Privacy policy

This Privacy Policy explains how Bayraw collects, uses, shares and protects personal information when you visit bayraw.co.uk, place an order, create an account, contact us or subscribe to marketing.

Last updated: 3 July 2026

1. Who we are

Bayraw is a trading name of Verum Fortis Ltd, a company registered in England and Wales.

Company number: 10850917
Registered office: 25 Dale View, Longwood, Huddersfield, England, HD3 4QX
Email: help@bayraw.co.uk

For the purposes of UK data protection law, Verum Fortis Ltd is the controller of the personal information described in this policy.

2. Information we collect

The information we collect depends on how you interact with Bayraw.

Information you provide

• Identity and contact information: your name, email address, telephone number, billing address and delivery address.
• Order information: products purchased, order value, delivery choices, discount codes, returns and refund history.
• Account information: account login details, saved addresses and account activity.
• Payment information: payment method, transaction status and limited payment details supplied by our payment providers. Bayraw does not receive or store your full card number.
• Communications: emails, contact-form messages, customer-service enquiries, photographs you send and any feedback or reviews you provide.
• Marketing preferences: whether you have agreed to receive email marketing and your unsubscribe choices.

Information collected automatically

• IP address and approximate location
• device, browser and operating-system information
• pages, products and links viewed
• referring website or marketing source
• cart, checkout and account activity
• cookie and consent choices
• information used to detect security threats, fraud or misuse

Information received from other organisations

We may receive information from Shopify, payment providers, Klarna, delivery providers, analytics services, advertising platforms and email-marketing services where this is necessary to operate the store or measure our marketing.

3. How we use personal information

Purpose	Examples	Main lawful basis
Process and fulfil orders	Taking payment, confirming the order, packing, delivery, tracking, returns and refunds	Performance of a contract
Provide customer support	Answering product questions, resolving delivery problems and handling complaints	Contract and legitimate interests
Operate customer accounts	Login, order history, saved details and the returns portal	Contract and legitimate interests
Meet legal and financial duties	Accounting, tax records, consumer rights, fraud prevention and responding to lawful requests	Legal obligation and legitimate interests
Improve the website and range	Understanding site performance, popular products, navigation and conversion	Consent for non-essential cookies and legitimate interests where appropriate
Marketing and advertising	Newsletters, abandoned-cart messages, measuring campaigns and showing relevant advertising	Consent, or legitimate interests where the law permits
Protect Bayraw and customers	Fraud screening, account security, chargeback evidence and enforcing our terms	Legitimate interests and legal obligation

4. Lawful bases

UK data protection law requires us to have a lawful basis for using personal information. Depending on the situation, we rely on:

• Contract: where the information is needed to take steps at your request or fulfil an order.
• Legal obligation: where we must keep records or comply with consumer, tax, accounting or regulatory requirements.
• Legitimate interests: where the use is reasonably necessary to operate, protect or improve Bayraw and those interests are not overridden by your rights.
• Consent: particularly for optional email marketing and non-essential cookies or tracking where consent is required.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

5. Email marketing

If you subscribe to Bayraw marketing, we may send product news, offers, guides and other relevant updates. We currently use MailerLite to manage marketing subscriptions and emails.

You can unsubscribe at any time by using the link in an email or contacting help@bayraw.co.uk. We may keep a minimal suppression record so that we can respect your decision not to receive further marketing.

Service messages about an order, account, delivery, return, refund or important policy change are not marketing and may still be sent where necessary.

6. Cookies, analytics and advertising

Bayraw and our service providers use cookies and similar technologies. These can be grouped into:

• Strictly necessary: required for the storefront, checkout, security, customer accounts and cart to work.
• Functional: used to remember choices and improve website features.
• Analytics: used to understand how visitors use the website and how the store performs.
• Advertising: used to measure campaigns and, where permitted, show more relevant advertising.

We use Shopify's store technology and may use services such as Google Analytics and Meta advertising tools. Non-essential technologies are used in line with the consent choices available on the site.

You can review or change your choices through the Cookie preferences link in the website footer. You can also control cookies through your browser, although blocking necessary cookies can prevent parts of the store from working correctly.

