Who we are
Bopple is operated by Stow Quill Ltd (company number 15671718), trading as Bopple.
For order fulfilment and customer support handled through our franchise operations, Stow Quill Ltd and the relevant franchise operation act as joint controllers for the related processing activities. We determine purposes and means together for these activities, while Stow Quill Ltd remains responsible for operating this website, central systems, and policy governance.
You can contact us about privacy at support@bopple.co.uk. We coordinate responses with relevant franchise operations where required.
What we collect
- Account and contact details: name, email address, phone number, and password (stored securely; we do not store your password in plain text).
- Order and delivery data: delivery and billing addresses, order contents, custom designs or uploads you provide, and communications about your order.
- Payment data: card payments are processed by Stripe. We do not store your full card number on our servers. Stripe acts as a processor under their own privacy policy.
- Technical data: IP address, browser type, device information, and cookies or similar technologies where we use them (see below).
- Support and enquiries: information you send via our contact form, email, or phone.
Social media and your designs
If you opt in at checkout, we may use images of your customised designs on our own Facebook and Instagram channels to showcase real customer work. Posts are reviewed before publication, and you can withdraw your consent or ask us to stop by contacting us (see below). Separately, you may choose to share your order on your own social accounts using your device's share features; tagging us is voluntary and is not controlled by us.
Why we use your data (lawful bases)
Under UK GDPR we rely on:
- Contract — to take and fulfil your orders, provide the service, and manage your account.
- Legitimate interests — for example fraud prevention, improving our website, and (where allowed) marketing you have not opted out of.
- Legal obligation — where we must retain records for tax, accounting, or regulatory reasons.
- Consent — where we ask for it (e.g. non-essential cookies or certain marketing). You can withdraw consent at any time.
Cookies and similar technologies
We may use cookies or local storage where needed for the site to function (for example session or cart state), security, and analytics that help us understand how the site is used. You can control cookies in your browser settings. Essential cookies may be required for checkout or account features.
Who we share data with
We share data only as needed to run our business, including:
- Stripe — payment processing.
- Google Firebase / Google Cloud — hosting, database, storage, and authentication for our application.
- Carriers and fulfilment partners — to deliver your order (name, address, and contact details as required).
- Franchise operations — for production, delivery coordination, customer service, and complaint handling for orders allocated to that operation.
- Professional advisers — where required (e.g. accountants or lawyers), under confidentiality.
We do not sell your personal data. Processors are required to protect your data and use it only for the purposes we specify.
International transfers
Some of our service providers may process data outside the UK. Where that happens, we aim to ensure appropriate safeguards (such as UK-approved standard contractual clauses or adequacy decisions) are in place as required by UK data protection law.
How long we keep data
We keep personal data only as long as needed for the purposes above — for example order records for warranty, legal, and accounting periods, and account data while your account is active. We delete or anonymise data when it is no longer needed, subject to legal retention requirements.
Your rights (UK)
You may have the right to:
- Access a copy of your personal data.
- Rectify inaccurate data.
- Erasure, restriction of processing, or objection in certain circumstances.
- Data portability where applicable.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with the ICO (Information Commissioner's Office).
To exercise your rights, contact us using the details below. You can also contact the ICO at ico.org.uk.
Where joint-controller processing applies, either Stow Quill Ltd or the relevant franchise operation can receive your request, but we coordinate a single response so your rights are handled consistently.
User data deletion
If you want us to delete personal data we hold about you (for example your account, order history where allowed, or designs and uploads), you can request deletion at any time. Email us at support@bopple.co.uk from the email address associated with your account, or use our contact form and ask for "data deletion" or "account deletion". We may need to confirm your identity before processing your request. We will delete or anonymise your data where we can, except where we must keep certain information for legal, tax, accounting, or dispute reasons — in those cases we will explain what we retain and why.
Children
Our services are not aimed at children under 16. If you believe we have collected a child's data, please contact us and we will delete it.
Changes
We may update this policy from time to time. The "Last updated" date at the top will change when we do.
Contact
For privacy questions, rights requests, or complaints: support@bopple.co.uk, or our contact form.