Privacy Policy

Bedwick, trading as Bedwick, operates the website bedwick.co.uk. In this policy, we refer to ourselves as “we”, “us”, or “our”. We are the data controller of your personal data for the purposes of the UK GDPR, the Data Protection Act 2018, and, where applicable, the EU GDPR.

How to contact us
If you have questions about this policy or your data rights, please contact us:

• Email: hello@bedwick.co.uk
• Postal: 44–46 Bradford Road, First Floor Unit, Bradford, WF13 2DR

You have the right to complain to the UK Information Commissioner's Office — see section 12.

We collect and process the following categories of personal data:

• Identity and contact data — name, email address, phone number, billing and delivery addresses.
• Order and account data — orders, returns, communications, account credentials, wishlist, and reviews where applicable.
• Payment and transaction data — payment method, amount, date and time, and limited card details shown to us. Full card details are processed by our payment providers, not by us.
• Marketing preferences — email opt-in or opt-out choices, consent records, and withdrawal of consent.
• Device and usage data — IP address, device identifiers, browser type, pages viewed, time on page, referring URLs, and approximate location, collected through cookies and similar technologies.
• Customer support data — queries, call notes, and attachments you send us.
• Cookie consent records — your choices about optional cookies on our website.

We do not knowingly collect special category data (such as health information). Please do not share such information with us unless we specifically ask for it.

• Directly from you — when you browse our site, create an account, place an order, opt in to marketing, contact support, or submit a form.
• Automatically — through cookies and similar technologies (see section 8).
• From third parties — payment providers, delivery partners, fraud prevention and analytics providers, where this is lawful.

We only use your data where the law allows. Our purposes and legal bases include:

• To run our website and provide our services — creating and managing your account, processing and delivering orders, handling returns and refunds, and providing customer support. Legal basis: performance of a contract and legitimate interests to operate our business.
• Payments and fraud prevention. Legal basis: performance of a contract, legitimate interests, and legal obligation.
• Service communications — order confirmations, shipping updates, return updates, and other transactional emails or messages. Legal basis: performance of a contract or legitimate interests to keep you informed.
• Marketing — sending offers and newsletters where you have opted in, or where permitted under applicable law. Legal basis: consent or, in limited cases, legitimate interests. You can opt out at any time (see section 7).
• Analytics and site improvements — measuring and improving site performance and product experience. Legal basis: consent for non-essential cookies; legitimate interests for aggregated analytics that support service quality.
• Security, compliance and record keeping — audit logs, complaint handling, and meeting tax and accounting requirements. Legal basis: legal obligation and legitimate interests.

We share personal data with trusted service providers who help us run our business, including:

• Payment processors (such as Stripe) to take and refund payments.
• Delivery and fulfilment partners to deliver your orders and handle returns.
• Email providers (such as Resend) to send transactional messages.
• Analytics providers (where you have consented) to understand and improve performance.
• IT hosting and support providers to keep our systems running.
• Fraud prevention and security partners to protect you and us.

We require processors to protect your data, use it only for our documented purposes, and delete it when no longer needed. We may also share data where required by law or to protect our legal rights.

Some providers may process data outside the UK or the EEA. Where this happens, we ensure an appropriate safeguard is in place — for example an adequacy decision, the UK international data transfer addendum, or EU Standard Contractual Clauses, plus supplementary measures where needed.

• You can withdraw consent or object to marketing at any time using the unsubscribe link in emails, or by contacting us.
• Withdrawing consent does not affect the lawfulness of processing before withdrawal.
• You will still receive transactional messages about your orders and account.

Our site uses cookies and similar technologies.

• Consent management — we show a cookie banner and record your choices. Optional analytics cookies stay disabled until you accept them. You can change your choices at any time via your browser or by clearing site data.
• Strictly necessary cookies — required for the site to function, for example basket and checkout.
• Performance and analytics cookies — help us understand site usage and improve the experience (only with consent).
• Functionality cookies — remember your preferences where applicable.

For more detail, see our Cookie Policy.

We keep data only as long as needed for the purposes above.

• Account and order records — generally up to six years after your last order, to meet tax and accounting rules and handle potential claims.
• Marketing preferences and consent logs — while you are opted in, plus a record of withdrawals, to demonstrate compliance.
• Support records — usually up to three years after resolution.
• Cookie consent records — retained as needed to honour your choices.

When retention periods end, we delete or anonymise the data.

Under data protection law, you have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Erase your data, where the law allows.
• Restrict how we use your data.
• Data portability — receive your data in a structured, commonly used format.
• Object to processing based on legitimate interests or to direct marketing.
• Withdraw consent at any time where consent is our legal basis.

To exercise these rights, contact us at hello@bedwick.co.uk. We may need to verify your identity. There is no fee unless your request is unfounded or excessive.

Our services are not directed to children and we do not knowingly collect data from anyone under 13 years old. If you believe a child has provided data, contact us and we will delete it.

If you are unhappy with how we handle your data, please contact us first so we can try to resolve it. You can also complain to the UK Information Commissioner's Office at www.ico.org.uk (telephone 0303 123 1113).

If you are in the EU, you can complain to your local supervisory authority.

We may update this policy from time to time. We will post the new version on this page and change the “Last updated” date. Significant changes may also be communicated by email where appropriate.