7. Who we share information with

We share personal information only where it is reasonably necessary for the purposes described in this policy. Recipients may include:

• Shopify: the ecommerce platform that hosts and operates the storefront, checkout and customer-account services.
• Payment and finance providers: organisations that process payments or provide payment options shown at checkout, including Klarna where selected.
• Delivery providers: carriers used to deliver and return parcels, such as Royal Mail, DPD or another tracked carrier selected by Bayraw.
• MailerLite: our email-marketing service.
• Google: services that may include analytics, advertising and Google Workspace for business email.
• Meta: advertising and campaign-measurement services where enabled and consented to.
• Professional advisers: accountants, insurers, legal advisers and other professionals where necessary.
• Authorities and rights holders: where disclosure is required by law, necessary to protect rights or needed to investigate fraud or misuse.

We do not sell your personal information.

8. Payments and Klarna

Payments are processed by the payment provider selected at checkout. These providers process information under their own privacy terms and may carry out fraud, identity, affordability or credit checks where relevant.

If you choose Klarna, contact and order information may be shared with Klarna so it can assess and provide the available payment option. Klarna acts in accordance with its own privacy notice and terms.

9. International transfers

Some service providers operate or store information outside the United Kingdom. This can include Shopify, MailerLite, Google, Meta and payment-service providers.

Where personal information is transferred internationally, we rely on a lawful transfer mechanism, such as a UK adequacy regulation, the UK International Data Transfer Agreement, an approved addendum to standard contractual clauses or another safeguard permitted by data protection law.

10. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention and dispute requirements.

• Order, payment and accounting records: normally six years after the end of the relevant financial year.
• Customer-service, delivery and return records: normally up to three years after the matter is resolved, or longer where needed for a legal claim or regulatory duty.
• Customer accounts: while the account remains active and for a reasonable period afterward, unless earlier deletion is appropriate.
• Marketing records: while you remain subscribed. A minimal suppression record may be retained after unsubscribe.
• Cookie and analytics information: according to the lifespan and settings of the relevant technology and your consent choices.

We may retain anonymised information that can no longer identify you.

11. Your rights

Depending on the circumstances, UK data protection law gives you the right to:

• ask for access to the personal information we hold about you
• ask us to correct inaccurate or incomplete information
• ask us to delete information where there is no lawful reason to keep it
• ask us to restrict how information is used
• object to processing based on legitimate interests or direct marketing
• receive certain information in a portable format
• withdraw consent where consent is the lawful basis
• raise a concern with the Information Commissioner's Office

These rights are not absolute and can be subject to legal exceptions. We may need to confirm your identity before responding.

To exercise a right, email help@bayraw.co.uk. We normally respond within one month.

12. Automated decision-making

Bayraw does not make decisions that have a legal or similarly significant effect on you solely through automated processing.

Shopify, payment providers and finance providers may use automated tools for fraud prevention, payment security, eligibility or credit assessment under their own terms and privacy notices.

13. Security

We use reasonable technical and organisational measures to protect personal information. These include using established ecommerce and payment providers, limiting access, account-security controls and secure communications where available.

No internet service is completely risk-free. You should use a strong, unique password for your account and contact us if you believe your account or personal information has been compromised.

14. Children's information

Bayraw is not directed at children and we do not knowingly collect personal information from children who are not able to enter into a purchase contract. If you believe a child has provided information inappropriately, contact us so we can investigate.

15. Third-party websites

The website may contain links to third-party sites or services. Bayraw is not responsible for the privacy practices of those organisations. Review their privacy information before providing personal details.

16. Questions and complaints

Contact us first if you have a question or concern. We will try to resolve it promptly.

Email: help@bayraw.co.uk
Post: Verum Fortis Ltd, 25 Dale View, Longwood, Huddersfield, England, HD3 4QX

You also have the right to complain to the Information Commissioner's Office. Information is available at ico.org.uk.

17. Changes to this policy

We may update this policy when our services, providers or legal obligations change. The latest version will always be published on this page with the updated date shown near the top.