Privacy Policy

1. Data we collect

We may collect identity and contact data (name, address, email, phone), transaction data (orders, payments, delivery details), technical data (IP, browser, device), and communications you send us. If you pay by card, payment data is processed by Stripe; we do not store full card numbers on our servers.

2. Lawful bases

We rely on contract (to fulfil your order), legitimate interests (fraud prevention, website security, business analytics where proportionate), legal obligation (tax and company records), and consent where required (e.g. certain marketing).

3. Stripe

Payments are processed by Stripe Payments Europe Ltd or Stripe’s UK / applicable entity. Stripe receives transaction and card-related data as an independent controller/processor according to their role. See Stripe’s privacy policy for how they handle payment data.

4. Sharing

We may share data with delivery carriers, service providers who host our systems, professional advisers, and authorities when required by law. We do not sell your personal data.

5. International transfers

Some processors (including Stripe or cloud services) may process data outside the UK. Where we transfer personal data, we use appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations where applicable.

6. Retention

We keep data only as long as needed: order and accounting records typically up to seven years for tax; enquiry records for a shorter period; marketing consent until withdrawn. You may ask us to delete data where no exemption applies.

7. Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing. You may complain to the ICO (ico.org.uk). To exercise rights, contact support@biashlogisticsltd.uk.

8. Cookies

Our site may use cookies or similar technologies for essential operation, analytics, or preferences. Where non-essential cookies are used, we will seek consent in line with PECR where required.