Privacy Policy

Who is responsible for your data

The data controller for personal information collected through this site is Catherine Williams, trading as Bohemian Bead Box, operating from 9 Maes Llan, Llandyrnog, Denbigh, Denbighshire, Wales, LL16 4HF. You can contact us at hello@bohemianbeadbox.com.

What we collect and why

• Orders - your name, contact details, delivery address and order contents, so we can take payment and send your beads. Lawful basis: performance of a contract.
• Newsletter - your email address, only if you ask to join, and only after you confirm via a double opt-in. Lawful basis: consent, which you can withdraw at any time.
• Contact form - your name, email and message, so we can reply. Lawful basis: legitimate interest in answering you.
• Analytics - anonymous, aggregated usage statistics that don't identify you (see our Cookies page).

Who we share it with

We use a small number of trusted processors to run the shop. They only handle your data to provide their service to us:

• Stripe - payment processing and tax calculation.
• Resend - sending order confirmation and service emails.
• Mailerlite - managing the newsletter (if you join).
• Supabase - our database, hosting order and product data.
• Netlify - hosting the website.
• Umami - privacy-friendly, cookieless analytics.

Some of these providers may process data outside the UK. Where they do, appropriate safeguards (such as standard contractual clauses) are in place.

How long we keep it

We keep order records for as long as needed to fulfil the order and to meet our legal and accounting obligations (typically six years for tax purposes). Newsletter data is kept until you unsubscribe. Contact messages are kept only as long as needed to deal with your enquiry.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased (the “right to be forgotten”);
• restrict or object to how we use it;
• receive a copy of your data in a portable format;
• withdraw consent at any time, where we rely on it.

To exercise any of these, email hello@bohemianbeadbox.com. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes

We may update this policy from time to time. Any changes will be posted here with a revised date.