Privacy Policy

Last updated: 13 September 2026

Bag Fab Ltd
Company number: 16707289
Registered office: Unit 6 ,Rear of 235 South Park Drive,Ilford IG3 9AL, United Kingdom

Bag Fab Ltd respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and share personal information when you visit bagfabltd.com, create an account, place an order, submit an enquiry, contact us, or otherwise interact with our business.

1. Who We Are

Bag Fab Ltd is a company registered in England and Wales.

For the purposes of UK data protection law, Bag Fab Ltd is the data controller responsible for the personal information described in this Privacy Policy.

You can contact us at:

Email: Admin@bagfabltd.com
Telephone: +44 07380429796
Address: Unit 6 ,Rear of 235 South Park Drive,Ilford IG3 9AL, United Kingdom

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

Identity information
Your name, business name, job title or other identifying information you provide.

Contact information
Your billing address, delivery address, email address and telephone number.

Account information
Login details and information associated with a customer or trade account.

Order and transaction information
Products purchased, order details, delivery information, invoices, refunds, returns and related transaction records.

Payment information
Payment information is processed through our payment service providers. Bag Fab Ltd does not normally store complete payment card details on its own systems.

Enquiry and communication information
Information you provide through contact forms, partnership enquiries, emails, telephone calls or other communications with us.

Technical information
This may include your IP address, browser type, device information, operating system, website activity and similar technical information collected when you use our website.

Marketing information
Your marketing preferences and information relating to communications you receive from us.

3. How We Collect Your Information

We may collect personal information:

• directly from you when you place an order
• when you create or use an account
• when you complete a website form
• when you contact us by email or telephone
• when you request information about our products or services
• automatically through cookies and similar technologies
• from payment providers, delivery providers and other service providers where necessary to complete a transaction

4. How We Use Your Personal Data

We may use your personal data to:

• process and fulfil orders
• arrange delivery of goods
• process payments, refunds and returns
• provide invoices and order confirmations
• create and manage customer accounts
• respond to enquiries and provide customer support
• manage trade, wholesale or partnership enquiries
• detect and prevent fraud or misuse
• maintain business and accounting records
• improve our website, products and customer experience
• comply with legal, regulatory and tax obligations
• send marketing communications where permitted by law

We do not sell your personal information.

5. Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing your personal data.

Depending on the circumstances, we may rely on:

Contract
Where processing is necessary to process an order, provide a product or service, or take steps at your request before entering into a contract.

Legal obligation
Where we are required to retain or process information to comply with legal, tax, accounting or regulatory requirements.

Legitimate interests
Where processing is necessary for the legitimate operation of our business, provided those interests are not overridden by your rights and interests.

This may include fraud prevention, customer service, website security, record keeping and improving our services.

Consent
Where you have given us permission to use your information for a particular purpose, such as certain marketing communications.

Where we rely on consent, you may withdraw that consent at any time.

6. Payments

Payments made through our website may be processed by third-party payment providers, including providers integrated with WooCommerce or WooPayments.

These providers may collect and process information necessary to:

• authorise payments
• process transactions
• prevent fraud
• process refunds
• comply with financial and regulatory requirements

Payment providers may act as independent data controllers for some of the information they process under their own privacy policies.

7. Sharing Your Personal Data

We may share personal information with trusted third parties where necessary to operate our business.

These may include:

• payment processors
• banks and financial service providers
• delivery companies and couriers
• website hosting providers
• IT and security providers
• website and e-commerce service providers
• accounting and professional advisers
• regulators, government authorities or law enforcement where required by law

We only disclose personal information where there is a legitimate business or legal reason to do so.

8. International Data Transfers

Some of our service providers may process or store personal information outside the United Kingdom.

Where personal data is transferred internationally, we take appropriate steps to ensure that the transfer complies with applicable UK data protection law.

This may include relying on:

• UK adequacy regulations
• the UK International Data Transfer Agreement
• the UK Addendum to approved Standard Contractual Clauses
• other lawful transfer mechanisms

9. How Long We Keep Your Information

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax and reporting requirements.

Retention periods may vary depending on the type of information.

For example:

• order, invoice and transaction records may be retained for up to 6 years or longer where required by law
• customer service and enquiry records may be retained for a reasonable period after the matter has been resolved
• account information may be retained while your account remains active
• marketing information may be retained until you unsubscribe or otherwise withdraw your consent
• cookie information is retained according to the duration specified in our cookie settings or Cookie Policy

10. How We Protect Your Information

We use appropriate technical and organisational measures designed to protect personal data against:

• unauthorised access
• accidental loss
• misuse
• alteration
• disclosure
• destruction

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

11. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate properly, remember preferences, improve performance and understand how visitors use the site.

Some cookies are necessary for the website and online shop to function.

Other cookies, such as analytics or marketing cookies, may require your consent.

You can manage your cookie preferences through our website cookie controls where available.

For more information, please refer to our Cookie Policy.

12. Marketing Communications

We may send you marketing communications where:

• you have given us consent; or
• we are otherwise permitted to do so under applicable law

You can unsubscribe from marketing emails at any time by using the unsubscribe link in an email or by contacting us.

Unsubscribing from marketing will not prevent us from sending service-related communications, such as order confirmations, delivery updates or account information.

13. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you the right to:

• access the personal data we hold about you
• request correction of inaccurate or incomplete information
• request deletion of your personal data
• request restriction of processing
• object to certain processing
• request transfer of your personal data
• withdraw consent where processing is based on consent
• complain about how your personal data has been handled

These rights are not absolute and may be subject to legal exceptions.

To exercise your rights, contact us at:

Admin@bagfabltd.com

We may need to verify your identity before responding to a request.

14. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

15. Children’s Privacy

Our website and services are intended for adults and businesses.

We do not knowingly collect personal information from children where it is not appropriate or necessary for our services.

16. Links to Other Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices of external websites. We recommend reviewing the privacy policy of any third-party website you visit.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services or legal obligations.

The latest version will be published on this page with the updated date shown at the top.

18. Contact Us

If you have any questions about this Privacy Policy or how Bag Fab Ltd handles personal data, please contact:

Bag Fab Ltd
Unit 6 ,Rear of 235 South Park Drive,Ilford IG3 9AL, United Kingdom

Email: Admin@bagfabltd.com
Telephone: +44 07380429796
Company number: 16707289