Privacy policy

Section 1 – Personal information we collect

When you make a purchase from our shop, we collect the personal information you give us, such as your name, delivery and billing address, email address and phone number (if provided).

When you browse our shop, we also automatically receive your device's Internet Protocol (IP) address, which gives us information about the browser and operating system you are using.

Email marketing (where applicable): with your consent, we may send you emails about our shop, new products and other updates.

Section 2 – How we use your data and our legal basis

We only use your personal data where the law allows us to:

  • To process and deliver your order, handle returns and provide customer service. This is necessary to perform our contract with you.
  • To meet our legal obligations, for example keeping tax and accounting records.
  • To run, secure and improve our shop and prevent fraud. This is based on our legitimate interests.
  • To send you marketing emails, show you personalised offers and use non-essential cookies. This is based on your consent.

If we ever need your data for any other purpose, we will ask for your explicit consent first or give you the opportunity to refuse.

How do I withdraw my consent?
You can withdraw your consent at any time by clicking the "unsubscribe" link in any of our emails, by changing your cookie preferences, or by emailing us at contact@bireka.com. Withdrawing your consent does not affect any processing carried out before you withdrew it.

Section 3 – Disclosure

We may disclose your personal information if we are required to by law or if you breach our Terms and Conditions.

Section 4 – Shopify

Our shop is hosted on Shopify, which provides the e-commerce platform that allows us to sell our products to you.

Your data is stored through Shopify's data storage, databases and general application, on secure servers protected by a firewall.

Payment:
Payments are processed by secure third-party payment providers, and we never store your full card details. All direct payment gateways comply with the Payment Card Industry Data Security Standard (PCI-DSS). This standard is managed by the PCI Security Standards Council, a joint effort of brands such as Visa, Mastercard, American Express and Discover. It ensures that card information is handled securely by our shop and its service providers.

Section 5 – Third-party services

We only share your personal data with service providers who need it to provide their services to us, such as:

  • Shopify (hosting and e-commerce platform);
  • payment providers;
  • delivery carriers (name, address and phone number, so they can deliver your order);
  • email marketing, analytics and advertising tools (such as Google), only where you have given your consent.

Some of these providers, such as payment gateways, have their own privacy policies covering the information we are required to give them for your transactions. We recommend that you read them carefully.

International transfers: your data may be stored or processed outside the UK, including by our service providers. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Links: once you leave our shop or are redirected to a third-party website or application, this Privacy Policy and our Terms and Conditions no longer apply. We are not responsible for the privacy practices of other websites and encourage you to read their privacy policies.

Section 6 – Security and cookies

To protect your personal data, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

Card information is encrypted using SSL/TLS technology. Although no method of transmission over the internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and apply additional generally accepted industry standards.

Cookies
Essential cookies are needed for our shop to work and do not require your consent. Analytics and marketing cookies are only set with your consent. You give that consent through our cookie banner, and you can change your preferences at any time.

Examples of essential cookies we use:

  • cart: stores the contents of your shopping basket;
  • _tracking_consent: stores your cookie preferences;
  • localization: remembers your country and currency;
  • secure_customer_sig: keeps you signed in to your customer account.

For the full list of cookies set by Shopify, please see: https://www.shopify.com/legal/cookies

Section 7 – Age of consent

By using this site, you confirm that you are at least 18 years old, or that you have given consent for any minor dependants in your care to use this site.

Section 8 – Data retention

We only keep your personal data for as long as necessary:

  • order and invoicing data, for as long as required by tax and accounting laws;
  • marketing data, until you unsubscribe or withdraw your consent;
  • customer service exchanges, for as long as needed to handle your request and any follow-up.

Section 9 – Your rights

Under UK data protection law, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict or object to how we use your data, including objecting to direct marketing at any time;
  • receive your data in a portable format;
  • withdraw your consent at any time.

To exercise any of these rights, email us at contact@bireka.com. We will reply within one month.

If you are not satisfied with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO): www.ico.org.uk

Section 10 – Changes to this Privacy Policy

We reserve the right to update this Privacy Policy at any time, so please review it regularly. Changes take effect as soon as they are published on our website. If we make significant changes, we will tell you here that the policy has been updated, so you know what information we collect, how we use it and when we disclose it.

If our shop is acquired by or merged with another company, your information may be transferred to the new owners so that we can continue to sell products to you.

Questions and contact details

If you would like to access, correct, amend or delete any personal information we hold about you, make a complaint, or simply want more information, please contact our privacy compliance officer at contact@bireka.com.