PRIVACY POLICY

Best Bag Ever
www.bestbagever.com

Last updated: August 2026

1. Who We Are and How to Contact Us

Best Bag Ever operates the website www.bestbagever.com. We are the data controller responsible for your personal data.

If you have any concerns about how we use your data, you have the right to complain to the **Information Commissioner's Office (ICO)** at www.ico.org.uk, though we would appreciate the chance to address your concerns first.

2. What Data We Collect

When you use our Website or place an order, we may collect the following personal data:

- Identity data: name
- Contact data: email address, delivery address, telephone number
- Transaction data: details of purchases, payment method type (we do not store full card details)
- Technical data: IP address, browser type, device information, pages visited, and time spent on the site (collected via cookies)
- Communications data: messages you send us via email or contact forms

We do not collect any special category data (such as health, religion, or biometric data).

3. How We Collect Your Data

We collect data in the following ways:

- Directly from you when you place an order, create an account, or contact us
- Automatically via cookies and similar technologies when you browse our Website
- From third parties, including our payment processors/payment service providers and analytics providers

4. How and Why We Use Your Data

We only use your personal data where we have a lawful basis to do so. The table below explains how we use your data and our legal basis under the UK GDPR:

| Purpose | Legal Basis |

5. Sharing Your Data with Third Parties

Because we operate on a dropshipping model, we are required to share your delivery information (name and delivery address) with our third-party suppliers in order to fulfil your order. We only share the minimum data necessary for this purpose.

We may also share your data with:

- Payment processors (e.g. Stripe, PayPal) to handle transactions securely
- Wix (our website platform provider) for hosting and order management
- Analytics providers (e.g. Google Analytics) to help us understand how our Website is used
- Legal or regulatory authorities if required by law

We do not sell your personal data to any third party.

All third parties we work with are required to handle your data securely and in compliance with applicable data protection law. Where suppliers are based outside the UK, we ensure appropriate safeguards are in place (such as UK adequacy decisions or standard contractual clauses).

6. International Data Transfers

Some of our suppliers may be based outside the UK. When we transfer your data internationally, we ensure it is protected by appropriate safeguards in line with UK GDPR requirements.

7. How Long We Keep Your Data

We retain your data only for as long as necessary for the purposes set out in this Policy:

8. Cookies

We use cookies and similar tracking technologies on our Website to improve your experience and analyse traffic. You can control cookies through your browser settings or our cookie consent tool.

Types of cookies we use:

- Essential cookies: necessary for the Website to function
- Analytics cookies: help us understand how visitors use our site (e.g. Google Analytics)
- Marketing cookies: used to show you relevant content (only with your consent)

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

- Right to access: request a copy of the data we hold about you
- Right to rectification: ask us to correct inaccurate or incomplete data
- Right to erasure: ask us to delete your data in certain circumstances
- Right to restrict processing: ask us to limit how we use your data
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at support@bestbagever.com. We will respond within one month of receiving your request. We will not charge a fee unless your request is clearly unfounded or excessive.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Our Website is hosted on Wix, which maintains industry-standard security practices.

However, no method of transmission over the internet is completely secure. While we do our best to protect your data, we cannot guarantee absolute security.

11. Children's Privacy

Our Website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

12. Payment Processing — Stripe

To process payments securely, we use Stripe, a third-party payment service provider (PSP) operated by Stripe Payments Europe, Ltd. When you make a purchase on our Website, your payment information (such as card details) is collected and processed directly by Stripe. We do not store, access, or process your full card details at any point.

By completing a purchase on our Website, you acknowledge and agree that your payment data will be processed by Stripe in accordance with their own Privacy Policy, available at https://stripe.com/gb/privacy.

Stripe acts as an independent data controller for the payment data they collect. We recommend you review Stripe's Privacy Policy to understand how they handle your information.

Stripe is authorised by the Financial Conduct Authority (FCA) under the Electronic Money Regulations 2011 (firm reference number: 900461).

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any updates on this page with a revised "Last updated" date. We encourage you to review this page periodically.

14. How to Complain

If you are unhappy with how we have handled your data, please contact us first at support@bestbagever.com. If you remain dissatisfied, you have the right to lodge a complaint with the **Information Commissioner's Office (ICO)**:

- Website: www.ico.org.uk
- Helpline: 0303 123 1113