Privacy Policy

Last updated: 20/10/2025

At Digital Business World LTD (trading as Baïty), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and EU GDPR.

⸻

1. Who We Are

Data Controller:
Business Name: Digital Business World LTD
Registered Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Company Number: 16027581
Contact Email: contact@baïty.com
Website: https://baïty.com

⸻

2. What Personal Data We Collect

We collect and process the following types of personal data:

📋 Information You Provide Directly:

• Name and surname
• Email address
• Delivery address
• Billing address
• Phone number (optional)
• Payment information (processed securely by Stripe)

🔍 Information Collected Automatically:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on site
• Referral source
• Cookies and similar tracking technologies

⸻

3. How We Use Your Data

We use your personal data for the following purposes:

✅ Order Processing & Fulfillment (Legal basis: Contract)

• Process and deliver your orders
• Send order confirmations and shipping updates
• Handle returns and refunds
• Provide customer support

✅ Payment Processing (Legal basis: Contract)

• Process payments securely via Stripe
• Detect and prevent fraud

✅ Marketing Communications (Legal basis: Consent)

• Send promotional emails and newsletters (only if you opt-in)
• You can unsubscribe at any time via the link in our emails

✅ Website Improvement (Legal basis: Legitimate Interest)

• Analyze website traffic and user behavior
• Improve our products and services
• Optimize user experience

✅ Legal Compliance (Legal basis: Legal Obligation)

• Comply with tax, accounting, and legal requirements
• Respond to legal requests from authorities

⸻

4. Who We Share Your Data With

We may share your personal data with trusted third parties:

🔹 Payment Processors:

• Stripe – for secure payment processing
• Privacy Policy: https://stripe.com/privacy

🔹 Shipping Partners:

• Delivery companies (DHL, Royal Mail, etc.) – to fulfill orders
• They receive only the information necessary for delivery

🔹 Analytics Providers:

• Google Analytics – for website statistics (anonymized data)
• Privacy Policy: https://policies.google.com/privacy

🔹 Email Marketing Platform:

• Klaviyo – for email newsletters and marketing automation
• Privacy Policy: https://www.klaviyo.com/legal/privacy
• Only used if you opt-in to receive marketing emails

🔹 Website Hosting:

• Hostinger International Ltd. – for website infrastructure
• Privacy Policy: https://www.hostinger.com/privacy

🔹 Legal Authorities:

• We may disclose data if required by law or to protect our rights

⚠️ We never sell your personal data to third parties.

⸻

5. International Data Transfers

Some of our service providers (e.g., Stripe, Google, Klaviyo) may process data outside the UK/EU.

When we transfer data internationally, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the EU Commission
• Adequacy decisions recognizing equivalent data protection standards

⸻

6. How Long We Keep Your Data

We retain your personal data only as long as necessary:

📦 Order Data: 7 years (for tax and accounting purposes)
💳 Payment Data: Not stored by us (handled by Stripe)
📧 Marketing Data: Until you unsubscribe or request deletion
🍪 Analytics Data: Up to 26 months (Google Analytics default)
💬 Customer Service Records: 3 years after last contact

After these periods, data is securely deleted or anonymized.

⸻

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

✅ Right of Access – Request a copy of your data
✅ Right to Rectification – Correct inaccurate data
✅ Right to Erasure – Request deletion of your data (“right to be forgotten”)
✅ Right to Restrict Processing – Limit how we use your data
✅ Right to Data Portability – Receive your data in a structured format
✅ Right to Object – Object to processing based on legitimate interest
✅ Right to Withdraw Consent – Opt out of marketing at any time

To exercise any of these rights, please contact us at:
📧 contact@baïty.com

We will respond within 30 days of your request.

⸻

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

🔒 SSL/TLS encryption for all data transmission
🔒 Secure payment processing via PCI-DSS compliant Stripe
🔒 Regular security audits and updates
🔒 Access controls – only authorized personnel can access data

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

⸻

9. Cookies & Tracking Technologies

We use cookies to improve your experience. For detailed information, please see our Cookie Policy.

You can manage cookie preferences via:

• Our cookie banner (on first visit)
• Your browser settings

⸻

10. Children’s Privacy

Our website is not intended for children under 16 years of age.

We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately at contact@baïty.com.

⸻

11. Changes to This Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page with an updated “Last updated” date.

For significant changes, we will notify you via email or a prominent notice on our website.

⸻

12. Contact Us & Complaints

If you have questions about this Privacy Policy or wish to exercise your rights:

📧 Email: contact@baïty.com
📍 Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom

You also have the right to lodge a complaint with a supervisory authority:

🇬🇧 UK: Information Commissioner’s Office (ICO) – https://ico.org.uk
🇪🇺 EU: Your local Data Protection Authority

⸻

By using our website, you acknowledge that you have read and understood this Privacy Policy.