Privacy Policy (UK GDPR Compliant)

Effective Date: 1/1/2026

1. Introduction

Bobityboo Crafts (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you shop with us at bobityboogemcrafts.co.uk.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Information you provide directly

• Name
• Billing and delivery address
• Email address
• Payment method (processed securely by third-party providers)
• Order details
• Messages sent via our contact form

Information collected automatically

• IP address
• Browser and device information
• Pages visited and time spent on the site
• Cookies (see section below)

We do not store or have access to your full card details.

3. How We Use Your Information

• Process and fulfil your orders
• Send order confirmations and delivery updates
• Respond to customer enquiries
• Improve our website and services
• Prevent fraud and maintain security
• Comply with legal obligations

We do not sell or share your data with third‑party marketers.

4. Legal Basis for Processing

• Contract – to process and deliver your order
• Legitimate interests – to improve services and prevent fraud
• Legal obligation – for tax and regulatory requirements
• Consent – for optional marketing emails (only if you opt in)

5. Cookies

Our website uses cookies to enable essential functions, improve performance, and analyse visitor behaviour. You can manage or disable cookies through your browser settings.

6. How We Store and Protect Your Data

Your information is stored securely and protected using:

• SSL encryption across the entire website
• Secure payment processing via trusted third‑party providers
• Restricted access to customer information
• Regular security monitoring

We retain your data only as long as necessary for order processing, legal compliance, and customer service.

7. Sharing Your Information

We may share your data only with:

• Payment processors (e.g., PayPal)
• Delivery services (Royal Mail)
• IT service providers who support our website

These partners only receive the information required to perform their services and must comply with UK data protection laws.

We never sell your data.

8. International Orders

If you place an order from outside the UK, your data may be processed in the country where you are located for delivery purposes. All partners handling your data must comply with UK GDPR‑equivalent protections.

9. Your Rights Under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Request corrections to inaccurate information
• Request deletion of your data (in certain circumstances)
• Object to certain types of processing
• Request a copy of your data (data portability)
• Withdraw consent for marketing at any time

To exercise these rights, please contact us via the website contact form.

10. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us during office hours using the website contact form. We aim to respond within 24 hours.

Postal Address:
Bobityboo Gemcrafts
Newton Aycliffe
Co. Durham
DL5 7AY