Privacy policy

Bean Bard is committed to protecting your personal data under UK GDPR and the Data Protection Act 2018.

What data we collect

When you place an order: name, email address, delivery address, payment information (processed by Shopify Payments — we never see your full card details), order history.

When you browse: we do not use tracking or advertising cookies.

Why we collect it

To fulfil your order (contract performance)
To manage your account (contract performance)
To comply with legal obligations (HMRC record-keeping)
How we share your data

We do not sell your data. We share it only with:

Shopify — order processing, payments, and customer account management. See Shopify's Privacy Policy.
Our shipping carrier — name and delivery address only
How long we keep your data

Order records: 7 years (HMRC requirement)
Account data: for as long as your account is active
Email communications: up to 2 years
Your rights under UK GDPR: access, rectification, erasure, restriction, portability, and the right to object. Email brew@beanbard.com to exercise any of these rights. We will respond within 30 days.

Cookies: We use only essential cookies required by Shopify for cart and checkout functionality. No advertising or tracking cookies.

Complaints: You have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).

Contact: brew@beanbard.com