Privacy policy
Privacy Policy
Effective Date: 11th October 2025
At Ystrad Bath & Bubbles, we are committed to protecting your privacy and ensuring that your personal information is handled responsibly. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
1. Who We Are
Ystrad Bath & Bubbles
Website: www.ystradbathandbubbles.co.uk
Email: [email protected]
We are the data controller for any personal data collected via our website, email communication, or online sales channels.
2. What Information We Collect
We may collect and process the following types of personal information:
Identity Data – your name
Contact Data – email address, phone number, delivery address
Transaction Data – product purchases, order history, payment method (Note: we do not store full payment card details)
Technical Data – IP address, browser type, time zone, device type (collected via cookies)
Marketing and Communications Data – your preferences for receiving updates and promotions
3. How We Collect Your Information
We collect information through:
Orders placed on our website
Newsletter or marketing sign-ups
Contact forms or direct communication via email
Cookies and similar technologies when you browse our website
4. How We Use Your Information
We use your data to:
Process and fulfill your orders
Communicate with you about your order or enquiry
Manage your customer account (if applicable)
Send marketing emails, if you have opted in
Improve and personalise your experience on our website
Comply with legal and tax obligations
5. Marketing and Communication
If you have consented, we may send you occasional emails about new products, promotions, or updates.
You can opt out at any time by:
Clicking the “unsubscribe” link in our emails
Contacting us directly at [email protected]
We will never sell or share your information with third parties for marketing purposes.
6. Sharing Your Information
We may share your data with trusted third-party providers only when necessary, including:
Payment processors (e.g. PayPal)
Delivery services (e.g. Royal Mail, couriers)
IT and website support providers
These third parties only process your data under our instructions and are required to keep it secure.
7. Data Security
We take appropriate technical and organisational measures to protect your personal data. This includes secure servers, encrypted payment systems, and limiting access to authorised personnel only.
8. Cookies
We use cookies to enhance your experience on our website. These may include:
Necessary cookies for website functionality
Performance cookies to analyse traffic and usage
Marketing cookies (with your consent)
You can control cookie settings via your browser or our cookie banner.
9. Your Data Rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (where applicable)
Object to processing or restrict how we use your data
Withdraw consent (e.g. unsubscribe from marketing)
To exercise any of your rights, please contact us at [Insert Email].
10. Data Retention
We will retain your personal data only as long as necessary for the purposes outlined in this policy, including legal and tax obligations. Typically, order data is kept for 6 years in accordance with UK tax law.
11. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites. Please read their privacy policies before providing any personal data.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be posted on our website with the effective date.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact:
Ystrad Bath & Bubbles
📧 Email: [email protected]
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) – www.ico.org.uk