1. Who we are
This website, badpersgo.uk, is run by BADPERSGO LTD, a company registered in England and Wales under company number 17216109, with its registered office at 73 Kiln Way, Dunstable, England, LU5 4GZ. We sell wristwatches, straps, bracelets, watch boxes and gift sets online to customers in the United Kingdom.
BADPERSGO LTD is the controller of the personal data described in this policy. We process it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For any privacy question or request, contact us at [email protected], by phone on +44 7723 418956, or by post at the address above.
2. Data we collect
Order and delivery details
When you place an order we collect your full name, email address, phone number, delivery address, town or city and postcode, the items you order, prices and order number.
Order comments, gift messages and engraving text
If you add a comment to your order, we keep what you write there: delivery notes, the message for a gift card, or the text you want engraved on a caseback. Engraving text can include names, initials or dates that relate to you or the person receiving the gift, so please only include what you are comfortable sharing.
Email correspondence
When you email us or we email you about an order, engraving proof, return or question, we keep the messages, your email address and any details you choose to include.
Warranty and service requests
For a warranty claim, battery replacement or bracelet sizing we collect your contact details, the order number, the watch model and its serial number, a description of the fault and any photos you send.
Payment data
Card and other payment details are entered on and processed by our payment provider. We do not see or store your full card number or security code. We receive only confirmation of payment, the amount, the last four digits of the card and the card type.
Technical data
Our hosting provider may record standard server logs, such as IP address, browser type and the pages requested, to keep the website secure and working.
3. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Processing your order, taking payment, packing, engraving and delivering it | Contract |
| Contacting you about your order, engraving proof, delivery date or returns | Contract |
| Handling warranty claims, repairs, battery replacement and bracelet sizing | Contract; legitimate interests in supporting products we sold |
| Answering questions you send us by email or phone | Legitimate interests; steps at your request before a contract |
| Keeping accounting and tax records, handling refunds and consumer law obligations | Legal obligation |
| Preventing fraud and keeping the website secure | Legitimate interests |
| Sending news or offers by email, only if you ask for them | Consent |
Where we rely on legitimate interests, we have weighed them against your rights and expectations. You can object at any time, as described in section 9.
5. International transfers
Some of our providers, such as email, hosting or payment services, may store or access data outside the UK. When that happens we make sure the transfer is protected: either the country is covered by UK adequacy regulations, or the transfer uses the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguards used.
6. How long we keep data
- Orders, invoices and payment records: 6 years after the end of the financial year of the order, as required for tax and accounting.
- Engraving text and gift messages: kept with the order until 90 days after delivery, then deleted from our working records unless you raise a return or claim.
- Warranty and service records, including serial numbers: for the length of the warranty plus 12 months.
- Email correspondence: 2 years after the last message, or longer if it forms part of an order record above.
- Marketing consent: until you unsubscribe or withdraw consent.
- Server logs: up to 30 days.
When a retention period ends we delete or anonymise the data.
7. Security
The website is served over an encrypted HTTPS connection. Access to order and customer data is limited to the people who need it to fulfil and support orders, accounts are protected with strong passwords and two-factor authentication where available, and card data is handled only by our payment provider. No online system is completely secure, so if we ever discover a breach that puts your rights at risk we will tell you and the ICO as the law requires.
9. Your rights
Under UK GDPR you have the right to:
- Access — get a copy of the personal data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — ask us to delete your data where we no longer need it or have no lawful basis to keep it.
- Restriction — ask us to limit how we use your data, for example while we check its accuracy.
- Portability — receive data you gave us in a structured, machine-readable format, or have it sent to another organisation.
- Objection — object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent — where we rely on consent, withdraw it at any time.
To use any of these rights, email [email protected]. We will reply within one month, and we may ask for proof of identity first. Requests are free unless they are clearly unfounded or excessive.
10. Withdrawing consent
If you have agreed to receive emails from us, you can withdraw that consent at any time by replying "unsubscribe" or emailing [email protected]. Withdrawing consent does not affect processing we carried out before, and it does not affect order or service emails we need to send under our contract with you.
11. Complaints
If you are unhappy with how we handle your data, please contact us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk, helpline 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
12. Children
Our shop is intended for adults. You must be 18 or over to place an order. We do not knowingly collect personal data from children under 13; if you believe a child has sent us their data, contact us and we will delete it. Engraving text for a gift to a young person is handled only as part of the adult buyer's order.
13. Changes to this policy
We may update this policy when our services, providers or the law change. The date at the top shows when it was last revised. If a change significantly affects how we use your data, we will let customers know by email before it takes effect.