Privacy Policy

Last updated 22nd August 2026

At Bert and Roxy (”we”, “us”, or “our”), your privacy is important to us and we are committed to protecting your privacy. This Privacy Policy explains how we collect, process, store and safeguard your information when you visit our website (www.bertandroxy.com) or make a purchase from us. Please read the whole of this statement carefully as it sets out our approach on how we collect and process your personal data through us, and your rights as a data subject.

Data Processing Principles

We are guided by the following principles when processing data:

1. We only collect data for specific purposes
2. We will not collect data beyond what is needed to accomplish those purposes
3. We only collect and use your personal information so that we can make our services and products available to you
4. We will not use your data for any other purpose than for which it was collected, as stated within this policy, or with your prior consent
5. We will seek to verify and update your data periodically and we will accept requests from you for amendment of the data held
6. We will apply high technical standards to make our data processing secure
7. We will not store data in identifiable form longer than is necessary to accomplish its purpose or as required by law

How we use your information

We use the information we collect to:

• Process and fulfil the products or services that you have purchased from us
• Create a profile for you on our client database
• Communicate with you about your orders, including shipping updates
• Provide customer support
• Send you our newsletter or other marketing communications and/or provide you with information on our product or services that you request from us, where you have consented to be contacted for such purposes
• Respond to enquiries you make about our services or products
• Improve out website and products so that our products and services are presented to you in the most effective manner for you and your viewing device
• Prevent fraud and enhance security
• Comply with legal obligations
• Analyse trends and customer behaviour to improve our services
• Notify you about changes to our services or products
• Allow you to access and utilise the service or product you have purchased from us

We will only share your personal data with third party service providers where it is necessary for the delivery of our products or services, and only where we are confident that these third party providers have appropriate data protection systems in place. These trusted third party providers help us operate our business, and includes:

Service Providers such as:

• Shopify (this e-commerce platform)
• Payment processors
• Shipping and fulfilment partners
• Email marketing services
• Analytics providers

We may disclose your information if required by law or in response to valid requests by public authorities e.g. court orders, witness summons.

If we are involved in a business transfer such as a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We will not sell your personal data to third parties, or share your personal data for marketing purposes without your consent.

We will not put your personal information into AI assistive technology such as Anthropic (Claude) or Open AI (ChatGPT). We will not use AI assistants to manage, organise, process or reply to any emails within our mailbox. All emails are read, reviewed and responded to by humans. We will not give consent for your information to be used by third party providers for the training and development of AI modelling software, or similar purposes

Information We Collect

In accordance with Data Protection Legislation we only collect and process information which we require to meet the specific purposes as stated above. This includes:

Personal Information

Personal information is provided directly and voluntarily by you when you engage with us to enquire, or purchase our services or products. We collect information from you when :

• You sign up to our mailing list
• You purchase a product or service through our website
• You contact us for information via our website, social media channels or email
• You post on our social media channels, website or blog
• You work with Bert and Roxy in a commercial capacity

The personal information that you provide to us includes:

• Name
• Email address
• Billing and shipping address
• Phone number
• Payment information (processed securely through our payment providers)
• Order history and preferences

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device including:

• IP address
• Browser type and version
• Time zone and location
• Pages you view and links you click
• Products you view or search for
• Referring website

Website analytics and targeted marketing

Website analytics are used to provide the best user experience and service to you, analyse site traffic and to assess and improve our website. Third party analytics service provider Google Analytics is used to improve our visibility and monitor website browser behaviour and navigation across our website.

These third party data analytics service providers use cookies to collect this information. You can control cookies through your browser settings The data they may collect includes:

• Number of visitors to our side
• Pages visited whilst using our site and time spent per page
• Page interaction information, such as clicks and browsing methods
• Source location and details of where users go when they leave the website
• Page response times and download errors
• Technical information relating to end user devices, such as IP address

We may use the information collected about you to present you with targeting advertisements on platforms such as Facebook, Google and / or Instagram.

Special Category Data

We do not intentionally collect any special category data about you as part of our ordinary business activities. Special category data includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health or genetic data. We do not collect any information about criminal convictions and offences. If you voluntarily provide us with such information, we will only process it where permitted by applicable data protection law

How we store your data and security

We implement appropriate technical measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the internet is 100% secure.

Your information is securely stored on our Shopify business platform, which is not publicly accessible or stored in any public domain, and is password protected. Your information may also be stored on our third party email marketing platform, Flodesk. Your information may also be stored on our third party shipping partner, Royal Mail, UPS or DHL. Our third party providers have their own privacy policies which you can view on their websites.

International Data Transfers

Your information may be stored, transferred or processed on cloud based platforms or service providers in countries other than your own. We only use such third party service providers where we are confident that appropriate safeguards are in place to to protect your data in accordance with UK GDPR and data protection laws.

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlines in this Privacy Policy. Personal data is retained for 7 years in line with our insurance obligations, and for tax and accounting purposes. After this period of time, we will delete your personal data unless there is a legitimate business reason to retain all or parts of the data we hold.

Legal Basis for processing your data

The General Data Protection Regulation (GDPR) states that processing of your data shall only be lawful if at least one of the following applies:

1. You have consented
2. For the completion of a purchased product or service
3. For compliance with a legal obligation
4. To protect the vital interests of you or another person
5. It is in the public interest
6. It is in the legitimate interests pursued by us or a third party

We collect data for the purposes set out above.

Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (subject to legal obligations)
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Request a copy of your data in a structured, machine readable format
• Right to object: object to our processing of your data for certain purposes
• Right to withdraw consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before your withdrew your consent.

To exercise any of these rights, please contact us at hello@bertandroxy.com

Links from our website

Our site contains links to and from other websites which are operated by others over which we have no direct control. These websites have their own privacy and terms of use policies. We do not accept any responsibility or liability for these policies. We advice you to check the policies for any third party sites before you submit your personal data to that website.

Marketing Communications

If you have opted in or otherwise given consent for us to do so, we may send you marketing emails and communications. You can unsubscribe any time by clicking the “unsubscribe” link on the marketing email that was sent to you or by contacting us directly at hello@bertandroxy.com. It may take 24 hours for this to come into effect.

Children’s Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

This Privacy Policy will be reviewed and updated regularly. We do not intend to process your personal information except for the reasons stated within this Privacy Policy. We reserve the right to update this Privacy Policy from time to time. Where appropriate, we shall contact you to notify you of any material changes to the Privacy Policy. You should also refer to our website periodically so that you can view our updated policy. This will ensure that you understand how we use your personal data and your legal rights around our usage of such data.

Data Protection Complaints

If you have any concerns or complaints about how we have collected, used or otherwise processed your personal data, you can contact us at:

Bert and Roxy

20 Cornwall Avenue, Buckshaw Village, Chorley, Lancashire, PR7 7BG

Email: hello@bertandroxy.com

We will acknowledge receipt of your complaint within 30 days and will investigate and respond to your complaint without undue delay. Where appropriate, we will keep you informed of the progress of our investigation and will let you know the outcome.

Making a complaint to us does not affect your right to complain to the Information Commissioner’s Office (ICO).

Supervisory Authority

If you have concerns about how we handle your personal data, you have a right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk