Privacy policy

Last updated: August 2026

1. Who We Are

Baywell Studio is a sole trader business operated by Sarah-Jane Santos, of Charlbury, Oxfordshire, United Kingdom. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller of your personal information.

You can contact us about anything in this Privacy Policy at hello@baywellstudio.co.uk.

We are committed to protecting your personal information and handling it responsibly. This policy explains what we collect, how we use it, and the rights you have.

2. What Information We Collect

When you place an Order or contact us, we may collect:

  • Your name
  • Billing and delivery addresses
  • Email address
  • Telephone number
  • Order details
  • Window measurements and custom specifications
  • Payment information (processed by our payment providers; we do not store your full payment card details)

When you browse our website, we may also collect technical information such as:

  • IP address
  • Browser type
  • Device information
  • Pages visited and time spent on our website
  • How you found our website (referring website, search terms where available)
  • Interactions with our marketing (email opens, clicks, ad impressions)

If you subscribe to our newsletter, we collect your email address and record your consent to receive marketing communications.

3. How We Use Your Information

We use your information to:

  • Process and fulfil your Order
  • Communicate with you about your purchase
  • Respond to enquiries
  • Arrange delivery
  • Send marketing communications where you have opted in
  • Measure the performance of our marketing campaigns
  • Show you relevant advertising on other platforms (such as Instagram, Facebook, Google, and Pinterest) where you have consented to this
  • Improve our website and customer experience
  • Meet our legal, accounting, and tax obligations
  • Detect fraud and maintain website security

If you have opted in to marketing, you can unsubscribe at any time by clicking the link at the bottom of any marketing email.

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases to process your personal information:

  • Contract: to process your Order and provide the services you have asked us for.
  • Legal obligation: to comply with tax, accounting, and other legal requirements.
  • Legitimate interests: to operate, secure, and improve our business, and to measure aggregate performance of our marketing.
  • Consent: for marketing emails, for advertising cookies, and for non-essential analytics.

You can withdraw your consent at any time by changing your cookie preferences or unsubscribing from marketing emails.

5. Who We Share Your Information With

We share your personal information only where necessary. Our regular processors and partners include:

Platform and operations:
- Shopify Inc. (and its group companies) - our e-commerce platform, hosting, payments, checkout, order management, and Shopify Analytics.
- Royal Mail - for delivery of Orders.

Marketing and analytics:
- Meta Platforms Ireland Limited - Meta Pixel and advertising on Facebook and Instagram.
- Google Ireland Limited - Google Analytics, Google Ads, and conversion tracking.
- Pinterest Europe Limited - Pinterest Tag and advertising on Pinterest.

Security:
- Intuition Machines, Inc. (hCaptcha) - bot detection on our forms.

Professional advisers:
- Our accountant, for tax and financial reporting purposes.

If we start using additional providers, we will update this policy to reflect that.

We never sell your personal information to third parties.

6. International Transfers

Some of our processors are based outside the United Kingdom and may transfer or store data internationally, including in the United States, Canada, and Ireland. This applies in particular to:

  • Shopify (Canada, United States)
  • Meta (Ireland, United States)
  • Google (Ireland, United States)
  • Pinterest (Ireland, United States)
  • Intuition Machines / hCaptcha (United States)

Where personal information is transferred outside the UK, we rely on recognised safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses with UK addendum, or transfers to jurisdictions the UK has recognised as providing an adequate level of protection.

You can request more information about the specific safeguards in place by contacting us at hello@baywellstudio.co.uk.

7. Advertising and Analytics

We use advertising and analytics services to understand how our website is used and to reach potential customers on other platforms. Specifically:

  • Meta Pixel helps us measure how our ads on Facebook and Instagram perform and show relevant ads to people who have visited our website.
  • Google Analytics helps us understand how visitors use our website in aggregate.
  • Google Ads helps us measure how our ads on Google Search and the wider Google network perform.
  • Pinterest Tag helps us measure how our content and ads on Pinterest perform.

These services set cookies and receive some personal information (such as your IP address and pages you have viewed on our site) when you consent to their use. They may use this to build a picture of your interests over time and across websites.

You control this through our cookie banner. If you decline non-essential cookies, these services do not run. Full details of the specific cookies these services set are in our Cookie Policy.

8. Data Retention

We only keep your personal information for as long as necessary to fulfil the purposes we collected it for.

  • Order records: retained for up to six years to meet UK tax and accounting obligations.
  • Marketing records: retained until you unsubscribe or ask us to delete your information.
  • Browsing and analytics data: retained in line with the retention periods set out in our Cookie Policy.
  • Advertising data held by third parties (Meta, Google, Pinterest): retained according to those providers' own retention policies. You can also request deletion directly through each platform.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal information
  • Request correction of inaccurate information
  • Request deletion of your information where applicable
  • Object to certain processing, including marketing
  • Restrict processing in some circumstances
  • Withdraw consent where processing is based on consent
  • Request a copy of your personal information in a portable format

To exercise any of these rights, please contact us at hello@baywellstudio.co.uk. We will respond within one calendar month.

If you are unhappy with how we have handled your personal information, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Cookies

Our website uses cookies. Please see our Cookie Policy for a full list of the cookies we use, why we use them, and how you can manage your preferences.

Marketing and analytics cookies only run when you have given consent through our cookie banner.

11. Data Security

We take appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. Payments are processed through PCI-DSS compliant providers.

No system is completely secure, and we cannot guarantee the security of information transmitted over the internet.

12. Children

Our website is not intended for children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website with the "Last updated" date. Where changes are material, we will notify you by email or a notice on the website.

14. Contact

Baywell Studio
Charlbury, Oxfordshire
United Kingdom

hello@baywellstudio.co.uk

Sarah-Jane Santos, sole trader, is the data controller.