Privacy Policy 

Effective Date: 1st March 2025
Last Updated: 1st March 2025 

Welcome to Blu Goblin Ltd ("we," "our," "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website www.blugoblin.com and use our services. 

1. Data We Collect

When you use our website, we may collect the following types of personal data:

• Identity Information – John Doe, Jane Doe
• Contact Information – john.doe@example.com, +44 1234 567890, 123 Example Street, London, UK
• Payment Information – Processed securely via Shopify Payments and the third-party payment providers Shopify makes available (e.g., credit/debit cards, PayPal, Apple Pay, Google Pay). For subscription orders, payment details are securely tokenized by Shopify to enable recurring billing. We do not store or have access to your full payment information.
• Order History – Purchase details, transaction records
• Technical Data – IP address, browser type, device information, cookies
• Marketing Preferences – Subscription to promotional emails, advertising preferences
  

2. How We Use Your Data

We use your data to:

• Process and deliver orders
• Provide customer support
• Personalize your shopping experience
• Analyze website performance & improve services
• Send marketing communications (only with your consent)
• Comply with legal obligations (e.g., tax, fraud prevention)
  
• Process subscription payments on a recurring basis (with your prior authorization).

3. Legal Basis for Processing Data

Under UK GDPR, we process your data based on:

• Contractual necessity – Fulfilling your orders & customer service
• Legal obligation – Compliance with tax & accounting laws
• Legitimate interests – Fraud prevention, improving services
• Consent – For marketing & cookies (you can withdraw at any time)
  

4. Data Sharing with Third Parties

We do not sell your data. However, we may share it with:

• Payment processors – Shopify Payments and the third-party providers Shopify integrates with (such as PayPal, Apple Pay, Google
• Delivery partners – Which Include Royal Mail, DHL (to ship orders) Pay, credit card networks) to process one-time and subscription transactions securely.
• Analytics & marketing services – Google Analytics, Meta Ads
• Legal & regulatory authorities – If required by law

All third parties comply with UK GDPR via legally binding Data Processing Agreements (DPAs). 

5. Cookies & Tracking Technologies

We use cookies to enhance your experience. These may include: 

• Essential cookies – Required for site functionality
• Analytics cookies – Help us improve our website
• Marketing cookies – For personalized ads
  

You can manage cookies via your browser settings or view our Cookie Policy 

6. Data Security Measures

We protect your data using: 

• Encryption for sensitive information
• Secure payment gateways
• Access controls for restricted access
• Regular security audits
  

7. Data Retention

We retain personal data only for as long as necessary: 

• Order history & transaction data – 6 years (for legal & tax compliance)
• Marketing data – Retained until you withdraw consent or after 2 years of inactivity
• Technical data (cookies, logs) – See our Cookie Policy for details
  

8. Your UK GDPR Rights

You have the right to: 

• Access your personal data
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Withdraw consent for marketing
• Request data portability 
  

We respond to all requests within one month. Contact us at hello@blugoblin.com

9. International Data Transfers

If we transfer data outside the UK, we ensure compliance through:

• Standard Contractual Clauses (SCCs)
• UK adequacy decisions
• Other legal safeguards
  

10. Changes to This Privacy Policy

We may update this policy from time to time. Significant changes will be communicated via email or a notice on our website. 

11. Contact

For privacy-related inquiries, contact us:  hello@blugoblin.com