Privacy policy
Last updated: 20 July 2026
1. ABOUT THIS PRIVACY POLICY
Blue Dragon Designs Limited, trading as Bantam Apparel (“Bantam Apparel”, “we”, “us” or “our”), operates the Bantam Apparel online store and website.
This Privacy Policy explains how we collect, use, store and share personal information when you:
• visit bantamapparel.co.uk;
• browse or purchase our products;
• create or use a customer account;
• subscribe to marketing communications;
• contact us;
• submit a product review; or
• otherwise interact with our website, products or services.
Our online store is hosted by Shopify, which provides the ecommerce platform that enables us to offer and sell our products.
For the purposes of applicable UK data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018, Blue Dragon Designs Limited is the data controller of the personal information described in this Privacy Policy, except where another organisation acts as a separate controller.
Please read this Privacy Policy carefully. It should be read alongside our Terms of Service, Cookie Policy, Shipping Policy and Returns Policy.
2. PERSONAL INFORMATION WE COLLECT
“Personal information” means information that identifies you or can reasonably be linked to you. It does not include information that has been anonymised so that it can no longer identify you.
Depending on how you use our website and services, we may collect the following categories of personal information.
Contact and delivery information
This may include:
• your name;
• billing address;
• delivery address;
• email address; and
• telephone number.
Order and transaction information
This may include:
• products viewed or purchased;
• products added to your basket;
• order history;
• transaction value;
• delivery information;
• returns, refunds, exchanges or cancellations;
• discount codes used; and
• payment confirmation and transaction references.
Payment information
Payments are processed by Shopify Payments or another payment provider made available at checkout.
Your full payment-card details are normally collected and processed directly by the relevant payment provider. We generally receive limited payment information, such as the payment method, payment status, transaction reference and limited card details needed to identify the transaction.
We do not intentionally store complete payment-card numbers or security codes.
Account information
If customer accounts are available and you create one, we may collect:
• your account login details;
• account preferences;
• saved addresses;
• order history; and
• account settings.
Communications
We collect information you provide when you contact us, including:
• customer-service enquiries;
• complaints;
• returns or refund requests;
• email correspondence;
• social-media messages; and
• information contained in reviews or feedback.
Device and technical information
When you use our website, we or our service providers may automatically collect:
• your IP address;
• browser type;
• device type;
• operating system;
• approximate location derived from your IP address;
• referring website;
• pages viewed;
• dates and times of visits;
• website interactions; and
• cookie or similar technology identifiers.
Marketing information
Where applicable, we may collect:
• your marketing preferences;
• whether you have subscribed or unsubscribed;
• your interaction with marketing emails;
• advertising and campaign interaction information; and
• consent records.
3. HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information from the following sources:
Directly from you
For example, when you:
• place an order;
• create an account;
• subscribe to marketing;
• contact us;
• request a return or refund;
• leave a review; or
• otherwise provide information to us.
Automatically through our website
We may collect information automatically through cookies, pixels, analytics tools and similar technologies when you use our website.
From Shopify and our service providers
We may receive information from organisations that help us operate our business, including:
• Shopify;
• payment providers;
• delivery companies;
• printing or fulfilment providers;
• website and cloud-hosting providers;
• customer-service providers;
• email and marketing platforms;
• analytics providers; and
• fraud-prevention services.
From advertising and social-media platforms
Where we use advertising or social-media services, and where permitted by law and your privacy settings, we may receive information about your interaction with our adverts, content or social-media accounts.
4. HOW AND WHY WE USE PERSONAL INFORMATION
We only process personal information where we have a lawful basis for doing so.
To process and fulfil your order
We use personal information to:
• accept and process orders;
• process payments;
• arrange printing and fulfilment;
• arrange delivery;
• provide order updates;
• deal with returns, refunds and exchanges;
• communicate with you about your order; and
• provide customer support.
Lawful basis: Processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.
To manage customer accounts
We may use personal information to:
• create and manage your account;
• save your preferences;
• show previous orders;
• authenticate account access; and
• provide account-related notifications.
Lawful basis: Performance of our contract with you and our legitimate interest in providing an effective customer-account service.
To provide customer support
We use personal information to:
• respond to enquiries;
• resolve complaints;
• investigate delivery or product issues;
• process returns;
• manage warranty or product-quality matters; and
• maintain appropriate records of communications.
Lawful basis: Performance of our contract, compliance with legal obligations and our legitimate interests in providing customer service and resolving disputes.
To improve our website, products and services
We may use information to:
• understand how customers use our website;
• identify technical problems;
• improve website performance;
• develop products and collections;
• understand customer preferences;
• measure customer satisfaction; and
• improve our services.
Lawful basis: Our legitimate interests in operating, understanding and improving our business. Where non-essential cookies or similar technologies are required, we rely on your consent.
For security and fraud prevention
We may use information to:
• protect customer accounts;
• verify transactions;
• detect suspicious activity;
• prevent fraud;
• protect our website and systems;
• investigate misuse; and
• protect our legal rights and those of our customers.
Lawful basis: Our legitimate interests in protecting our business, customers and systems, and compliance with legal obligations.
