We hold what an order needs. Nothing else.

What we don't do — first, because it's rarer

No analytics scripts. No advertising pixels. No tracking cookies. No consent banner, because there is nothing to consent to. The only thing stored in your browser is your shopping basket, on your own device, so it survives a page refresh.

What we hold, and why

When you order: your name, email, shipping address, what you bought, and payment references (never your card details — those go directly to Stripe and we cannot see them). We use it to make and ship your order, email you the receipt / shipping / refund updates, and answer you if something goes wrong. We keep order records for as long as charity accounting rules require.

If you use the returns form, we hold the message you send us.

Who processes it with us

Stripe (payments), Printful (printing and shipping — they receive your name and shipping address, not your email), and Cloudflare (hosting and email delivery). Each processes your data only to do their part of your order.

Your rights

Ask what we hold about you, have it corrected, or have it deleted (where accounting law allows): [email protected]. A real person reads it. You can also complain to the ICO (ico.org.uk) if you think we've handled your data badly.

Who we are

The Bimiri Foundation, a charity registered in Scotland (SC048834, regulated by OSCR).