Privacy Policy

1. Introduction

The African Bead Box ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

When you subscribe to our service or create an account, we may collect:

• Full name
• Email address
• Shipping address
• Billing information (processed securely through Stripe)
• Phone number (optional)

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Time zone setting and location
• Operating system and platform
• Pages you visit and how you interact with them

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. For more details, please see our Cookie Policy.

3. How We Use Your Information

We use the information we collect in the following ways:

• To process and fulfill your subscription orders
• To manage your account and provide customer support
• To send you important updates about your subscription
• To send marketing communications (only if you've opted in)
• To improve our website and services
• To prevent fraud and enhance security
• To comply with legal obligations

4. How We Share Your Information

We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

We work with trusted third-party service providers who help us operate our business:

• Stripe: For secure payment processing
• Royal Mail: For shipping and delivery
• MailerLite: For email marketing (only if you've subscribed)
• Google Analytics: For website analytics

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your information is transferred.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. This includes:

• Encryption of sensitive data (including payment information)
• Regular security assessments
• Limited access to personal information
• Secure servers and databases

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA) or UK, you have certain data protection rights:

• Right to Access: You can request copies of your personal data
• Right to Rectification: You can request that we correct any inaccurate information
• Right to Erasure: You can request that we delete your personal data under certain conditions
• Right to Restrict Processing: You can request that we restrict the processing of your personal data
• Right to Data Portability: You can request that we transfer your data to another organization
• Right to Object: You can object to our processing of your personal data

To exercise any of these rights, please contact us at hello@africanbeadbox.co.uk

7. Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

After you cancel your subscription, we will retain your information for:

• 7 years for financial records (UK tax law requirement)
• 3 years for marketing data (if you've opted in)
• Until you request deletion for account information

8. Marketing Communications

With your consent, we may send you marketing emails about our products, special offers, and updates. You can opt out at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us directly at hello@africanbeadbox.co.uk
• Updating your preferences in your account settings

Please note that you will still receive transactional emails related to your subscription (order confirmations, shipping updates, etc.) even if you opt out of marketing communications.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your country where data protection laws may differ. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top.

We encourage you to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: