Privacy and your data

Discretion is about more than a plain box. When you shop with us, you trust us with some personal details, and we take that seriously. This guide explains, in plain English, what we collect, why, who helps us and what your rights are. Our full privacy policy has the formal detail.

vibrator.toys is run by BH Commerce Ltd, a UK company, and we handle personal data in line with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

What data do we collect, and why?

We keep it to what we genuinely need to sell and deliver your order:

• Your name and delivery address, so your parcel reaches you.
• Your email address, to send your order confirmation, dispatch and tracking updates.
• Your order details, such as what you bought and when, so we can handle returns, faults and questions.
• Basic technical data, such as the pages visited, to keep the website working well and secure.

We do not ask for your date of birth, gender or relationship status, and we never need to know why you are buying something.

Who handles your payment?

When you pay, you enter your card details on a secure checkout page run by Stripe, one of the world's largest payment providers. We never see or store your full card number. Stripe tells us whether the payment worked and gives us limited details, such as the last four digits of your card, so we can help if there is a problem.

Your bank or card statement shows "BH Commerce Ltd", our company name, never vibrator.toys or the products you bought. See what appears on your bank statement.

Who helps us run the shop?

Like most online shops, we use a few trusted service providers, known as processors, to do specific jobs on our behalf. They may only use your data to provide their service to us:

• Stripe processes payments.
• Resend sends our order and delivery emails.
• Vercel hosts the website.
• Supabase stores order records securely.
• Royal Mail and our fulfilment partners receive the name and address needed to deliver your parcel.

How long do we keep your data?

We keep order records only for as long as we need them: to handle returns and warranty questions, and to meet our legal and tax obligations, which in the UK usually means up to six years for financial records. After that, records are deleted or anonymised. Data is stored with providers who use encryption and strict access controls.

Do we ever sell your data?

We do not sell, rent or trade your personal data, and we never will. We do not share your details with advertisers or data brokers.

Discreet emails

Our emails are designed to be private in your inbox. Subject lines are plain and do not name products, and we only send marketing emails if you have clearly opted in. You can unsubscribe at any time with one click.

App-controlled toys

We do not currently sell any app-controlled toys. Every toy in our collection, from the simple Bijou Classic Bullet to the waterproof Lune Rechargeable Mini Bullet and the dual-ended Duet Dual Massage Wand, is controlled with buttons on the toy itself, so nothing connects to your phone and everything stays offline. If you ever choose an app-controlled toy elsewhere, its companion app will have its own privacy policy, which is worth reading before you connect. Our guide to app and remote control explains the differences.

What are your rights under UK GDPR?

Under UK GDPR you have the right to ask for a copy of the personal data we hold about you, to ask us to correct it, and in many cases to ask us to delete it. To make a request, email our UK-based customer care team at hello@vibrator.toys. If you are unhappy with how we have handled your data, you can also contact the Information Commissioner's Office (ICO), the UK's data protection regulator.