Privacy Policy

1. Who we are

Bailey’s Barn is operated by K G Bailey Limited, company number 03704610. We are the controller of the personal information we use to run our shop, fulfil orders and communicate with our customers.

Shop and correspondence address: Bailey’s Barn, Unit 1, Wistow Rural Centre, Wistow Road, Leics, LE8 0QF.

Registered office: Business Services (Leicester) Ltd, The Manor, Main Street, Tur Langton, LE8 0PJ.

For privacy questions or requests, email barn@baileyswistow.co.uk, call 0116 2592009, or write to our shop address marked “Privacy enquiry”.

2. Information we collect

The information we collect depends on how you interact with us. It may include:

• Contact details: your name, email address, telephone number, and billing and delivery addresses.
• Order and payment information: items purchased, product options, order history, transaction references, payment status, and returns or refund details.
• Account information: information associated with a customer account, where you use one, including saved contact details and order history.
• Messages and enquiries: information you send when asking about a product, requesting help, making a complaint or providing feedback.
• Preferences: newsletter subscriptions, marketing choices and cookie preferences.
• Device and browsing information: IP address, browser and device details, pages viewed, interactions with the shop, and shopping-basket activity, subject to applicable privacy choices.

Payment details are processed by the payment providers used at checkout. We receive information needed to confirm payment, process refunds and manage orders. Please do not send full card details or sensitive financial information by email.

3. Where information comes from

We collect information directly from you when you place an order, contact us, subscribe to updates or use a customer account. Some device and usage information is collected automatically through Shopify and other technologies used on the website.

We may also receive information from Shopify, payment providers and delivery partners, such as payment confirmation, fraud-risk indicators and delivery updates. Where you choose a third-party finance service, we may receive information about the status of your application or payment arrangement.

4. How and why we use it

We use personal information only where we have an appropriate lawful basis. The main purposes are set out below.

When relying on legitimate interests, we consider the effect on you and balance those interests against your rights and freedoms. We do not use this basis where your interests override ours.

5. Shopify and our online shop

Our online shop is hosted on Shopify. Shopify processes information about visits and purchases to provide the ecommerce platform, including checkout, hosting, order management, security and related services.

For much of this activity, Shopify processes information on our behalf. For certain services it provides directly to you, and other purposes explained in its own privacy notice, Shopify may act as a separate controller.

Read Shopify’s Consumer Privacy Policy for details of its processing, international operations and your choices. You can also visit Shopify’s Privacy Portal to manage applicable Shopify privacy rights.

Where Shopify Network Intelligence is enabled for our store, Shopify may use information about your interactions with our shop together with information from your interactions with other merchants and Shopify to provide enhanced services, including personalisation, fraud protection and advertising-related features. Applicable consent and privacy choices continue to apply. Shopify explains this processing and the rights it manages in its Consumer Privacy Policy.

6. Payments and optional finance

The payment methods available for a particular order are shown at checkout. Payment providers process the information needed to authorise payments, prevent fraud, handle disputes and issue refunds. Some act as independent controllers for these purposes and publish their own privacy notices.

If you select a buy-now-pay-later or finance option, the provider may collect additional information, check identity and affordability, consult credit reference or fraud prevention agencies, and make automated credit decisions. This depends on the provider and product you choose.

Read the provider’s privacy notice before applying. The availability of a finance option does not mean that Bailey’s Barn automatically receives your full credit report, income details or the other information you provide directly to that provider.

If an automated decision by a payment or finance provider affects you, consult its notice or contact it about the explanation, review and other rights available. You can contact us about our own use of information relating to your order.

7. Marketing and your choices

We may send promotional emails where you have subscribed, or where the law permits us to contact customers about our own similar products. Where we rely on the customer soft opt-in, we must have obtained your details during a sale or negotiations for a sale and offered a clear opportunity to opt out both when collecting your details and in each marketing message.

Unsubscribing from marketing does not stop essential order, delivery, refund or customer-service messages. We may keep a minimal suppression record so that we continue to respect your choice.

We do not sell your personal information to third-party marketers.

8. Cookies and similar technologies

Shopify and services connected to our shop may use cookies, pixels and similar technologies. These can support:

• Essential functions: keeping items in your basket, processing checkout, security and remembering privacy choices.
• Optional preferences: remembering settings that are not essential to provide a service you requested.
• Analytics: understanding website use and improving the shopping experience.
• Marketing: measuring advertising performance and supporting relevant advertising, where these features are used.

