BACOYO Limited ("BACOYO", "we", "us") is committed to protecting your privacy. This policy explains what personal information we collect when you visit our website, place an order, use our design studio or contact us, how we use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read it together with our Terms & Conditions.
1.1The data controller responsible for your personal information is BACOYO Limited, a company registered in England and Wales (company number 09546369), registered office 61 Bridge Street, Kington, HR5 3DJ, United Kingdom.
1.2You can contact us about this policy or your personal information by phone on +44 330 190 0074 or through our Contact Us page.
2.1Information you give us when you create an account, place an order, request a quote, open a support ticket, write a review or sign up to our newsletter:
- Identity and contact details: your name, email address, phone number, and billing and delivery addresses.
- Order details: the products you buy, sizes, colours, personalisation and delivery instructions.
- Artwork and designs: logos, images, text and files you upload or create in our design studio.
- Messages: what you tell us in support tickets, emails, calls, reviews and questions.
- Business details, if you order for an organisation: company name, VAT number and purchasing contact.
2.2Payment information. Card payments are processed securely by our payment provider (Stripe). We never see or store your full card number.
2.3Information collected automatically when you use our website: your IP address, browser and device type, the pages you visit, and what you add to your basket. We collect this through cookies and similar technologies (see section 11).
03How We Use Your Information & Why
3.1We only use your personal information when the law allows us to. We use it:
| Purpose | Lawful basis |
|---|
| To process, print, pack and deliver your order, and to handle returns and refunds | Performance of a contract |
| To manage your account and answer your questions and support tickets | Performance of a contract |
| To prepare quotes and artwork proofs for business and bulk orders | Steps before entering a contract |
| To keep financial and tax records | Legal obligation |
| To prevent fraud and keep our website secure | Legitimate interests |
| To improve our website, products and services | Legitimate interests |
| To send you news, offers and new products by email | Consent (which you can withdraw at any time) |
| To set non-essential cookies | Consent |
4.1We use the artwork and designs you upload only to produce your order, to prepare proofs, and to make repeat orders easier.
4.2As set out in our Terms & Conditions, when you make a purchase you allow us to display your designs on our website and social media channels to promote our services. If you would prefer that we do not show your design, just tell us and we will respect that.
05Who We Share Your Information With
5.1We share your information only when it is needed to run our business and serve you, with:
- Delivery companies, such as Royal Mail and Evri, to deliver your order and send tracking updates.
- Our payment provider, to take payments securely and prevent fraud.
- Our garment suppliers, where they ship products directly for your order.
- IT, hosting and email service providers that keep our website and communications running.
- Professional advisers, such as accountants, and authorities where the law requires it.
5.2These companies may only use your information to provide their service to us, and they must keep it secure.

We will never sell, rent or lease your personal information to anyone.
06Transfers Outside the UK
6.1Some of our service providers may process information outside the UK. When this happens, we make sure it is protected by an adequacy decision or by approved safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
07How Long We Keep Your Information
7.1We keep personal information only for as long as we need it for the purposes above:
- Order, invoice and payment records: six years after the end of the financial year they relate to, as required for tax purposes.
- Your account: until you ask us to close it. If an account is unused for a long period we may close it.
- Artwork: for as long as your account is open, so you can reorder easily, unless you ask us to delete it sooner.
- Support tickets and messages: up to three years after your last contact.
- Marketing preferences: until you unsubscribe. We then keep your email on a suppression list so we do not contact you again.
08Keeping Your Information Secure
8.1We have put suitable physical, electronic and managerial procedures in place to protect the information we collect against unauthorised access, loss or disclosure. Our website uses encrypted connections (HTTPS), and access to personal information is limited to people who need it to do their job.
8.2No method of sending information over the internet is completely secure. If we become aware of a data breach that affects you, we will tell you and the Information Commissioner's Office where the law requires it.
9.1Under UK data protection law you have the right to:
Access
Get a copy of the personal information we hold about you.
Correct
Have inaccurate or incomplete information corrected.
Erase
Ask us to delete your information where we no longer need it.
Restrict or object
Limit how we use your information, or object to our use of it.
Portability
Receive your information in a commonly used format.
Withdraw consent
Change your mind about marketing or cookies at any time.
9.2To use any of these rights, contact us through our Contact Us page. There is normally no fee, and we will reply within one month. We may need to check your identity before we act on a request.
9.3If you believe the information we hold about you is wrong or incomplete, please tell us as soon as possible and we will correct it promptly.
10.1We will only send you marketing emails if you have agreed to receive them, for example by ticking the box at checkout or subscribing to our newsletter.
10.2You can unsubscribe at any time using the link in any marketing email, in your account, or by contacting us. Unsubscribing does not affect emails about your orders.
10.3We will never pass your details to other companies for their own marketing.
11.1A cookie is a small file placed on your device when you visit a website. Cookies help our website work, remember what is in your basket, and help us understand how the site is used so we can improve it. A cookie does not give us access to your device or to any information other than the data you choose to share with us.
11.2Strictly necessary cookies are always on, because the website cannot work without them. We only set other cookies if you agree through our cookie banner. You can change your choices at any time on our cookie settings page, or through your browser settings. Blocking some cookies may stop parts of the website from working properly.
11.3Cookies we use:
| Cookie | Purpose |
|---|
| FORM_KEY | Stores a randomly generated key used to prevent forged requests. |
| PHPSESSID | Your session ID on our server. |
| GUEST-VIEW | Allows guests to view and edit their orders. |
| PERSISTENT_SHOPPING_CART | A link to your basket and viewing history, if you asked us to remember it. |
| STF | Information on products you have emailed to friends. |
| STORE | The store view or language you have selected. |
| USER_ALLOWED_SAVE_COOKIE | Records whether you allowed us to use cookies. |
| MAGE-CACHE-SESSID, MAGE-CACHE-STORAGE, MAGE-CACHE-STORAGE-SECTION-INVALIDATION, MAGE-CACHE-TIMEOUT, SECTION-DATA-IDS, PRIVATE_CONTENT_VERSION | Help your browser cache content so pages load faster. |
| X-MAGENTO-VARY | Helps our server cache content so pages load faster. |
| MAGE-TRANSLATION-FILE-VERSION, MAGE-TRANSLATION-STORAGE | Support the translation of content into other languages. |
| __stripe_mid, __stripe_sid | Set by our payment provider to process payments securely and prevent fraud. |
12.1Our website is not intended for children under 16, and we do not knowingly collect personal information from them. Orders for children's clothing should be placed by a parent, guardian or organisation.
13Links to Other Websites
13.1Our website may contain links to other websites. Once you leave our site we have no control over those websites and are not responsible for how they protect your information. Please read their privacy policies before sharing any personal information with them.
14.1We may update this policy from time to time, for example when the law or our services change. The latest version will always be on this page, with the date it was last updated. If we make significant changes we will let you know.
15.1If you have any questions or concerns about how we handle your personal information, please contact us first through our Contact Us page or by phone on +44 330 190 0074. We will do our best to put things right.
15.2You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.
Your privacy, our priority.
Questions about your data or this policy? Our team is here to help.