Privacy policy

Last updated: 17 September 2026

This Privacy Policy explains how BULLEY collects, uses, stores and shares personal information when you visit bulleyoc.co.uk, place an order, contact us, create an account, subscribe to our marketing or otherwise interact with our online store.

BULLEY is the data controller responsible for the personal information covered by this policy. Our store is hosted by Shopify, which provides the ecommerce platform that allows us to sell our products and services.

Information We Collect

The information we collect depends on how you interact with BULLEY and may include:

  • Your name, email address, telephone number, billing address and delivery address
  • Your account details, preferences and login information
  • Information about products you view, add to your basket, purchase, return or enquire about
  • Order details, payment status, delivery information and transaction history
  • Messages, emails, return requests, reviews and other communications you send to us
  • Your IP address, browser, device type, operating system and approximate location
  • Information about how you use our website, including pages viewed, links selected and time spent on the site
  • Your marketing preferences and interactions with our emails, advertisements and social media content
  • Information used to detect suspicious transactions, fraud or misuse of our services

We do not normally receive or store your complete payment-card details. Payments are processed securely by Shopify Payments and any other payment provider displayed during checkout.

How We Collect Information

We may collect personal information:

  • Directly from you when you place an order, create an account, contact us, request a return or subscribe to marketing
  • Automatically through cookies and similar technologies when you use our website
  • From Shopify and Shopify Payments when they provide ecommerce, checkout and payment services
  • From Klaviyo when you subscribe to, receive or interact with our email or SMS marketing
  • From Google when we use Google Analytics or Google Ads to understand website activity and measure advertising performance
  • From Meta when you interact with BULLEY advertisements or content on Instagram, Facebook or other Meta services
  • From delivery companies, payment providers, fraud-prevention services and other companies involved in fulfilling your order
  • From publicly available sources or where another person lawfully provides information on your behalf

Why We Use Your Information

We use personal information to:

  • Process payments and fulfil orders
  • Deliver products and provide order updates
  • Manage returns, refunds and customer enquiries
  • Create and administer customer accounts
  • Provide customer support
  • Maintain and improve our website, products and services
  • Remember your basket and website preferences
  • Send marketing where you have consented or where otherwise permitted by law
  • Measure the effectiveness of our marketing and advertising
  • Personalise content and advertisements
  • Detect, investigate and prevent fraud, chargeback abuse, security threats and unlawful activity
  • Maintain business, financial and transaction records
  • Establish, exercise or defend legal claims
  • Meet our tax, accounting, consumer-protection and other legal obligations

Our Lawful Bases

UK data-protection law requires us to have a valid reason for using personal information. Depending on the circumstances, we rely on:

  • Contract: when information is needed to process an order, take payment, arrange delivery, manage a return or provide a service you requested.
  • Consent: when you choose to receive certain marketing communications or accept optional advertising and analytics cookies. You may withdraw your consent at any time.
  • Legitimate interests: when using information to operate and improve BULLEY, provide customer support, prevent fraud, protect our website and understand business performance, provided that these interests do not override your rights.
  • Legal obligation: when we must retain or disclose information to comply with tax, accounting, consumer-protection or other legal requirements.
  • Legal claims: when information is required to establish, exercise or defend a legal claim.

Payments

Payments made through our website are processed by Shopify Payments or another payment option presented during checkout.

Payment providers may collect information such as your name, billing address, card details and transaction information. They process this information under their own privacy policies and security requirements.

BULLEY does not normally have access to your complete card number or card security code.

Marketing

If you subscribe to BULLEY marketing, we may use your name, email address, telephone number, shopping activity and interactions with our communications to send relevant news, product releases, offers and promotions.

We use Klaviyo to help manage email and SMS marketing. We may also use Meta and Google to display and measure advertisements.

You can unsubscribe from marketing emails by selecting the unsubscribe link in any marketing email. You can opt out of SMS marketing by following the instructions in the message. You may also contact admin@bulleyoc.co.uk.

Opting out of marketing will not prevent us from sending essential messages about an order, payment, return or account.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

  • Keep the website and checkout functioning
  • Remember your basket and preferences
  • Understand how visitors use the website
  • Measure website and advertising performance
  • Detect fraud and maintain security
  • Deliver more relevant advertising, where permitted

Some cookies are necessary for the website to function. Where required, analytics, advertising and other optional cookies will only be used after you have provided consent through our cookie banner.

You can change your cookie choices through the cookie settings available on our website. You may also control cookies through your browser, although blocking necessary cookies may affect how the website works.

