LEGAL

Privacy Policy

We built BEGGI for people who value precision. This policy explains exactly what data we collect, why, and what you can do about it.

LAST UPDATED: 1 JUNE 2026

1. Who We Are

BEGGI ("we", "our", "us") is the data controller responsible for your personal information. We operate the e-commerce store at beggi.com and any associated mobile or digital experiences.

For all privacy enquiries, contact us at: privacy@beggi.com

2. Data We Collect

Information you provide directly

—Account registration: name, email address, password (stored encrypted).
—Orders: shipping address, phone number, billing details. Card numbers are processed by our payment provider (Stripe) — we never see or store them.
—Communications: emails or messages you send to our support team.
—Preferences: saved sizes, wishlist items, newsletter opt-in.

Information collected automatically

—Device & browser: IP address, browser type and version, operating system, screen resolution.
—Usage data: pages visited, time on page, scroll depth, clicks, referral source.
—Cookies and similar technologies: see our Cookie Policy for full details.
—Transactional data: order history, returns, abandoned carts.

Information from third parties

—Payment processors (Stripe): transaction status, fraud signals.
—Shipping carriers: delivery status and tracking events.
—Analytics platforms: aggregated, anonymised audience insights.

3. How We Use Your Data

We process personal data only where we have a lawful basis to do so:

Contract performance (Art. 6(1)(b) GDPR)

—Processing and fulfilling your orders.
—Sending order confirmations, shipping updates, and return confirmations.
—Providing customer support.
—Managing your account.

Legitimate interests (Art. 6(1)(f) GDPR)

—Fraud detection and prevention.
—Improving site performance, design, and product offerings using aggregated analytics.
—Security monitoring and incident response.
—Personalising your on-site experience (e.g. remembering your cart).

Consent (Art. 6(1)(a) GDPR)

—Sending marketing emails and newsletters — only if you have opted in. You can withdraw consent at any time via the unsubscribe link in any email.
—Non-essential cookies (analytics, personalisation) — managed via our cookie consent banner.

Legal obligation (Art. 6(1)(c) GDPR)

—Retaining transaction records for tax and accounting obligations.
—Complying with court orders or regulatory requests.

4. Data Retention

—Account data: retained for the lifetime of your account, plus 30 days after deletion to allow recovery.
—Order records: 7 years (EU VAT and accounting obligation).
—Marketing preferences: until you withdraw consent or delete your account.
—Server logs and IP addresses: 90 days for security purposes.
—Abandoned cart data: 30 days.
—Support communications: 2 years from last contact.

When retention periods expire, data is permanently deleted or anonymised.

5. Who We Share Data With

We do not sell your personal data. We share it only with trusted service providers under written data processing agreements:

—Stripe (payment processing) — United States, EU Standard Contractual Clauses.
—Supabase (database and authentication) — European region servers.
—Shipping carriers (DHL, UPS, national postal services) — necessary for delivery.
—Email service provider (Resend / SendGrid) — transactional and marketing emails.
—Vercel (hosting infrastructure) — GDPR-compliant hosting.
—Analytics provider — anonymised, aggregated data only.

Where providers are based outside the EEA, we ensure transfers are protected by Standard Contractual Clauses (SCCs) or an equivalent mechanism.

6. Your Rights

Under GDPR (and equivalent UK/California law) you have the right to:

—Access — request a copy of all personal data we hold about you.
—Rectification — correct inaccurate or incomplete data.
—Erasure — request deletion of your data ("right to be forgotten"), subject to legal obligations.
—Restriction — ask us to pause processing while a dispute is resolved.
—Portability — receive your data in a structured, machine-readable format.
—Object — object to processing based on legitimate interests or for direct marketing.
—Withdraw consent — at any time, for any processing based on consent.
—Lodge a complaint — with your national Data Protection Authority (e.g. ICO in the UK, your local EU supervisory authority).

To exercise any right, email privacy@beggi.com with the subject line "Data Request". We will respond within 30 days.

7. Cookies

We use cookies and similar tracking technologies. For a full breakdown of the cookies we set, their purpose, and how to manage them, see our Cookie Policy.

8. Security

We implement technical and organisational measures to protect your data:

—All data in transit is encrypted via TLS 1.2+ (HTTPS).
—Passwords are hashed using bcrypt and never stored in plain text.
—Card numbers are tokenised by Stripe and never touch our servers.
—Database access is restricted by role-based access control.
—Regular security audits and dependency updates.

No system is impenetrable. If you believe your data has been compromised, contact us immediately at security@beggi.com.

9. Children's Privacy

BEGGI is not directed at persons under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently done so, contact us and we will delete it immediately.

10. Changes to This Policy

We may update this policy as our practices evolve or regulations change. Material changes will be communicated by email (if you have an account) and by updating the "Last Updated" date at the top. Continued use of BEGGI after notification constitutes acceptance of the revised policy.

11. Contact

—Privacy enquiries: privacy@beggi.com
—Security issues: security@beggi.com
—General support: support@beggi.com