We request consent before using technologies that require it. You may refuse optional cookies without losing access to ordinary shopping functions. You can change your choices through the website’s cookie preferences control. Withdrawing consent does not affect processing that was lawful before withdrawal.

The cookie preferences panel should identify the technologies actually used, their purposes, providers and durations. Browser settings can also restrict cookies, although blocking essential cookies may affect checkout or other functions.

If third-party video or other embedded content is used, its provider may also collect information when the content loads or is played. Where consent is required, that content should remain blocked until you choose to allow it.

9. Who receives your information

We share relevant information with service providers and other recipients where necessary for the purposes described here. These may include:

• Shopify and ecommerce service providers supporting our storefront, checkout and order administration.
• Payment and optional finance providers processing payments and managing related checks.
• Delivery, fulfilment and service partners arranging dispatch, delivery, collection or after-sales work.
• Email, customer-support and IT providers helping us communicate, manage subscriptions and operate our systems.
• Analytics or advertising providers where used, subject to applicable consent requirements.
• Accountants, professional advisers, insurers and auditors supporting our business and legal obligations.
• Public authorities, regulators and courts where disclosure is legally required or necessary to protect legal rights.

We limit information to what is appropriate for the purpose and put suitable contractual protections in place where providers process it on our behalf. Independent controllers use information under their own responsibilities and privacy notices.

10. International processing

Shopify and some other providers operate internationally, so personal information may be stored or accessed outside the UK, including in countries such as Canada and the United States. The locations depend on the service involved.

Where we make a restricted international transfer, we use a lawful mechanism, such as applicable UK adequacy regulations or approved contractual safeguards, with additional protection where required. Contact us if you would like details of the safeguards relevant to your information or how to obtain a copy. Shopify’s privacy information explains its own international processing arrangements.

11. How long we keep information

We retain personal information only for as long as it is needed. We determine retention periods by considering:

• Orders and financial records: the period needed to fulfil the order, administer returns and warranties, and meet applicable tax and accounting requirements.
• Enquiries and complaints: how long the matter remains active, any follow-up needed and relevant legal claim periods.
• Customer accounts: whether the account remains in use and whether associated information must be retained separately for orders or legal obligations.
• Marketing records: your subscription status, the continuing relevance of the information and the need to retain evidence of consent or an opt-out.
• Technical and tracking information: the function of the data, security needs and the durations specified for the relevant technology.

When information is no longer required, we delete it securely or anonymise it. Backup copies may remain until overwritten through normal retention cycles. Contact us for retention information relating to a specific category of data.

12. Your data protection rights

Depending on the circumstances and lawful basis involved, you may have the right to:

• Request access to your personal information and a copy of it.
• Correct inaccurate or incomplete information.
• Request deletion or restriction of processing.
• Receive certain information in a portable format.
• Object to processing based on legitimate interests.
• Object to direct marketing at any time.
• Withdraw consent, without affecting earlier lawful processing.
• Seek information, human intervention or challenge significant automated decisions where the relevant safeguards apply.

To make a request, email barn@baileyswistow.co.uk. We may ask for proportionate information to verify your identity. We normally respond within one month, subject to any lawful extension or other adjustment, and will explain if a request cannot be fulfilled in full.

Requests are normally free. We will only charge a fee or refuse a request where the law permits. Some information may need to be retained despite a deletion request, for example to meet legal obligations.

13. Information needed to fulfil your order

We need certain details to process payment, deliver goods and provide the services you request. If you do not provide that information, we may be unable to complete your order or enquiry. Optional marketing consent is not a condition of buying from us.

14. Security and other websites

We use appropriate technical and organisational measures to protect personal information and restrict access to people and providers who need it for their work. No online system can be guaranteed completely secure, so please keep account access details private and tell us if you suspect misuse.

Our website may link to third-party sites or services. Their own privacy notices apply when you use them; please read those notices before providing information.

15. Questions and complaints

If you have a concern about our use of personal information, please contact us so that we can investigate. You do not have to contact us before approaching the regulator.

You can complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. Visit ico.org.uk/make-a-complaint for information and contact options.

16. Changes to this policy

We may update this policy when our services, use of information or legal requirements change. We will update the date shown on this page and take additional steps to inform you of significant changes where required. Where a new use requires fresh consent, updating this policy alone does not provide that consent.