Google, Meta and Klaviyo

We use selected third-party services to operate and promote BULLEY:

  • Google Analytics and Google Ads help us understand website traffic, measure conversions and assess advertising performance.
  • Meta advertising services help us advertise through platforms such as Instagram and Facebook, build audiences and measure engagement with our advertisements.
  • Klaviyo helps us manage email and SMS subscriptions, customer communications and marketing campaigns.
  • Shopify and Shopify Payments provide our online-store, checkout, payment and related ecommerce services.

These providers may collect information through cookies, tracking technologies and information supplied during your interaction with BULLEY. They may act as our processors or, in some circumstances, as separate data controllers. Their handling of personal information is also governed by their own privacy policies.

Who We Share Information With

We may share relevant personal information with:

  • Shopify and Shopify Payments
  • Klaviyo
  • Google
  • Meta, including Instagram and Facebook
  • Payment processors and fraud-prevention providers
  • Delivery companies and fulfilment providers
  • Website hosting, cloud-storage, security and technical-support providers
  • Professional advisers such as accountants, insurers and legal advisers
  • Government authorities, regulators, courts or law-enforcement bodies where required by law
  • A buyer, investor or adviser if BULLEY is involved in a sale, restructuring, merger or transfer of its business or assets

We only share information that is reasonably necessary for the relevant purpose.

BULLEY does not sell personal information for money.

International Data Transfers

Some of our service providers operate outside the United Kingdom or use systems located in other countries. This means personal information may be transferred outside the UK.

Where a destination has not been recognised as providing an adequate level of protection, we require an appropriate safeguard where applicable. This may include the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful transfer mechanism.

You may contact us if you would like further information about the safeguards relevant to your personal information.

Fraud Prevention and Automated Tools

We and our service providers may use automated tools to identify suspicious payments, unusual account activity, possible fraud and security threats.

These tools may consider transaction, device, location and account information. Where required by law, we will not make a decision producing legal or similarly significant effects solely through automated processing without appropriate safeguards.

How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax and reporting requirements.

In general:

  • Order, payment and transaction records may be retained for up to six years after the relevant accounting period or longer where legally required.
  • Customer-service and returns correspondence is retained for as long as necessary to resolve the enquiry and manage possible disputes.
  • Account information is retained while the account remains active and for a reasonable period afterwards.
  • Marketing information is retained until you unsubscribe, withdraw consent or the information is no longer required. We may retain limited suppression information to ensure that we respect your opt-out.
  • Cookie and analytics information is retained according to the settings of the relevant service and our cookie controls.
  • Information connected to suspected fraud, chargebacks or legal claims may be retained until the matter is resolved and any relevant claim period has expired.

We may delete or anonymise information when it is no longer required.

Keeping Information Secure

We take reasonable organisational and technical measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

Our service providers also maintain their own security measures. However, no online service or method of transmission is completely secure. You are responsible for keeping your account password confidential and should contact us if you believe your account has been compromised.

Your UK Data-Protection Rights

Depending on the circumstances, you may have the right to:

  • Request a copy of the personal information we hold about you
  • Ask us to correct inaccurate or incomplete information
  • Ask us to delete your information
  • Ask us to restrict how we use your information
  • Object to processing based on our legitimate interests
  • Object to direct marketing at any time
  • Request the transfer of certain information in a portable format
  • Withdraw consent where our processing is based on consent
  • Request safeguards relating to certain automated decisions

These rights are not absolute and may be subject to legal exceptions.

To exercise a right, email admin@bulleyoc.co.uk. We may ask for information needed to confirm your identity. We normally respond within one month, although the law permits additional time for certain complex requests.

Children’s Information

BULLEY’s website is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal information directly from children under 13.

If you believe a child has provided personal information to us without appropriate permission, contact admin@bulleyoc.co.uk so that we can investigate and take appropriate action.

Third-Party Websites

Our website may contain links to social media platforms and other third-party websites. BULLEY does not control those websites and is not responsible for their privacy or security practices.

Please review the privacy policy of any third-party website before providing personal information.

Complaints

If you have a concern about how BULLEY uses your personal information, contact us first at admin@bulleyoc.co.uk so that we can investigate.

You also have the right to complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://www.ico.org.uk

Changes to This Policy

We may update this Privacy Policy when our business practices, services or legal obligations change. The revised version will be published on bulleyoc.co.uk, and the date at the top of the policy will be updated.

We encourage you to review this policy periodically.

How to Contact Us

For privacy questions, requests or complaints, contact:

BULLEY
Email: admin@bulleyoc.co.uk
Website: https://bulleyoc.co.uk

BULLEY is the data controller responsible for the personal information described in this Privacy Policy.