To comply with legal and regulatory requirements
We may process information to:
• maintain accounting and tax records;
• respond to lawful requests from public authorities;
• comply with court orders or legal proceedings;
• enforce our terms and policies;
• establish, exercise or defend legal claims; and
• comply with consumer-protection and other legal obligations.
Lawful basis: Compliance with legal obligations and our legitimate interests in protecting and enforcing our legal rights.
For marketing
We may use your contact information to send you information about Bantam Apparel products, offers, launches or promotions where:
• you have given your consent; or
• the law permits us to contact you as an existing customer about our own similar products and we provided an opportunity to opt out when collecting your details.
You can unsubscribe at any time by using the unsubscribe link in our marketing emails or by contacting us.
We may retain limited information on a suppression list after you unsubscribe so that we can continue to respect your preference.
Lawful basis: Consent or, where legally permitted, our legitimate interests in promoting our own similar products to existing customers.
For personalised advertising
Where you have consented to the relevant cookies or technologies, we may work with advertising platforms to:
• measure advertising performance;
• show advertisements to people who may be interested in our products;
• show advertisements based on products previously viewed; and
• understand how users interact with our advertising.
Lawful basis: Consent where required for advertising cookies and similar technologies. We may also rely on legitimate interests for limited related business analysis where permitted by law.
5. MARKETING PREFERENCES
You can opt out of marketing communications at any time by:
• selecting the unsubscribe link in an email;
• changing available communication preferences; or
• contacting us using the details at the end of this Privacy Policy.
Opting out of marketing will not prevent us from sending necessary service messages, including:
• order confirmations;
• dispatch updates;
• delivery information;
• account-security notices;
• returns information; and
• responses to customer-service enquiries.
We do not sell customer contact details to third parties for their own direct marketing.
6. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses cookies and similar technologies.
Cookies are small files placed on your device when you visit a website. They can perform essential functions, remember preferences, measure website activity and support advertising.
Essential cookies
These cookies are necessary for the website to function and may support:
• shopping-basket functionality;
• checkout;
• security;
• fraud prevention;
• customer-account access;
• load balancing; and
• remembering privacy preferences.
Because these cookies are required to provide the website and services requested by you, they cannot generally be disabled through our consent tool.
Analytics and performance cookies
These technologies help us understand how visitors use the website, identify errors and improve website performance.
Where required by law, these cookies are used only after you provide consent.
Advertising cookies
Where enabled, these technologies may be used to measure campaigns, limit repeated advertising and display advertisements that may be relevant to you.
Where required by law, these cookies are used only after you provide consent.
Managing cookies
You can manage your preferences through the cookie banner or privacy-preference tool displayed on our website.
You can also control cookies through your browser settings. Blocking some cookies may affect how parts of the website operate.
For further information, please review our Cookie Policy and the privacy settings available on our website.
7. HOW WE SHARE PERSONAL INFORMATION
We may share personal information with third parties where reasonably necessary to operate our store, fulfil orders, comply with the law or protect our rights.
Shopify
Our store is hosted by Shopify. Shopify processes information to provide:
• website hosting;
• checkout;
• customer accounts;
• order management;
• payment and fraud-prevention services;
• analytics;
• security; and
• other ecommerce functions.
Shopify may process information as our service provider and, for certain features and processing activities, as a separate data controller.
Payment providers
Payment providers process payment information to authorise payments, issue refunds and detect fraud.
Printing, fulfilment and delivery providers
We may share your name, address, contact details and order information with organisations that print, package, fulfil or deliver your order.
Technology and professional-service providers
We may share information with service providers supporting:
• website operation;
• cloud storage;
• information technology;
• email communications;
• customer support;
• analytics;
• advertising;
• bookkeeping;
• accounting;
• legal advice; and
• fraud prevention.
Advertising and social-media platforms
Where you consent to relevant advertising technologies, limited information may be shared with advertising or social-media platforms to measure campaigns and provide personalised advertising.
Legal and regulatory disclosures
We may disclose information where reasonably necessary to:
• comply with applicable law;
• respond to a lawful request from a regulator, court, police force or government authority;
• establish, exercise or defend legal claims;
• investigate suspected fraud or unlawful conduct;
• enforce our Terms of Service; or
• protect the rights, property or safety of Bantam Apparel, our customers or others.
Business transfers
If all or part of our business is sold, transferred, reorganised or merged, personal information may be disclosed to relevant advisers, prospective purchasers and new owners, subject to appropriate confidentiality and data-protection safeguards.
We do not sell your personal information for money.
8. OUR RELATIONSHIP WITH SHOPIFY
Shopify collects and processes personal information concerning your access to and use of our store in order to provide its ecommerce services.
Information submitted through our store may be transmitted to Shopify and other service providers located outside the United Kingdom.
Shopify may also process information to provide security, fraud prevention, analytics and enhanced services. For some of these activities, Shopify may act as a separate data controller and is responsible for responding to requests relating to its own processing.
You can learn more about Shopify’s use of personal information and its privacy controls at:
https://privacy.shopify.com/en
9. THIRD-PARTY LINKS
Our website may contain links to third-party websites, services or social-media platforms.
