URLs
d. Usage Data
- Information about how you use our Website, pages viewed, products added to cart, etc.
e. Marketing Data
- Preferences for receiving marketing and promotional emails (if opted-in)
3. How We Collect Your Data
We collect personal data via:
- Order forms and account registrations
- Direct communication (email, phone)
- Cookies and tracking technologies
- Integrated third-party services (e.g. Google Analytics, Meta Pixel)
4. How We Use Your Data
We use your data to:
- Process and deliver your orders
- Provide customer support
- Notify you of order status, shipping, or issues
- Improve and personalise your shopping experience
- Send newsletters and promotional offers (only if you've opted in)
- Detect fraud and ensure website security
5. Legal Basis for Processing
Under the UK GDPR, we rely on the following lawful bases:
- Contractual necessity – to fulfil your order or service
- Consent – for marketing communications
- Legitimate interest – e.g., to improve our services, prevent fraud
- Legal obligation – e.g., keeping tax records
6. Sharing Your Data
We may share your data with trusted third parties, including:
- Payment processors (e.g. Stripe, PayPal)
- Delivery and logistics partners
- Email marketing platforms (e.g., Mailchimp, Klaviyo)
- Analytics providers (e.g., Google Analytics)
- IT and hosting providers
All third parties are required to comply with data protection regulations and only process your data on our instructions.
7. International Data Transfers
If your data is transferred outside the UK, we ensure appropriate safeguards (e.g., UK IDTA or EU SCCs) are in place to protect your personal information.
8. Data Retention
We retain your personal data only as long as necessary:
- Order and transaction records: 6 years (for tax and legal purposes)
- Marketing preferences: until you unsubscribe
- Browsing and usage data: according to our cookie retention policy
9. Your Rights Under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Object to or restrict processing
- Withdraw consent at any time (e.g., marketing)
- Lodge a complaint with the ICO
Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Phone: 0303 123 1113
10. Cookies
We use cookies to:
- Improve your browsing and shopping experience
- Remember login sessions and cart contents
- Analyse website traffic
You can manage your cookie preferences via your browser settings or by using our cookie consent banner.
11. Marketing and Communications
If you opt in, we may contact you with:
- Exclusive offers and discounts
- Product updates
- Abandoned cart reminders
You can opt out at any time by clicking "unsubscribe" in any email or contacting us directly.
12. Security of Your Data
We use secure protocols (SSL encryption), firewalls, access controls, and regular security assessments to safeguard your personal information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be notified via email or on our Website.
14. Contact Us
For any questions about this Privacy Policy or to exercise your rights, contact:
BASH TABLEWARE
Email: info@bashtableware.com
