Privacy policy

Privacy Policy

This Privacy Policy describes how Bellseum (15 Eversley Court, Chester, England CH2 2AA, United Kingdom) collects, processes and protects your personal data when you visit our website bellseum.com or shop with us.

1. Data Controller

The controller within the meaning of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection provisions is:

Bellseum (operated by SORTEX ECO LLC, 123 S Wyoming Ave, Buffalo, WY 82834, United States)
UK contact address: 15 Eversley Court, Chester, England CH2 2AA, United Kingdom
E-mail: contact@bellseum.com
Phone: +447460009359

2. Data We Collect

Contact data: name, e-mail address, phone number, delivery address
Order data: order history, encrypted payment information
Device data: IP address, browser type, operating system
Usage data: pages visited, click behaviour, referrer URLs
Cookies (see section 5)

3. Purposes of Processing

Processing and delivering orders
Customer communication and support
Fraud prevention and security
Improving our website and services
Marketing communication (only with your explicit consent)

4. Sharing with Third Parties

Data is shared only with the following categories of recipients, to the extent necessary for the performance of the contract:

Payment providers: the certified payment processors behind Visa, Mastercard, American Express, Apple Pay and Google Pay
Shipping carriers: Royal Mail and partner courier services
Hosting services: Shopify Inc. (platform and data storage)
Analytics services: Shopify's built-in analytics (aggregated usage statistics); ParcelPanel (order tracking)

All third parties are contractually obliged to comply with applicable data protection laws.

5. Cookies and Consent

We use cookies. When you first visit our website, a cookie banner (provided by Pandectes GDPR Compliance) appears, through which you can accept all cookies, reject non-essential cookies, or choose which categories to allow. You can adjust or withdraw your consent at any time via the "Cookie settings" link on our website, which reopens the banner — our Cookie Policy has the details.

We use cookies in the following four categories:

Strictly necessary cookies: required for the shop to function correctly (basket, session, security). These cookies cannot be disabled — no consent required.
Functional cookies: enable enhanced functionality and personalisation (e.g. saved language preferences). Only with your consent.
Performance cookies: anonymous usage statistics to improve our website (e.g. Shopify's built-in analytics). Only with your consent.
Targeting cookies: set by advertising partners to show personalised advertising on other websites. Only with your consent.

Your consent decision is stored for 365 days. A detailed cookie statement listing all cookies used and their purposes can be found in our Cookie Policy.

6. Data Retention

We store personal data only for as long as necessary or as required by law (generally 6 years for tax and accounting records in accordance with HMRC requirements).

7. Your Rights under the UK GDPR and the Data Protection Act 2018

You have the following rights in relation to your personal data:

Right of access (Art. 15 UK GDPR)
Right to rectification (Art. 16 UK GDPR)
Right to erasure ("right to be forgotten", Art. 17 UK GDPR)
Right to restriction of processing (Art. 18 UK GDPR)
Right to data portability (Art. 20 UK GDPR)
Right to object (Art. 21 UK GDPR)
Right to withdraw consent you have given (Art. 7(3) UK GDPR)
Right to lodge a complaint with the supervisory authority

Supervisory authority (United Kingdom): Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk

Legal bases for processing (Art. 6 UK GDPR):

Art. 6(1)(b) – performance of a contract (order processing)
Art. 6(1)(f) – legitimate interest (fraud prevention, security)
Art. 6(1)(a) – consent (marketing cookies, promotional e-mails)

International data transfers: For transfers of personal data outside the United Kingdom (e.g. Shopify, Google Analytics, our operating company in the United States), we rely on the UK International Data Transfer Agreement (IDTA) / the UK Addendum to the EU Standard Contractual Clauses and, where applicable, the UK Extension to the EU-U.S. Data Privacy Framework.

8. Data Security

Our website uses SSL/TLS encryption for all data transmissions (HTTPS protocol). We carry out regular security reviews and apply industry-standard protective measures.

9. Contact for Privacy Enquiries

To exercise your rights or if you have questions about data protection, please contact:

E-mail: contact@bellseum.com
Phone: +447460009359
Post: Bellseum, 15 Eversley Court, Chester, England CH2 2AA, United Kingdom
Opening hours: Monday to Friday: 09:00 – 18:00 | Saturday and Sunday: 10:00 – 16:00 (GMT/BST)

We respond to your enquiries within 30 days.