Privacy

Placeholder policy, pending review. This policy describes how we intend to handle your data and is awaiting legal review before launch. If anything is unclear, please email hello@vibrator.toys.

Your privacy matters to us more than most. This policy explains, in plain English, what personal data we collect, why, who we share it with and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

vibrator.toys is operated by BH Commerce Ltd, the data controller for your personal data. You can contact us about anything in this policy at hello@vibrator.toys.

What we collect

• Order details: your name, delivery address, email address, phone number (if given, for the courier) and what you ordered.
• Payment details: handled entirely by Stripe. We never see or store your full card number.
• Messages: anything you send us by email.
• Basic technical data: such as your browser type and pages visited, used to keep the site secure and working. Your basket is stored in your own browser (local storage), not on our servers.

We do not ask for your date of birth, gender or any information about your health or preferences.

Why we use it (and our lawful basis)

• To fulfil your order and keep you updated about it (performance of a contract).
• To meet legal obligations, such as keeping tax and accounting records (legal obligation).
• To prevent fraud and keep the site secure (legitimate interests).
• To send occasional news and offers, only if you opt in, and you can unsubscribe at any time (consent).

Who we share it with

We share data only with the trusted processors who help us run the shop, under contracts that protect it:

• Stripe (payments and fraud prevention);
• Resend (sending order emails);
• Vercel (website hosting);
• Supabase (our secure order database);
• Royal Mail (your name and address, to deliver your parcel);
• our fulfilment partners, where an item ships directly from them, who receive only what they need to send your parcel.

Some processors may handle data outside the UK; where they do, appropriate safeguards (such as the UK International Data Transfer Agreement or adequacy regulations) are in place.

We never sell your data, and we never share your order history with advertisers.

Discretion by design

Payments appear on your statement as BH Commerce Ltd. Parcels are unbranded with a neutral sender name, and our emails use plain subject lines. See discreet by default.

How long we keep it

We keep order records for six years to meet UK tax and accounting rules, then delete them. Marketing preferences are kept until you unsubscribe. Emails to customer care are kept for up to two years.

Your rights

You have the right to access your data, correct it, ask us to delete it, restrict or object to how we use it, and receive it in a portable format. To use any of these rights, email hello@vibrator.toys. We will reply within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to put things right first.

Cookies

We use only the essential cookies and browser storage needed for the site and your basket to work. If we ever add analytics or marketing cookies, we will ask for your consent first and update this policy.