We do not control those third parties and are not responsible for their privacy practices, security or content. You should review the privacy policy of any third-party website before providing personal information.
The inclusion of a link does not necessarily mean that we endorse the third party, its products or its services.
10. CHILDREN’S INFORMATION
Our website is intended for customers who are legally able to enter into a contract or for adults purchasing products for themselves or others.
We do not knowingly collect personal information directly from children under 13.
If you are a parent or guardian and believe that a child has provided personal information to us without appropriate permission, please contact us. We will investigate and, where appropriate, delete the information.
11. DATA SECURITY
We use reasonable technical and organisational measures intended to protect personal information against:
• unauthorised access;
• accidental loss;
• misuse;
• alteration;
• disclosure; and
• destruction.
However, no online system or method of transmission is completely secure. You should not send sensitive or confidential information through unsecured communication channels.
You are responsible for keeping any customer-account password confidential. Please contact us promptly if you believe your account or personal information has been compromised.
12. HOW LONG WE KEEP PERSONAL INFORMATION
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax, consumer-protection and reporting requirements.
The periods below are general guidelines and may be extended where necessary because of a complaint, legal claim, investigation or legal requirement.
Order, payment and transaction records
We generally retain order and transaction records for up to six years after the end of the relevant financial year, or longer where required by law, an investigation or an ongoing legal matter.
Customer-service correspondence
We generally retain customer-service records for up to six years after the matter has been resolved where they may be relevant to a transaction, complaint or legal claim.
Routine enquiries that do not relate to an order or dispute may be deleted sooner.
Customer accounts
Account information is normally kept while the account remains active. It may be retained for an appropriate period after closure where needed for transactions, fraud prevention, legal obligations or disputes.
Marketing information
We retain marketing information while you remain subscribed.
If you unsubscribe, we may retain limited information on a suppression list so that we can record and respect your decision not to receive marketing.
Technical, analytics and cookie information
Retention periods vary depending on the technology, provider and cookie involved. More information may be available in our cookie-preference tool or Cookie Policy.
When personal information is no longer required, we will delete it, anonymise it or securely restrict its use.
13. INTERNATIONAL TRANSFERS
Some of our service providers, including Shopify and other technology providers, may process or store personal information outside the United Kingdom.
Where personal information is transferred to a country that is not recognised as providing an adequate level of data protection, we or the relevant provider will use an appropriate safeguard where required.
These safeguards may include:
• the UK International Data Transfer Agreement;
• the UK Addendum to the European Commission’s Standard Contractual Clauses;
• another legally approved transfer mechanism; or
• another exception permitted by applicable data-protection law.
Where required, appropriate assessments will be carried out to consider whether transferred information will receive an essentially equivalent level of protection.
14. YOUR DATA-PROTECTION RIGHTS
Depending on the circumstances, you may have the following rights.
Right of access
You may request confirmation that we process your personal information and ask for a copy of that information.
Right to rectification
You may ask us to correct inaccurate personal information or complete information that is incomplete.
Right to erasure
You may ask us to delete personal information in certain circumstances.
Right to restrict processing
You may ask us to restrict how we use personal information in certain circumstances.
Right to object
You may object to processing based on legitimate interests, including profiling connected with those interests.
You have an absolute right to object to the use of your personal information for direct marketing.
Right to data portability
Where processing is based on consent or contract and carried out by automated means, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format.
Right to withdraw consent
Where we rely on consent, you may withdraw it at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Rights concerning automated decision-making
You may have rights relating to decisions made solely through automated processing where those decisions produce legal or similarly significant effects.
We do not currently make solely automated decisions that produce legal or similarly significant effects concerning customers.
How to exercise your rights
To exercise a data-protection right, contact us using the details at the end of this Privacy Policy.
We may need to request information to confirm your identity and ensure that personal information is not disclosed to an unauthorised person.
We will respond within the time required by applicable law. In some cases, we may lawfully decline or limit a request and will explain the reason where required.
You will not be discriminated against for exercising your data-protection rights.
15. COMPLAINTS
If you are concerned about how we use your personal information, please contact us so that we have an opportunity to investigate and resolve the issue.
You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s independent data-protection regulator.
Information Commissioner’s Office:
https://ico.org.uk/make-a-complaint/
You may also have the right to complain to the relevant supervisory authority in another country if you live outside the United Kingdom.
16. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect:
• changes to our business;
• changes to the services or technologies we use;
• legal or regulatory developments; or
• operational and security requirements.
We will publish the updated Privacy Policy on our website and revise the “Last updated” date.
Where required by law, we will provide additional notice or request renewed consent.
17. CONTACT US
If you have questions about this Privacy Policy, our privacy practices or your personal information, or wish to exercise your rights, please contact:
Blue Dragon Designs Limited
Trading as Bantam Apparel
Address:
54 Beckfield Road
Cottingley
Bingley
BD16 1QS
United Kingdom
Email:
shopify@bantamapparel.co.uk
Telephone:
+44 77 6687 5098
Blue Dragon Designs Limited, trading as Bantam Apparel, is the data controller responsible for the personal information described in this Privacy Policy.