Privacy

Who looks after your data

We’re responsible for your personal data under UK data protection law. Questions or requests: hello@shopbadidea.com.

What we collect and why

• When you order: your name, email, delivery address and phone number, what you bought and what you paid. We need these to make, deliver and support your order (to carry out our contract with you), and we keep order records for 6 years because tax law says so.
• Payments: Stripe takes your payment on its own secure page. We never see your full card details; Stripe tells us the payment worked.
• The email list: if you sign up, your email address and when you signed up. We use it only to email you about drops and news, because you asked us to. Every email has an unsubscribe link, or just tell us, and we stop.
• Keeping the shop safe: the forms use Cloudflare’s check to spot bots, which looks at technical details like your IP address and browser. That’s in our legitimate interest in stopping fraud and spam.
• Visitor numbers: we count visits with Cloudflare Web Analytics, which uses no cookies and doesn’t track you across other sites.

Who we share it with

Only the services that run the shop, and only what each one needs:

• Printful prints your order and passes your name, address, phone number and email to the carrier that delivers it.
• Stripe handles payments, refunds and fraud checks.
• Resend sends our emails to you.
• Cloudflare hosts the shop, keeps it secure and counts visits.
• Neon stores our database, in London.

Some of these companies are based in the USA, so your data may be handled there. When it is, it’s protected by the safeguards UK law requires. We never sell your data or share it for advertising.

How long we keep it

• Orders: 6 years, for tax records.
• The email list: until you unsubscribe.
• Emails you send us: as long as we need them to help you.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to stop using it. Email us and we’ll reply within a month. If you’re not happy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

We don’t use advertising or tracking cookies, so there’s no cookie banner.

• Your bag is saved in your own browser (local storage), not in a cookie, and isn’t sent to us until you check out.
• Security: Cloudflare may set short-lived cookies when its bot check runs on a form. They’re strictly necessary to keep the shop safe.
• Payment: Stripe’s payment page is on Stripe’s site and follows Stripe’s own cookie and privacy policies.