Privacy policy

L

1. PURPOSE AND SCOPE

This policy explains personal information handling connected with browsing byalcapone.shop, placing orders, customer enquiries, and optional features you choose to use. Send privacy questions and rights requests to info@byalcapone.shop.

For purposes we determine, the business operating byalcapone.shop acts as data controller. Shopify and other providers may process information on our behalf and, for some independent services, as separate controllers. Their separate notices govern their independent activities. This policy concerns our store's processing.

Applicable requirements include the UK General Data Protection Regulation and Data Protection Act 2018, as amended, and relevant electronic communications privacy rules. Visiting the store does not mean you consent to every processing activity. We use an appropriate lawful basis and obtain consent where required.

2. INFORMATION YOU PROVIDE

Orders require information such as your name, contact email, delivery and billing addresses, selected goods, and purchase details. A telephone number may be provided for delivery or contact purposes. We receive payment status, transaction references, and information needed to reconcile purchases and refunds.

Where account features are available and used, information can include account identifiers, saved addresses, preferences, and order history. Customer enquiries include the messages and attachments you send. Optional reviews contain the information you choose to submit and may be publicly visible where submitted for publication.

Do not email full card numbers, security codes, passwords, identity documents, health details, or other sensitive information unless a legitimate need and suitable secure process have been specifically explained. Ordinary order enquiries usually do not require such information.

3. TECHNICAL AND USAGE INFORMATION

Hosting and commerce infrastructure may receive an IP address, browser and device characteristics, language settings, approximate location derived from technical information, referring pages, and security or error logs. Essential session information supports functions such as maintaining your basket and completing checkout.

Where optional measurement or advertising features are enabled and lawfully activated, information can include page views, interactions, referral sources, and campaign identifiers. Actual processing depends on the features used, applicable permissions, and your choices. Conditional features in this notice apply only where available and enabled.

4. OTHER INFORMATION SOURCES

We may receive purchase-related information from Shopify, payment services, delivery providers, and services supporting fraud prevention or customer communication. Examples include payment confirmation, shipment tracking, delivery status, or transaction risk indicators.

If you choose an independent payment or account service, it may share information needed for that transaction. Using such a service does not give us unrestricted access to unrelated activity in your account.

5. PURPOSES AND LAWFUL BASES

Necessary customer and purchase information is used to take requested steps before a purchase and perform the sales contract. Purposes include processing orders, communicating about fulfilment, arranging delivery, administering cancellation and refunds, and managing contractual enquiries.

Legal obligations support processing needed for accounting, tax records, lawful regulatory requests, and applicable consumer or data protection duties. A legal record may need to remain after an optional account is closed.

Our legitimate interests may support proportionate store security, fraud prevention, troubleshooting, complaint management, maintaining relevant business records, and establishing or defending claims. We consider whether processing is necessary and how it affects your rights. This basis does not bypass a consent requirement for tracking or marketing.

Consent is used for optional communications or technologies where required. Any existing-customer marketing exception is used only where its legal conditions are met, including an appropriate opportunity to opt out. Withdrawal of consent does not affect the lawfulness of earlier consent-based processing.

6. COOKIES AND SIMILAR TECHNOLOGIES

Cookies can maintain essential functions, remember preferences, measure use, and support advertising where enabled. Strictly necessary technologies may operate without consent where permitted for a service you request.

Our approach is to obtain consent before activating non-essential analytics or advertising technologies requiring it. Use available cookie controls to accept, reject, or change optional preferences, or contact info@byalcapone.shop for assistance. Browser settings can delete or block cookies, although blocking essential storage can affect checkout.

Specific cookie durations, providers, and purposes depend on the technology and should be explained through the applicable cookie disclosures and preference interface. Withdrawing optional consent does not stop essential order processing or require deletion of records that must lawfully remain.

7. MARKETING CHOICES

Where offered, marketing subscriptions are optional and are not a condition of an ordinary purchase. Order confirmations, delivery updates, refund messages, and necessary safety communications are operational messages rather than promotional subscriptions.

Unsubscribe using the available marketing-message link or email info@byalcapone.shop. A limited suppression record may remain so that your preference is respected. Unsubscribing does not prevent necessary communication about an existing order.

