Privacy policy

BEACON BRANDS LTD is the controller responsible for personal information it uses to administer beaconbrandsltd.shop, respond to enquiries and fulfil its customer contracts. This notice explains those purposes and your UK data-protection rights. Information processed independently by an external platform is also subject to that platform's own notice.

Who to contact

Use these details for privacy enquiries, objections and rights requests. Identify the order or interaction concerned, but do not send passwords, full card numbers or banking security codes. You can also write to our registered office, marking the letter “Privacy”.

Information connected with a purchase or enquiry

To handle an order, we need relevant identity, contact and transaction information, such as your name, email address, purchased item, payment status and order reference. Physical delivery also requires a delivery address and relevant delivery instructions. Billing information is used for the transaction and associated records.

For a digital purchase, relevant information can include the file ordered and communications about supplying or accessing it. If you commission a personalised product or pattern, information you choose to submit as part of the brief is used to deal with that request. Please avoid sending sensitive information or another person's information unless it is needed and you are entitled to provide it.

Customer-service records can contain your messages, the order information needed to investigate them, and any photographs you provide. Where an account feature is used, account details support access to that feature. Browsing and checkout systems can also process technical information such as IP address, browser, device and session details. The Cookies Policy explains storage and access technologies separately.

Purposes and legal bases

We use information needed to respond to a purchase request, administer payment, supply the item and manage associated customer service on the basis of taking steps at your request before a contract or performing that contract. We use information needed to comply with accounting, tax and consumer obligations on the basis of legal obligation.

For proportionate fraud prevention, security, complaint handling and the establishment or defence of claims, processing may be based on legitimate interests where it is not instead required by law or necessary for the contract. Those interests are protecting customers and the business and resolving disputes; they must be balanced against individuals' rights.

Where consent is required for a marketing communication or a storage/access technology, the relevant use requires that consent. Consent to optional marketing is separate from purchasing or sending an enquiry. Necessary order communications can continue even if you decline marketing.

Sources and recipients

Information usually comes from you when you order, contact us or provide a custom brief. Payment services provide transaction status; delivery services can provide delivery status for physical goods. If you contact or purchase from the business on Etsy, information made available through the relevant Etsy transaction is used to respond and administer that transaction.

Shopify provides the ecommerce platform for this store. Its role in hosting the store and processing associated information is described in Shopify's privacy information. Depending on the particular service, Shopify can process information on a merchant's instructions or for its own purposes as explained in its notice.

Other relevant recipients are the payment service chosen for a transaction, fulfilment and delivery providers for physical orders, providers used to supply digital files, and the communication providers needed to handle enquiries. Professional advisers and public authorities may receive relevant records where necessary for advice, legal obligations or a dispute. This describes recipient functions; it does not mean that every provider receives every part of an order.

External links, including BeaconBrandsLtd on Etsy, open services with their own privacy practices. A link alone does not establish that their tracking technologies are embedded in this website. Purchases and messages on Etsy remain associated with that platform's separate processing.

Marketing and your right to object

You may object at any time to processing for direct marketing, including related profiling. Contact us to make that choice. If you receive a marketing email, you may also use its unsubscribe facility. We may retain the minimum information needed to respect an objection and prevent further unwanted marketing.

If processing is based on legitimate interests, you can object on grounds relating to your circumstances. Where we rely on consent, you can withdraw it without affecting the lawfulness of earlier processing. Cookie choices and email-marketing choices are separate; changing one does not necessarily change the other.

Retention

We keep information for the purpose for which it is needed, taking account of the transaction, applicable record-keeping duties and any unresolved complaint or claim. Order and financial records may need to be kept after delivery or an account closure to meet legal obligations.

Enquiry and custom-brief records should be kept only as long as needed to resolve the request and meet relevant legal responsibilities. The criteria include whether the matter remains open, whether the record is needed for an associated order or dispute, and whether the purpose can be met with less information. Marketing permission records and minimal suppression records have different purposes from ordinary order records. Cookie lifetimes must be assessed separately from the retention of transaction data.

You can ask about the retention criteria applying to your particular information. A request to erase data will be considered against any legal reason to retain it; keeping a legally required invoice does not justify keeping unrelated browsing data indefinitely.

Processing outside the United Kingdom

The use of an international platform can involve processing outside the UK. Shopify explains its contractual processing and international-transfer provisions in its Data Processing Addendum. The countries and safeguards depend on the service and data flow involved.

Where we make a restricted international transfer, the applicable UK requirements must be met. These can involve an adequacy regulation or appropriate contractual safeguards and associated assessments, depending on the circumstances. Contact us for information about a transfer affecting your data and how to obtain relevant safeguards. This notice does not represent that every supplier uses the same transfer mechanism or that all information stays in the UK.

Your information rights

Depending on the circumstances, you may request access, correction, erasure, restriction or a portable copy of information you supplied. You can object where the law provides, including the direct-marketing right above, and withdraw consent where it is the basis for processing.

We may ask for proportionate information to identify you and locate the relevant records before disclosing personal data. We must respond within the applicable legal period and explain any lawful extension or restriction. Refusing optional marketing does not prevent you from exercising these rights.

If a payment or order is affected by an automated check, contact us to seek an explanation and review of the issue. Any legally significant automated decision must be handled with the information and safeguards required by applicable law. A declined payment does not by itself establish misconduct by a customer.

Providing information and handling concerns

Without the information necessary for a contract, such as a usable delivery address for physical goods, we may be unable to fulfil it. Optional marketing information is not a condition of buying. Please keep your account credentials secure and avoid sending unnecessary personal information in support messages.

Raise a concern through our contact page or the details above. You also have the right to complain to the Information Commissioner's Office. You do not need our permission to approach the ICO.

This notice may be updated as services and processing change. A revised notice does not itself authorise a new use requiring consent. Relevant information and choices must be provided when required.