Privacy Policy

When you interact with Bea-tysop — whether browsing, placing an order, or getting in touch — we may collect the following:

• Account & order details — your name, email address, shipping address, and phone number when you make a purchase or create an account.
• Payment information — processed securely through our payment gateway. We never store your full card details on our servers.
• Browsing data — pages visited, time spent, device type, and browser — collected anonymously to understand how people use our site.
• Communications — if you write to us, we keep that correspondence to help resolve your query.

We do not collect sensitive personal data such as health or biometric information.

Your information is used only for the purposes you'd reasonably expect:

• To process and fulfil your orders, and send shipping updates.
• To respond to your questions and resolve issues.
• To send you offers or updates — only if you've opted in, and you can unsubscribe anytime.
• To improve our website and understand what's working.
• To meet our legal and financial obligations.

We will never use your data in ways you haven't agreed to, and we will never sell it to third parties for their marketing purposes.

We use a small number of cookies to make the site work properly and to understand how it's being used. These fall into two types:

• Essential cookies — necessary for the site to function (keeping your cart, remembering your login). You cannot opt out of these without losing core functionality.
• Analytics cookies — help us understand traffic patterns anonymously. No personal data is attached. You can decline these without affecting your experience.

We do not use advertising or third-party tracking cookies. Your browsing on our site stays on our site.

We share your data only where necessary to run the business:

• Delivery partners — your name and address, to ship your order.
• Payment processors — to securely handle your transaction.
• Email platforms — if you've subscribed to updates, to send those messages.

All third parties we work with are bound by data protection agreements. We choose partners who take privacy as seriously as we do.

We may disclose your information if required to do so by law, but we will notify you where we legally can.

We keep your personal data only for as long as needed:

• Order records are retained for 7 years for tax and accounting purposes.
• Account information is kept while your account is active, and deleted within 30 days of a deletion request.
• Marketing preferences are reset the moment you unsubscribe.

When data is no longer needed, it is securely deleted or anonymised.

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correct — ask us to update inaccurate or incomplete information.
• Delete — request that we erase your data, subject to legal obligations.
• Portability — receive your data in a structured, machine-readable format.
• Object — opt out of marketing at any time, with no questions asked.
• Withdraw consent — where processing is based on your consent, you can withdraw it at any time.

To exercise any of these rights, write to us at the address below. We will respond within 30 days.

We take reasonable technical and organisational measures to protect your data — including encrypted connections (SSL), access controls, and regular security reviews.

No system is completely secure. If you suspect any unauthorised access to your account, please contact us immediately and change your password.

Questions about this policy, or want to exercise your rights? Reach out — we're a small team and we respond personally.