Privacy Policy

On this page

1. Who we are
2. What we collect
3. How we use your information
4. Cookies, sessions & local storage
5. Analytics & advertising
6. Who we share data with
7. Payments
8. How long we keep data
9. Your choices & rights
10. How we protect data
11. Children's data
12. Changes to this policy
13. Contact us

This policy explains what personal information BuyDropUK collects when you use our website, why we collect it, who we share it with, and the choices you have. We have tried to write it in plain language rather than legalese.

1. Who we are

BuyDropUK operates the online store at buydropuk.com, selling and delivering products to customers in the United Kingdom. In this policy, “we”, “us” and “our” mean BuyDropUK. We decide how and why your personal data is processed on this website.

• 123 Main St, Sample City
• info@storex.test
• +1234567890

2. What we collect

You can browse and buy from us without creating an account. We collect the following.

Information you give us

• When you place an order (including as a guest): your name, email address, phone number and delivery address, including the town or city and postcode needed to ship to you.
• If you send the order to someone else: the alternate recipient's name, phone number, address and city, and any gift note you write.
• If you create an account: your username, email address, phone number and a password. Passwords are stored only as a one-way hash — we never see them.
• When you contact us: your name, email, phone, subject and message.
• When you subscribe to our newsletter: your email address.
• When you post a product review or question: the content you submit and the name shown alongside it.

Information collected automatically

• Your IP address and your browser's user-agent string.
• Pages and products you view, what you add to your cart, and when you begin checkout.
• The page that referred you to us, and general device information.
• Your order history, order totals and order status.

We do not ask for, collect or store your card number, expiry date or CVV — those go straight to our payment provider. See Payments.

3. How we use your information

• To take, confirm, pack, deliver and, where necessary, refund your orders.
• To pass your delivery address to the supplier who ships your item to you.
• To answer your messages, reviews and questions.
• To create and secure your account, and to verify your email with a one-time code.
• To understand how the website is used so we can improve it.
• To detect and prevent fraud and abuse, and to meet our legal and accounting duties.

4. Cookies, sessions & local storage

We use a small number of cookies. The essential ones are set by our own website:

We also store two items in your browser's local storage: your shopping cart, so it survives a page reload, and a short summary of your most recent order so we can show you the thank-you page. These stay on your device and you can clear them from your browser at any time.

Most browsers let you block or delete cookies. Blocking the two essential cookies above will break sign-in and checkout.

5. Analytics & advertising

We do not run third-party analytics or advertising trackers on this website. There is no Google Analytics, no Google Tag Manager, no Meta Pixel and no server-side tagging endpoint. We do not use advertising cookies, and we do not build advertising profiles about you or share your data with advertising networks.

The only cookies and browser storage we set are the strictly necessary ones described in section 4 — the ones that keep you signed in and keep your basket.

If we introduce analytics or advertising measurement in future, we will update this policy and this section before those tags go live.

6. Who we share data with

We do not sell your personal data. We share it only as set out below.

• Our suppliers and their shipping partners — the items you order are shipped to you directly by the supplier who stocks them. To make that happen we pass on the recipient's name, delivery address and postcode, a contact phone number, and the items and quantities ordered. Our current supplier is AliExpress (Alibaba.com Singapore E-Commerce Private Limited) and the carriers it uses to complete the delivery.
• Stripe — our payment provider, who processes your card payment. See section 7.
• Our hosting and infrastructure providers — who store the website and its database on our behalf.
• Authorities or advisers — where we are required to disclose information by law, or to establish or defend a legal claim.

Because your order is shipped from overseas, your delivery details are transferred outside the United Kingdom to the supplier and its carriers so that your parcel can reach you.

7. Payments

We accept debit and credit cards. Card payments on this website are processed by Stripe, our payment provider.

Your card details are entered into a secure form hosted by Stripe and go directly to Stripe. We never receive, see or store your card number, expiry date or CVV. Where your bank requires it, you may be asked to confirm the payment through your bank's own authentication step.

The only payment information we keep is the fact that an order was paid, when it was paid, the amount, and a reference that lets us match the payment to your order with Stripe.

Stripe acts as an independent controller for some purposes, including fraud prevention. See Stripe's privacy policy.

8. How long we keep data

• Orders, invoices and delivery records are kept for as long as we need them to run the business and to satisfy our tax, accounting and legal obligations.
• Account details are kept while your account is open, and are deleted or anonymised after you ask us to close it.
• Contact messages, reviews and questions are kept while they are useful for support and for the integrity of our product pages.
• Analytics and advertising data are retained by Google and Meta according to their own retention settings and policies, not ours.

9. Your choices & rights

You can ask us to:

• tell you what personal data we hold about you;
• correct anything that is wrong or out of date;
• delete your account and the personal data attached to it.

To make any of these requests, email us at info@storex.test from the address on your account or order, so that we can verify who you are. We will respond within a reasonable time.

Please note we may be unable to delete records of completed orders where we are required to keep them for tax or accounting purposes. You can also opt out of analytics and advertising by blocking those cookies in your browser, or through your Meta and Google ad settings.

10. How we protect data

The whole site is served over HTTPS. Session cookies are marked Secure and HttpOnly, passwords are stored as one-way hashes, our forms are protected against cross-site request forgery, and email addresses are verified with a one-time code. No website can promise perfect security, but we take these measures seriously and review them.

11. Children's data

This website is intended for adults and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy as our website, our tools or the law change. The date at the top of this page shows when it was last revised. If we make a significant change we will make that clear on this page. Please check back from time to time.

13. Contact us

If you have any question about this policy or about your data, please get in touch.