Privacy Policy — Bag2Travel

Paulo Ventura, trading as Bag2Travel ("we", "us", "our") is the data controller of the personal information you provide when you use https://bag2travel.co.uk (the "Site"). We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the EU GDPR.

1. Data we collect

Account data — email, name, hashed password when you register.
Order data — billing address, shipping address, phone number, items purchased.
Payment data — processed directly by Stripe or PayPal. We do not store card numbers.
Marketing data — email address if you subscribe to our newsletter.
Usage data — anonymous session identifiers, pages viewed, referrer. See our Cookie Policy.

2. Legal basis for processing

Contract — to process your order and deliver your goods.
Legal obligation — accounting, tax and consumer-protection records.
Legitimate interest — fraud prevention, site security and analytics.
Consent — marketing emails, non-essential cookies. You may withdraw at any time.

3. Who we share data with

We only share your data with the third parties needed to run the store:

Stripe, Inc. — card payment processing.
PayPal (Europe) S.à r.l. — alternative payment processing.
Resend, Inc. — order and marketing emails.
Royal Mail, Evri, DPD or equivalent — parcel delivery.
Cloudflare — hosting, DNS and security.

We never sell your personal data. Where a processor is outside the UK/EEA, we rely on Standard Contractual Clauses or an adequacy decision.

4. Retention

Order records are kept for 6 years to comply with HMRC accounting rules. Marketing data is kept until you unsubscribe. Analytics events are anonymised after 12 months.

5. Your rights

You have the right to:

Access the personal data we hold about you.
Ask for correction or deletion ("right to be forgotten").
Ask us to restrict or stop processing your data.
Receive your data in a portable format.
Object to marketing at any time (unsubscribe link in every email).

To exercise any of these, email hello@bag2travel.co.uk. If you feel we have not resolved your concern, you may complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

6. Contact

Paulo Ventura, trading as Bag2Travel
Century Road, Great Yarmouth, NR31 0BX, United Kingdom
Email: hello@bag2travel.co.uk