Privacy Policy

1. Who We Are (Data Controller)

The data controller responsible for your personal data is BargainStore.uk Ltd (Company Registration No. 14285910, registered in England & Wales).

Registered Office: 175 High St, Cowdenbeath KY4 9QE, United Kingdom. For any data protection inquiries, you may reach our Data Protection Officer at privacy@bargainstore.uk or telephone 0800 123 4567.

2. What Personal Data We Collect

• Identity & Contact: Full name, email address, mobile phone number for delivery dispatch updates.
• Delivery Information: Street address, city, and verified UK postcode (e.g. SW1A 1AA) for accurate Royal Mail or DPD routing.
• Order History: Purchased items, applied promotional vouchers (such as BARGAIN10), and order references.
• Payment Data: Encrypted transaction identifiers via our PCI-DSS compliant payment gateways (Visa, Mastercard, PayPal, Apple Pay, Google Pay). We never store raw card numbers.

3. Lawful Basis for Processing

Under UK GDPR Article 6, we process your information under the following legal bases:

• Contractual Necessity: To process, fulfill, and deliver your orders and notify you of dispatch.
• Legal Obligation: Maintaining accounting and VAT audit records for 6 years as required by HM Revenue & Customs (HMRC).
• Legitimate Interests: Preventing retail fraud, ensuring platform security, and monitoring server latency (<300ms SLA).

4. Data Sub-processors & Couriers

We share only essential fulfillment details with verified third-party partners under strict data processing agreements:

• Logistics: Royal Mail Group plc and DPDgroup UK for parcel tracking and delivery.
• Infrastructure: Turso libSQL Edge Cloud for encrypted database record retention.
• Payment Gateways: Authorized UK payment service providers.

5. Your Legal Rights Under UK GDPR

You have the right to request access to your data, rectification of inaccurate details, erasure ("right to be forgotten"), data portability, and restriction of processing.

You also have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner's Office (ICO) at www.ico.org.uk.