Privacy Policy

This Privacy Policy explains how Busy Bees Creative Studio collects, uses, stores and protects your personal information when you use our website or purchase our products.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Busy Bees Creative Studio is a trading name operated by Busy Bees Creative Studio Limited. 

Address: Wainstalls Mill Suite 1, Wainstalls Road, Halifax, HX2 7TJ

Email: bu********************@***il.com

For the purposes of data protection law, we are the data controller responsible for your personal information.

2. What Information We Collect

We collect and process the following types of personal information:

Information You Provide to Us

• Contact details: name, email address, phone number, delivery address
• Order information: products ordered, customisation details (names, logos, designs, text), sizes, colours, quantities
• Payment information: billing address (payment card details are processed securely by Stripe and are not stored on our servers)
• Communication records: emails, messages and correspondence with us
• Account information: if you create an account, username and password

Information We Collect Automatically

• Website usage data: IP address, browser type, device information, pages visited, time spent on pages
• Cookies: see our separate Cookie Policy for details

3. How We Use Your Information

We use your personal information for the following purposes:

To Fulfill Your Orders

• Process and complete your order
• Produce customised items according to your specifications
• Arrange delivery through our courier partners
• Send order confirmations and updates
• Handle returns, refunds and customer service enquiries

Legal basis: Performance of a contract

To Communicate With You

• Respond to your enquiries and requests
• Provide customer support
• Send important notices about your orders or our services

Legal basis: Performance of a contract and legitimate interests

Marketing (with your consent)

• Send promotional emails about new products, special offers and updates
• Send newsletters (if you’ve subscribed)

Legal basis: Consent (you can withdraw consent at any time)

To Improve Our Services

• Analyse website usage to improve user experience
• Conduct internal research and development
• Monitor and prevent fraud

Legal basis: Legitimate interests

Legal Obligations

• Comply with legal and regulatory requirements
• Maintain business records for accounting and tax purposes

Legal basis: Legal obligation

4. Who We Share Your Information With

We may share your personal information with the following third parties:

Service Providers

• Payment processors: Stripe (for secure payment processing)
• Delivery services: Royal Mail (for order delivery)
• Analytics: Google Analytics (only with your consent, for website usage analysis)

Business Partners

• Schools and organisations: if you order through a school partnership, we may share order details with the school

Legal Requirements

We may disclose your information if required by law, to protect our rights, or in response to legal requests from authorities.

We do not sell, rent or trade your personal information to third parties for marketing purposes.

5. International Transfers

Some of our service providers may process data outside the UK and European Economic Area (EEA):

• Google Analytics: may process data in the United States
• Stripe: may process payment data internationally

Where data is transferred internationally, these providers have appropriate safeguards in place, including Standard Contractual Clauses approved by the UK Information Commissioner’s Office.

6. How Long We Keep Your Information

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Order information: 7 years (for accounting and tax purposes)
• Marketing communications: until you unsubscribe or we no longer have legitimate need
• Website usage data: typically 26 months
• Customer enquiries: 3 years after last contact

After these periods, we will securely delete or anonymise your information.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal information:

Right to Access

You can request a copy of the personal information we hold about you.

Right to Rectification

You can ask us to correct inaccurate or incomplete information.

Right to Erasure

You can request deletion of your personal information in certain circumstances (e.g., when it’s no longer necessary for the purposes collected, or you withdraw consent).

Right to Restrict Processing

You can ask us to limit how we use your information in certain situations.

Right to Data Portability

You can request your data in a structured, commonly used format to transfer to another service.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where we rely on consent, you can withdraw it at any time.

How to Exercise Your Rights

To exercise any of these rights, please contact us at bu********************@***il.com

We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

8. Marketing Communications

We will only send you marketing emails if you have:

• opted in to receive them, or
• previously purchased from us and we’re marketing similar products (you can opt out at any time).

You can unsubscribe from marketing emails at any time by:

• clicking the “unsubscribe” link in any marketing email, or
• contacting us at bu********************@***il.com

Unsubscribing from marketing will not affect essential service emails (order confirmations, delivery updates, etc.).

9. Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it, including:

• Secure payment processing through Stripe
• SSL encryption for data transmitted through our website
• Password-protected systems and devices
• Regular security reviews and updates
• Limited access to personal information on a need-to-know basis

While we strive to protect your information, no method of transmission over the internet is completely secure. We cannot guarantee absolute security.

10. Children’s Privacy

Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13.

For school orders, we collect children’s names for personalisation purposes only, with the understanding that orders are placed by parents, guardians or schools acting on their behalf.

11. Cookies

Our website uses cookies to improve your browsing experience. For detailed information about the cookies we use and how to manage them, please see our separate Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any changes on this page with an updated “Last updated” date.

Significant changes will be communicated by email or through a prominent notice on our website.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, please contact us:

Busy Bees Creative Studio
Wainstalls Mill Suite 1
Wainstalls Road
Halifax
HX2 7TJ

Email: bu********************@***il.com

14. Complaints

If you’re not satisfied with how we’ve handled your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection authority:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: https://ico.org.uk
Helpline: 0303 123 1113

Last updated: November 2025