Privacy Policy

Information collected

• Cart contents and product quantities.
• Customer account email address, saved name, phone number, and saved delivery address if you choose to create an account.
• One-time sign-in code and account session records used to keep your account secure.
• Name, email, phone number, and delivery address entered during Stripe Checkout.
• Stripe payment status, order total, selected shipping method, and order reference.
• Messages you send about an order or custom colour request.
• Newsletter and stock-waitlist signups, including the consent wording and time recorded with the request.
• Online cancellation requests, including the contact details and order information supplied with the request.

How information is used

Order details are used to take payment, send order emails, pack and dispatch goods, handle support, prevent fraud, and keep accounting records.

Account details are used to let customers sign in, view orders, save a delivery address, and make account data requests.

Payment card details are handled by Stripe. Beryl's World does not store full card details.

Processors

• Stripe processes payment and checkout details.
• Vercel hosts the website and stores private order, customer account, login, and session records where configured.
• Resend or 20i/Stackmail sends transactional order, account sign-in, and support emails when the email provider is configured.
• Vercel Web Analytics and Speed Insights provide privacy-focused website usage and performance information.

Cookies and local storage

The cart is stored in your browser local storage so your bag can remain available while you browse.

Customer account sign-in uses an httpOnly session cookie. It is used only to keep you signed in and cannot be read by browser JavaScript.

Stripe may use cookies and similar technologies during secure checkout.

Vercel Web Analytics is used to understand page views and shopping events without adding advertising trackers to the store.

Your rights

You can download a copy of your account and order data from My Account. You can also submit access, correction, or erasure requests from the privacy controls in your account.

Erasure requests are reviewed against legal record-keeping, fraud prevention, fulfilment, and accounting requirements. Some order records may need to be retained where the law allows or requires it.

Security and retention

Account sign-in codes expire after 10 minutes. Customer sessions are stored server-side and use secure httpOnly cookies in production.

Beryl's World keeps personal information only for as long as it is needed for orders, customer support, accounting, legal obligations, and security.