Privacy Policy

Last updated: September 2026

Waist Beads Online (“we”, “us”, “our”) is committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights in relation to it.

1. Who we are

We operate an online store at waistbeadsonline.com. For the purposes of data protection law, we are the data controller of your personal information.

2. What data we collect

We may collect the following types of personal data when you use our website or place an order:

• Name and contact details (email address, phone number)
• Delivery and billing address
• Payment information (processed securely via our payment provider — we do not store card details)
• Order history and purchase information
• Browsing behaviour on our website (via cookies)

3. How we use your data

We use your data to:

• Process and fulfil your orders
• Send order confirmations and delivery updates
• Respond to enquiries and customer service requests
• Improve our website and customer experience
• Comply with legal obligations

We will only send you marketing communications if you have opted in to receive them. You can unsubscribe at any time.

4. Legal basis for processing

We process your data on the following legal bases:

• Contract: to fulfil your orders
• Legitimate interests: to improve our services and prevent fraud
• Consent: for marketing communications and non-essential cookies
• Legal obligation: to comply with applicable laws

5. Sharing your data

We do not sell your personal data. We may share it with trusted third parties who help us operate our business, including:

• Shipping and fulfilment providers
• Payment processors
• Our website and e-commerce platform (Shopify)
• Email and marketing tools (where applicable)

These parties are only permitted to use your data to provide services to us and are bound by their own privacy obligations.

6. Data retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law. Order records are typically retained for up to 7 years for accounting and legal purposes.

7. Your rights

Under UK and EU data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us.

8. Cookies

We use cookies to improve your experience on our website. For full details, please see our Cookie Policy.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page will reflect the most recent update. Continued use of our website after any changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions about this privacy policy or how we handle your data, please get in touch.