8. INFORMATION RECIPIENTS

Relevant information may be shared with Shopify for hosting and commerce functions; payment providers for authorisation and refunds; fulfilment and delivery providers for shipment; and providers supporting maintenance, communications, or customer assistance. Recipients should receive information needed for their role rather than unnecessary complete customer records.

Advisers, insurers, auditors, or authorities may receive information for an appropriate legal, regulatory, or business purpose. A genuine business restructuring or transfer must remain subject to data protection requirements and suitable safeguards.

Any optional advertising integration must operate consistently with consent requirements and the disclosures in the relevant privacy controls. We do not disclose customer information without a relevant purpose and lawful basis.

9. SHOPIFY'S PROCESSING

Shopify provides commerce infrastructure and may independently handle information for certain services, security activities, or consumer features. Its role depends on the service and purpose involved.

Review Shopify's information at https://www.shopify.com/legal/privacy and its consumer privacy controls at https://privacy.shopify.com. Those notices concern Shopify's activities and do not replace your ability to contact us about our store's processing.

10. INTERNATIONAL PROCESSING

Shopify and other providers may operate outside the United Kingdom, including in Canada, the United States, and other locations identified in applicable provider disclosures. Actual processing locations depend on the services involved.

Restricted international transfers require an appropriate mechanism. This may include UK adequacy regulations or recognised contractual protections, such as the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses where appropriate. Adequacy arrangements apply only within their relevant scope.

Email info@byalcapone.shop for details of safeguards relevant to our processing and how to obtain a copy or summary, subject to lawful confidentiality protections. Continued website use is not blanket permission for a restricted transfer.

11. RETENTION CRITERIA

Retention is determined by purpose and applicable obligations. Purchase and refund records remain for the period needed to administer orders, meet accounting and tax requirements, resolve disputes, and address relevant legal claims. Statutory requirements are considered rather than applying a single period to all data.

Customer correspondence remains while an enquiry is active and for a proportionate follow-up or dispute period. Account information remains while an account is used and afterwards only for a separate lawful purpose. Technical logs are retained for periods proportionate to security and troubleshooting needs.

Marketing data remains while a lawful basis exists; limited opt-out records may be kept to prevent unwanted messages. Information no longer needed is deleted or appropriately anonymised. Backup information may remain until the ordinary backup cycle completes with restrictions on routine reuse.

12. SECURITY

We use reasonable organisational and technical protections appropriate to the information involved, including access controls, limiting unnecessary disclosure, and available platform security features. No internet service can guarantee prevention of every incident.

Protect account credentials and use a secure device. Contact us if you suspect unauthorised order or account activity. Incidents will be assessed and notifications made where required by applicable law.

13. YOUR RIGHTS

Depending on the legal conditions, you can request access, correction, deletion, restriction, and portability of eligible information. You may object to legitimate-interest processing and object to direct marketing at any time. You can withdraw consent where it is the processing basis.

Rights have legal conditions and exceptions. For example, a record necessary for a legal obligation or claim may not be immediately deletable. We will explain any applicable restriction rather than ignore your request.

Send requests to info@byalcapone.shop. Proportionate identity verification or clarification may be needed. Requests are generally answered within one month, subject to lawful extensions or exceptions. An applicable extension will be explained. Requests are normally free; a fee or refusal applies only where legally permitted.

14. AUTOMATED PROCESSING

Commerce or payment systems may use automated security indicators to identify transactions for review. An indicator does not necessarily establish fraud. Contact us if a decision about your order appears incorrect and you want it reviewed.

Where significant decisions based solely on automated processing fall within applicable legal rules, relevant information and safeguards will be provided. These can include making representations, challenging a decision, and obtaining human intervention as legally required. This notice does not authorise unlawful automated processing.

15. CHILDREN AND EXTERNAL SERVICES

Purchases are intended to be made by adults or with appropriate adult authorisation. We do not intentionally solicit sensitive information from children. Contact us if a child's information requires attention.

Separate websites and payment services have their own privacy practices. Read their notices before use. Our responsibilities for our own processing and disclosures remain unchanged.

16. COMPLAINTS AND UPDATES

Contact info@byalcapone.shop with privacy concerns. We will review the complaint and respond appropriately. You can also complain to the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ without giving up that right to contact us first.

This policy may change as features or legal requirements develop. Material changes will be communicated appropriately, and fresh consent obtained where a new purpose requires it.