Privacy Policy

Data protection & privacy · bamae

Last updated: September 12, 2026

1. Introduction and Scope

This Privacy Policy describes how bamae ("we," "our," or "us") collects, uses, shares, and protects your personal information when you visit our website, make purchases, or interact with our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, you acknowledge that you have read and understood this policy.

2. Information We Collect

Personal Information: Name, email, phone number, billing and shipping address, and payment details.

Business Information: Business name, VAT registration, licences, and compliance-related data required for refrigerant sales and regulatory obligations.

Technical Information: IP address, browser, device info, pages visited, and timestamps.

Communication Data: Records of emails, calls, and support interactions.

3. How We Use Your Information

Order Processing: To fulfil orders and manage shipping and returns.
Account Management: To maintain your account and preferences.
Customer Support: To respond to enquiries and improve service.
Legal Compliance: To meet regulatory, environmental, and tax obligations under UK law, including refrigerant handling and F-Gas Regulations.
Business Operations: Analytics and internal improvements.

4. Information Sharing and Disclosure

Service Providers: Trusted partners assisting operations.
Shipping Partners: Delivery carriers including Royal Mail, DPD, DHL, Evri, Yodel, and Parcelforce for order fulfilment.
Payment Processors: Secure third-party payment handling including PayPal, Klarna, and Clearpay.
Legal Requirements: Disclosure when required by law or regulatory authorities.
Business Transfers: Data may transfer during mergers, acquisitions, or asset sales.

5. Data Security and Protection

We implement encryption, SSL security, and restricted access controls to protect your data. Whilst we strive for maximum protection, no system is completely secure. We continuously review and update our security measures in line with industry best practices.

6. Cookies and Tracking Technologies

We use cookies to enhance user experience, analyse traffic, and improve functionality. Our use of cookies complies with the Privacy and Electronic Communications Regulations 2003 (PECR). You can manage your cookie preferences through your browser settings. For full details, please see our separate Cookie Policy.

7. Your Privacy Rights

Under the UK GDPR and Data Protection Act 2018, you have the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion of your personal data (subject to legal retention requirements).
Restriction: Limit how we process your data.
Portability: Receive your data in a structured, commonly used format.
Object: Object to processing based on legitimate interests or for direct marketing.
Complain: Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.

To exercise any of these rights, please contact us using the details below.

8. Data Retention

We retain personal data only as long as necessary for the purposes set out in this policy, or as required by law. Specific retention periods include six years for transaction records (in accordance with HMRC and consumer protection requirements) and longer where required by refrigerant handling regulations.

9. Third-Party Services and Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of external websites. We encourage you to read the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are intended for users aged 18 and over. We do not knowingly collect data from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly.

11. International Data Transfers

Your personal data is processed within the United Kingdom and the European Economic Area. Where we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions recognised under UK law.

12. Updates to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of our services following any updates constitutes your acceptance of the revised policy.