← Back to Bind
← Back to Bind
Bind ("Bind", "we", "us", or "our") is a small, home-based business handcrafting shea body butter, founded in 2016. We are genuinely a small operation — every jar is made by hand, in small batches, and that same personal care extends to how we treat your personal information.
This Privacy Policy explains what personal information we collect when you visit bindpureshea.co.uk, place an order, sign up to our waitlist, or leave us feedback — and what we do with it, who we share it with, how long we keep it, and the rights you have over it.
We've written this policy to be genuinely readable rather than dense legal boilerplate, while still covering everything required under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If anything here is unclear, please just email us — contact details are at the bottom of this page.
For the purposes of data protection law, Bind is the "data controller" of the personal information described in this policy. That means we decide what personal data is collected and why, and we're responsible for looking after it properly.
Business name: Bind
Website: bindpureshea.co.uk
Contact email: support@bindpureshea.co.uk
Based in: United Kingdom
As Bind is a home-based business run by a single person, all personal data is currently handled directly by the business owner — we don't have a dedicated Data Protection Officer, but we take these responsibilities seriously regardless of our size.
We only collect information you choose to give us. Specifically:
| Where | What we collect | Is it required? |
|---|---|---|
| Feedback form | Your name (optional), how you found us, how the product felt on your skin, whether you'd recommend us, which scent you used, a star rating, and any written comments | Name and comments are optional; the rest is selected from preset options |
| Waitlist form | Your email address, and which product you're waiting for | Email is required to join the waitlist |
| Checkout / orders | Your name, delivery address, email address, the items ordered, and payment confirmation (see note below on payment data) | Required to fulfil and deliver an order |
| Direct contact | Anything you include when emailing support@bindpureshea.co.uk | N/A — you choose what to share |
A note on payment information: we never see or store your full card details. Card payments are processed directly by Stripe, a regulated payment processor, who handle all sensitive payment data on our behalf under their own strict security and compliance standards. Bind only receives confirmation that a payment succeeded, along with the order details needed to fulfil it.
Our website uses your browser's built-in local storage for a small number of strictly functional purposes — for example, remembering items in your shopping bag as you browse, or temporarily caching feedback data for our own internal admin dashboard. This is not the same as advertising or cross-site tracking cookies, is never shared with any third party, and never leaves your own device unless you submit a form.
With your consent, we use Google Analytics (GA4) to understand how visitors use our website — page views, general traffic patterns, and similar aggregate information. This only loads if you accept Analytics cookies in our cookie banner; nothing is collected beforehand. See "Cookies and Local Storage" below for more detail.
To show you an estimated price in your local currency, our website detects your approximate country from your IP address (via our hosting provider, Cloudflare) and uses this to look up a general currency exchange rate. This happens automatically for every visitor, regardless of cookie preferences, since it's necessary for this specific display feature to work — similar to how any website inherently knows roughly where a request is coming from in order to respond to it at all. No personal information about you is sent to the exchange-rate providers we use for this lookup — only a generic currency pair (for example, "GBP to USD"), never anything that identifies you.
We do not use advertising networks or tracking pixels of any kind — Google Analytics, described above, is the only third-party analytics tool in use, and only ever loads with your consent.
Once an order is placed, Stripe shares with us the confirmation that payment was successful, along with basic transaction details (such as the amount paid and order reference) — but never your full card number or banking credentials.
We only use personal information for clear, specific purposes, and only where we have a proper legal basis to do so under UK GDPR. Here's a full breakdown:
| Purpose | What data is involved | Our legal basis |
|---|---|---|
| Responding to feedback and improving our products | Feedback form responses | Consent (you chose to submit it) and our legitimate interest in understanding customer experience |
| Notifying you when a sold-out product is back in stock | Email address, product interest | Consent |
| Processing, fulfilling, and delivering your order | Name, address, email, order details, payment confirmation | Performance of a contract with you |
| Responding to emails you send us | Whatever you include in your message | Legitimate interest in providing customer service |
| Keeping financial and tax records | Order and payment records | Legal obligation (UK tax law) |
| Preventing fraud and keeping our systems secure | Order and account activity | Legitimate interest |
We do not use your personal information for automated profiling, and we do not sell, rent, or trade your personal data to anyone, for any reason.
Some of the service providers listed above are based outside the UK, including in the United States. Where personal data is transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place — typically through providers who participate in recognised data protection frameworks, or through contracts containing Standard Contractual Clauses approved for this purpose, which legally require the same standard of protection your data would receive in the UK.
We don't keep personal data for longer than we need it. As a general guide:
If you ask us to delete your data at any time (see "Your Rights" below), we will do so unless we're legally required to retain it.
We take reasonable and appropriate steps to keep your personal information secure, including:
While we do everything reasonable to protect your data, no method of transmission or storage over the internet can ever be guaranteed 100% secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.
Bind's products and website are intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
UK data protection law gives you a number of important rights over your own personal information. These are:
To know clearly how your data is being used — which is exactly what this policy is for.
To ask us for a copy of the personal data we hold about you.
To ask us to correct any personal data that's inaccurate or incomplete.
To ask us to delete your personal data, sometimes known as the "right to be forgotten."
To ask us to pause using your data in certain circumstances, without deleting it.
To receive your data in a portable format, or have it transferred elsewhere.
To object to us processing your data where it's based on legitimate interest.
To withdraw consent at any time, where consent is our legal basis for using your data.
Some of these rights are not absolute and may not apply in every circumstance — for example, we may need to retain certain order records for legal/tax reasons even if you ask us to delete your data, but we will always explain clearly if this is the case.
To exercise any of the rights listed above, simply email us at support@bindpureshea.co.uk with a clear description of what you'd like us to do. To protect your information, we may ask you to verify your identity before actioning certain requests (for example, confirming the email address associated with a waitlist entry).
We aim to respond to all such requests within one calendar month, as required by law. If a request is particularly complex, we may extend this by a further two months, but we'll always let you know if that's necessary and explain why.
There is no charge for exercising these rights in most circumstances.
Bind does not use your personal data to make any automated decisions that have a legal or otherwise significant effect on you. Any order, refund, or customer service decision is made personally, by a human, not by an algorithm.
At present, Bind does not send marketing newsletters or promotional emails. If we introduce this in the future, we will only do so with your clear, opt-in consent, and you will always be able to unsubscribe at any time. Waitlist emails are a service notification (letting you know a product is back in stock) rather than marketing, and relate directly to the request you made.
We may update this Privacy Policy from time to time — for example, as Bind grows or as we introduce new features to the website. Any changes will be posted on this page with an updated "Last updated" date at the top. We encourage you to review this page periodically.
We hope you'll always feel comfortable raising any concerns about how we handle your data directly with us first, at support@bindpureshea.co.uk — as a small, personal business, we genuinely want the chance to put things right.
That said, you also have the right to complain directly to the UK's independent regulator for data protection:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
If you have any questions about this Privacy Policy or how your personal data is handled, please get in touch:
Email: support@bindpureshea.co.uk
Website: bindpureshea.co.uk