Privacy Policy

Last updated: 9 September 2026

Bay & Celyn is a trading name of Carl Asparassa, a sole trader. Throughout this policy, “Bay & Celyn”, “we”, “us” and “our” refer to Carl Asparassa trading as Bay & Celyn.

This Privacy Policy explains how we collect, use, store and share your personal information when you visit our website, make a purchase, contact us or otherwise use our services.

Our online shop is powered by Shopify, which provides the ecommerce platform that enables us to sell our products and services to you.

Personal information we collect

Depending on how you use our website and services, we may collect:

• Contact information, including your name, email address, telephone number, billing address and delivery address.

• Order and transaction information, including the products you view or purchase, your order history, delivery method and payment confirmation.

• Personalisation information, including names, dates, wording, photographs or other details you provide so that we can create your order.

• Account information, including your login details, preferences and settings if you choose to create an account.

• Communications, including information contained in emails, messages, enquiries, reviews or other correspondence you send to us.

• Device and usage information, including your IP address, browser, device, network connection and information about how you use our website.

• Marketing preferences, including whether you have chosen to receive promotional emails from us.

Payment information is processed securely by Shopify and our payment providers. We do not directly store your complete debit or credit card details.

Information provided about another person

When placing a personalised order, you may provide information relating to another person, such as a recipient’s name, address, photograph or personalisation details.

You should only provide this information where you have permission or another lawful reason to do so. We will use it only to create, fulfil and deliver the order or respond to an associated enquiry.

How we collect your information

We may collect personal information:

• Directly from you when you place an order, create an account, contact us, subscribe to our emails or provide personalisation details.

• Automatically when you use our website, including through cookies and similar technologies.

• From Shopify and other service providers that help us operate our website, process payments and fulfil orders.

• From advertising, social media or other business partners where permitted by law.

How we use your information

We may use your personal information to:

• Process, personalise, produce and deliver your order.

• Take and confirm payments.

• Contact you about your order, proof, personalisation or delivery.

• Provide customer service and respond to enquiries.

• Manage returns, refunds, cancellations or complaints.

• Maintain customer accounts and order records.

• Prevent fraud and keep our website and business secure.

• Improve our products, website and customer experience.

• Comply with our tax, accounting and other legal obligations.

• Send marketing emails where you have chosen to receive them.

• Measure the effectiveness of our website, advertising and marketing.

Our lawful bases for processing

Under UK data protection law, we must have a lawful basis for using your personal information. Depending on the purpose, we rely on:

• Contract: where processing is necessary to accept, personalise, produce, deliver or otherwise manage your order.

• Legal obligation: where we must retain or use information to meet tax, accounting, consumer protection or other legal requirements.

• Consent: where you choose to receive marketing emails or give consent for another specific use. You can withdraw your consent at any time.

• Legitimate interests: where necessary to operate and improve our business, prevent fraud, maintain website security, respond to enquiries and understand how customers use our services, provided these interests do not override your rights.

Marketing

If you subscribe to our mailing list, we may send you emails about new designs, seasonal products and occasional special offers.

You can unsubscribe at any time by clicking the unsubscribe link in an email or contacting us at hello@bayandcelyn.co.uk.

Unsubscribing from marketing will not prevent us from sending essential messages about an order you have placed.

Cookies

We and Shopify use cookies and similar technologies to operate the website, remember your preferences, understand how the website is used and, where you have consented, support advertising and marketing.

Where required, non-essential cookies will only be used with your consent. You can manage your choices using the cookie preferences available on our website. You can also control cookies through your browser settings, although disabling certain cookies may affect how the website works.

How we share personal information

We may share personal information where reasonably necessary with:

• Shopify, which hosts our online shop and provides our checkout and ecommerce services.

• Payment providers that securely process transactions.

• Royal Mail, couriers and delivery providers.

• Printing, production or fulfilment partners where they are needed to complete an order.

• Email, website, analytics, advertising and technology providers that support our business.

• Accountants, insurers, legal advisers and other professional advisers.

• Government bodies, regulators, law enforcement agencies or other parties where disclosure is required by law.

• A buyer or successor if our business is sold, transferred or reorganised.

These providers may receive only the information reasonably necessary for them to perform their services.

We may also share information where you ask us to do so or give us permission.

Shopify

Our shop is hosted by Shopify. Information submitted through this website is processed by Shopify and may be shared with Shopify’s service providers to provide and improve its services.

Shopify may process information in countries other than the country where you live.

You can read more in the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal to submit certain requests relating to Shopify’s processing.

International transfers

Some service providers may process or store information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards will be used where required. These may include adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the European Commission’s Standard Contractual Clauses or another legally recognised safeguard.

Children’s information

Our website is intended for adults and we do not knowingly collect personal information directly from children.

Customers may provide a child’s name, age, date of birth, photograph or other details when ordering a personalised product. We use this information only to create and fulfil the requested order and manage associated enquiries.

A parent, guardian or other authorised adult may contact us to request deletion of a child’s personal information, subject to any information we are legally required to retain.

How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

The length of time will depend on factors including:

• How long we need the information to complete and deliver an order.

• Whether it may be needed for a reprint, customer enquiry, refund or dispute.

• Our tax, accounting and legal obligations.

• Whether you maintain a customer account.

• Whether you have consented to receive marketing.

• The need to prevent fraud or protect our legal rights.

Order and transaction records may normally be retained for up to six years where required for tax, accounting or legal purposes.

Personalisation files and photographs are retained only for as long as reasonably needed to complete the order and deal with associated enquiries, reprints or disputes. We periodically review the information we hold and delete or anonymise it when it is no longer required.

Security

We take reasonable administrative, technical and physical measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

However, no website, electronic transmission or storage system can be guaranteed to be completely secure. Please avoid sending unnecessary sensitive information through unsecured communication channels.

Your rights

Depending on the circumstances, UK data protection law may give you the right to:

• Request access to the personal information we hold about you.

• Ask us to correct inaccurate or incomplete information.

• Ask us to delete your personal information.

• Ask us to restrict how we use your information.

• Object to certain uses of your information.

• Receive certain information in a portable format.

• Withdraw your consent where we rely on consent.

• Object to the use of your information for direct marketing.

These rights are not absolute and may be subject to legal limitations. We may need to verify your identity before responding to a request.

To exercise your rights, contact hello@bayandcelyn.co.uk.

Third-party websites

Our website may contain links to websites or services operated by other organisations. We are not responsible for the privacy, security or content of third-party websites. You should review their privacy information before providing them with personal information.

Complaints

If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to complain to the UK Information Commissioner’s Office:

Website: www.ico.org.uk
Telephone: 0303 123 1113

Changes to this policy

We may update this Privacy Policy to reflect changes to our services, business practices or legal obligations.

The latest version will be published on this website and the “Last updated” date will be amended.

Contact us

If you have questions about this Privacy Policy or would like to exercise your data protection rights, please contact:

Carl Asparassa trading as Bay & Celyn
76 Haven Drive
Milford Haven
SA73 3HW
United Kingdom

Email: hello@bayandcelyn.co.uk

For the purposes of UK data protection law, Carl Asparassa, trading as Bay & Celyn, is the data controller responsible for the personal information described in this policy.