Privacy policy

Who we are

Blueperry Ltd is the data controller for personal data collected through this storefront. Contact: privacy@blueperry.example.

What we collect

• Account & sign-in: your email address, used to send magic sign-in links.
• Orders: billing and delivery address, contact details, order history.
• Payments: handled by Worldpay. We receive a payment reference and outcome only; we do not store full card numbers.
• Cart & session: a randomly generated token in a cookie so your basket persists between visits.
• Technical logs: IP address, user agent and request paths, retained briefly for security and abuse prevention.

Why we use it

We process personal data to fulfil your orders, provide customer support, prevent fraud, and meet our legal obligations (such as keeping tax records). Where we rely on legitimate interests — for example, to investigate suspicious activity — we balance those against your rights.

Sharing

We share data only with providers that help us run the storefront: Worldpay for payments, our hosting and email providers, and delivery carriers to ship your orders. We do not sell personal data.

Retention

Order records are kept for six years to comply with UK tax law. Sign-in tokens expire within minutes. Marketing data, where collected with consent, is kept until you unsubscribe.

Your rights

Under UK GDPR you can request access to, correction or deletion of your personal data, and object to certain processing. To exercise these rights, email privacy@blueperry.example. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use a small number of strictly necessary cookies to keep you signed in and to hold your basket. We do not use third-party tracking or advertising cookies.