Privacy & Cookie Policy

This website is operated by BowYEAHGifts, based in the United Kingdom. For any privacy questions, contact us at hello@bowyeahgifts.com.

We are the “data controller” of any personal data you provide through this site, and we comply with the UK GDPR and the Data Protection Act 2018.

• Order & contact details — name, email, delivery address, phone (if provided) and order contents when you make a purchase or message us.
• Payment data — handled directly by our payment providers; we don't store full card details on our servers.
• Technical data — IP address, browser type, device and basic usage information collected via cookies and similar technologies.

• To fulfil your order — performance of a contract.
• To reply to enquiries — legitimate interests / contract steps.
• To improve the site — legitimate interests, with your consent for analytics cookies.
• To meet legal obligations — e.g. tax and accounting records.

Cookies are small text files stored on your device. We use the minimum necessary and ask your consent for anything optional, in line with the UK Privacy and Electronic Communications Regulations (PECR).

• Strictly necessary — required for the site to work (e.g. your shopping cart, security). These don't need consent.
• Google Analytics 4 (optional) — measures public page visits, product views, additions to your basket and starts of checkout after you choose “Accept all”. Google receives device and usage information and product identifiers. We do not include checkout session IDs, search text, contact details or payment information in these events. Analytics cookies (_ga and _ga_*) are configured to expire after six months.
• Advertising — this analytics setup does not enable advertising cookies, Google signals or personalised advertising.

You can change your choice at any time using “Cookie settings” in the footer. Rejecting optional cookies stops further analytics collection and removes our Google Analytics cookies. Your consent choice is stored in your browser. You can also use your browser settings to clear site data.

Google provides our optional analytics service and may process data outside the UK. See Google’s privacy policy for information about its processing and international transfers. Analytics is optional and the shop works if you reject it.

We only share data with trusted providers that help us run the shop — for example payment processors, delivery couriers, email and hosting providers. They process data on our behalf under contract and may not use it for their own purposes.

Order records are kept for at least 6 years to meet UK tax and accounting requirements. Marketing contacts are kept until you unsubscribe. Other data is kept only as long as needed for the purpose it was collected.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Ask us to delete your data (subject to legal retention)
• Object to or restrict certain processing
• Withdraw consent at any time
• Data portability

To exercise any of these rights, email hello@bowyeahgifts.com. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

We may update this policy from time to time. The “last updated” date at the top will always reflect the current version.