PRIVACY POLICY

SECTION 1 -

WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase something from BODYBORN, as part of the buying and selling process, we collect personal information such as your name, address, and email address.

When you browse our store, we automatically receive your computer’s Internet Protocol (IP) address to help us understand your browser and operating system.

Email marketing (if applicable): With your permission, we may send you emails about our store, new products, and other updates.

SECTION 2 - CONSENT

How do you get my consent?
When you provide personal information to complete a transaction, verify your credit card, place an order, arrange for delivery, or return a purchase, we imply that you consent to our collecting and using it for that specific purpose only.

If we ask for your personal information for a secondary reason, such as marketing, we will either ask for your explicit consent or provide an opportunity to opt out.

How do I withdraw my consent?
If you change your mind after opting in, you may withdraw your consent for us to contact you or for the continued collection, use, or disclosure of your information at any time by contacting us at enquiries@bodyborn.co.uk or mailing us at:

ZTY Acorn Ltd

Rex House, Feltham London

TW13 6AP

SECTION 3 - DISCLOSURE

We may disclose your personal information if required by law or if you violate our Terms of Service.

SECTION 4 - SHOPIFY

Our store is hosted on Shopify Inc., which provides us with the e-commerce platform allowing us to sell our products and services to you.

Your data is stored through Shopify’s secure data storage, databases, and general Shopify application, protected by a firewall.

Payment:
If you choose a direct payment gateway, Shopify stores your credit card data, encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your transaction data is stored only as long as necessary to complete your purchase and is then deleted.

All direct payment gateways comply with PCI-DSS standards managed by the PCI Security Standards Council, which ensures secure handling of credit card information.

For more information, you may read Shopify’s Terms of Service (http://www.shopify.com/legal/terms) or Privacy Statement (http://www.shopify.com/legal/privacy).

SECTION 5 - THIRD-PARTY SERVICES

Third-party providers we use will collect, use, and disclose your information only to the extent necessary to perform the services they provide to us.

Certain third-party providers, such as payment gateways, have their own privacy policies regarding the information we provide for purchase-related transactions. We recommend reviewing their privacy policies to understand how your data is handled.

Some providers may operate in jurisdictions different from yours or ours, meaning your information may be subject to different legal requirements. For instance, if you are in Canada and your transaction is processed in the U.S., your data may be subject to U.S. legislation, including the Patriot Act.

Once you leave our store’s website or are redirected to a third-party application, this Privacy Policy and our Terms of Service no longer apply.

Links: Clicking on links in our store may direct you to external sites. We are not responsible for the privacy practices of other sites and encourage you to read their policies.

Google Analytics: We use Google Analytics to gather insights into store visitors and page interactions.

SECTION 6 - SECURITY

We take reasonable precautions and follow industry best practices to protect your personal information from being lost, misused, accessed, disclosed, altered, or destroyed.

If you provide credit card information, it is encrypted using SSL technology and stored with AES-256 encryption. While no online transmission or storage is 100% secure, we comply with PCI-DSS requirements and apply additional industry standards.

SECTION 7 - COOKIES

Below are the cookies we use, allowing you to opt out if desired:

_session_id: Unique token, sessional—allows Shopify to store session-related data (referrer, landing page, etc.).
_shopify_visit: No data held, persists for 30 minutes—used for internal statistics tracking.
_shopify_uniq: No data held, expires at midnight—counts store visits per customer.
cart: Unique token, persists for 2 weeks—stores cart contents.
_secure_session_id: Unique token, sessional.
storefront_digest: Unique token, indefinite—determines access for password-protected shops.
PREF: Short-lived, set by Google, tracks store visits and origins.

SECTION 8 - AGE OF CONSENT

By using this site, you confirm that you are at least the age of majority in your region or have provided consent for any minor dependents to use the site.

SECTION 9 - CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time. Changes take effect immediately upon posting on the website. If significant changes are made, we will notify users here so they remain informed about our data collection and usage practices.

If our store is acquired or merged with another company, your information may be transferred to continue providing services.

For further inquiries, please contact us at enquiries@bodyborn.co.uk