Privacy Policy

Buba Art Privacy Notice

Effective Date: October 2026 | Jurisdiction: UK (England & Wales)

This Privacy Policy explains how Buba Art ("we", "us", "our") collects, uses, and protects your personal information when you visit our website, purchase physical merchandise, or access digital downloads. We are committed to safeguarding your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. INFORMATION WE COLLECT

We collect personal information that you provide to us directly when interacting with our site:

Order & Contact Details: Name, billing address, shipping address, email address, and telephone number when you place an order.
Payment Information: Payment details processed securely via our integrated payment gateways. We do not store full credit or debit card numbers on our servers.
Account & Communication Data: Messages sent via contact forms, customer support inquiries, product reviews, or user submissions.
Technical Data: IP address, browser type, device details, and site usage data collected via essential cookies and analytical tools.

2. HOW WE USE YOUR INFORMATION

We process your personal data under the following lawful bases:

Performance of Contract: To process and fulfill your orders, ship physical merchandise, deliver digital downloads, and issue order updates.
Legal Obligations: To keep appropriate business, tax, and accounting records as required by UK law.
Legitimate Interests: To maintain security, troubleshoot website issues, prevent fraud, and optimize our store layout and performance.
Consent: To send direct marketing communications or newsletters where you have explicitly opted in.

3. SHARING YOUR DATA

We do not sell, rent, or trade your personal information. We only share necessary data with trusted third-party service providers essential to operating our business, including:

Website hosting and storefront platforms (Tilda).
Payment gateways for processing transactions safely.
Postal and courier services (such as Royal Mail) to deliver physical goods.

4. DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or statutory reporting requirements (typically up to 6 years for UK financial tax records).

5. YOUR RIGHTS UNDER UK GDPR

As a UK resident, you hold specific data rights regarding your personal information:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete information.
Right to Erasure: Request the deletion of your personal data where legally permissible.
Right to Object/Restrict: Object to or restrict certain data processing activities.

To exercise any of these rights, please contact us at bubaartshop@gmail.com.

6. CONTACT & COMPLAINTS

If you have any questions or concerns regarding this Privacy Policy or our handling of your personal data, please contact us at bubaartshop@gmail.com.

You also have the right to lodge a complaint with the UK data protection supervisory authority, the Information Commissioner's Office (ICO) at ico.org.uk.