Privacy policy

Last updated: 12 October 2026

BOWLDER is run by a sole trader based in Watford, United Kingdom. Contact: hello@bowlder.co.uk.

What we collect and why

Our legal basis

Under UK GDPR we use your data to perform a contract with you (quotes, orders and delivery), to meet legal obligations (for example keeping sales records for tax), and for our legitimate interest in answering enquiries. We do not send marketing unless you ask us to.

Cookies and local storage

We do not use tracking or advertising cookies. Your cart and delivery choice are saved in your browser's local storage so they survive a page refresh. They stay on your device. The locker map loads map tiles from OpenStreetMap and locker data from InPost, which means those services see your IP address. Stripe sets its own cookies on its checkout page for fraud prevention.

Who we share data with

Only the services needed to run the shop: Netlify (website and forms), Stripe (payments), InPost and DPD (delivery), and our email provider. Some of them may process data outside the UK under appropriate safeguards. We never sell your data.

How long we keep it

Enquiries that don't lead to an order are deleted within 12 months. Order records are kept for 6 years, as UK tax rules require. Uploaded files are deleted once your job is finished, unless you ask us to keep them for repeat orders.

Your rights

You can ask to see, correct or delete your data, or object to how we use it, by emailing hello@bowlder.co.uk. If you are unhappy with our answer you can complain to the Information Commissioner's Office (ico.org.uk).