PRIVACY POLICY

[SET LEGAL_ENTITY], trading as Baura, is responsible for the personal data described here. Contact details are on the contact page.

Worth stating plainly, because it rules out most of what an online shop usually collects:

• There are no customer accounts. You cannot register, and we store no username or password for you.
• There is no shopping cart and no checkout.
• No payment is taken on this website. We never see or store your card details here.
• We do not sell your personal data, and we do not use it for automated decision-making or profiling.

When you message us. Ordering happens over WhatsApp. Whatever you send — your name, phone number, delivery address, sizing details and the conversation itself — is received by us and kept so we can fulfil and support your order. The same applies if you email us.

When you browse. This site currently runs no analytics and sets no tracking cookies. Our hosting provider keeps standard server logs, which include IP addresses, for security and reliability. If we add analytics later, we will update this page before doing so.

The order buttons on this site open WhatsApp with a pre-filled message. WhatsApp is operated by Meta, and once you are in that conversation your messages are processed under WhatsApp’s own privacy policy, not ours. We have no control over how Meta handles that data. If you would rather not use WhatsApp, contact us another way — the options are on the contact page.

• To answer your enquiry and agree an order with you.
• To arrange delivery, and to handle returns or exchanges.
• To keep records we are required to keep, such as for tax.
• To protect the site against fraud and abuse.

We keep this list short and specific rather than generic. The services involved in running this site are:

• Vercel — hosting. Processes requests to the site and keeps short-term server logs.
• Cloudflare R2 — stores and serves product images.
• Supabase — stores our product catalogue and staff logins. It holds no customer data.
• WhatsApp / Meta — carries the conversation in which you place an order. See section 4.

We may also share information where the law requires it. We do not share it with anyone else.

Order conversations and records are kept for as long as needed to support the order and to meet our legal and tax obligations, then deleted. Enquiries that do not lead to an order are deleted once they are no longer relevant.

Depending on where you live, you may have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, or to object to how we use it. Ask us through the contact page and we will respond within the time the law allows.

Note that we cannot delete messages held by WhatsApp on your behalf — that request goes to Meta.

This site is not intended for children, and we do not knowingly collect data from them. If you believe a child has sent us personal information, contact us and we will delete it.

We take reasonable measures to protect the information we hold, including restricting staff access to our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If this policy changes, we will update the date at the top of this page. Material changes to what we collect will be reflected here before they take effect.

Questions or a request about your data? Use the contact page.