Legal
Privacy Policy
Last updated: 1 May 2026 · Bubble Booth Ltd is the data controller
1. Who we are
Bubble Booth Ltd (Company No. 16470410), 1507 4 Hulme Street, Salford, M5 4ZF, is the data controller responsible for personal data collected through UKyard. Contact our data protection queries at privacy@ukyard.com.
2. What we collect
We collect information you provide directly (name, email, delivery address, payment details) and data we generate through your use of the platform (browsing history, purchase history, device identifiers, IP address). We also receive data from payment processors (PayPal, Stripe) to complete transactions.
3. How we use your data
We use your personal data to: process and fulfil orders; send order confirmations and delivery notifications; provide customer support; personalise your shopping experience; send marketing communications (with your consent); comply with legal obligations; detect and prevent fraud.
4. Legal basis for processing (GDPR)
We process your data under the following bases: contractual necessity (fulfilling orders); legitimate interests (fraud prevention, security, platform improvement); consent (marketing emails — you can withdraw at any time); legal obligation (tax records, accounting).
5. Data sharing
We share your data with sellers only to the extent necessary to fulfil your order. We use PayPal and Stripe for payment processing — they operate under their own privacy policies. We do not sell your personal data to third parties.
6. Cookies
We use cookies to operate the platform, remember your cart, and (with consent) understand how you use UKyard to improve it. See our Cookie Policy for full details.
7. Data retention
We retain your account data for as long as your account is active, plus 7 years for legal and accounting purposes. You can request deletion of your account at any time.
8. Your rights
Under UK GDPR you have the right to: access your personal data; correct inaccurate data; request deletion ("right to be forgotten"); restrict processing; data portability; object to processing. Submit requests to privacy@ukyard.com. You have the right to complain to the ICO (ico.org.uk).
9. International transfers
Our primary infrastructure is UK-based. Where data is transferred outside the UK (e.g. to Stripe's US servers), we ensure appropriate safeguards are in place under UK GDPR transfer rules.
10. Changes
We may update this policy. The date at the top reflects the latest version. Significant changes will be communicated by email.