Last updated: 09/20/2024
Introduction
BluPeak Ltd (“BluPeak”, “we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and store personal data when you visit or make a purchase from our website [www.blupeak.online] (the “Site”), contact our customer service, or otherwise interact with us. Email: contact@blupeak.online
By using our Site or placing an order you accept and agree to the practices described in this policy.
2. The personal data we collect
We collect the following categories of personal data:
A. Identity & contact data
Full name, title, date of birth (where required for age-restricted products), email address, telephone number, billing and shipping addresses.
B. Account & order information
Order history, product selections, returns, refunds, customer service communications, reviews, and preferences.
C. Payment information
Payment card details are collected and processed by our payment processors (e.g., Stripe, Payoneer, Wise). We do not store full card numbers on our servers. We may store transaction references, partial card details (e.g. last 4 digits) and billing address to manage orders and refunds.
D. Technical and usage data
IP address, device and browser type, operating system, pages viewed, links clicked, referrer URL, search queries and session data collected via cookies and analytics tools.
E. Marketing & communications data
Newsletter subscriptions, marketing preferences, and consent records.
F. Verification & compliance data
For KYC/verification purposes (e.g., when opening merchant accounts), we may need government ID, proof of address, company documents — these are uploaded through secure verification flows when required.
3. How we use your personal data (purposes & lawful bases)
We process personal data for these main purposes, relying on the lawful basis indicated:
To perform and manage your order (Performance of a contract): process purchases, delivery, returns, refunds, and customer support.
To process payments and prevent fraud (Legal obligation / legitimate interest): payment verification, fraud checks and chargeback handling.
To provide customer service (Performance of a contract / legitimate interest).
To send transactional communications (Performance of a contract): order confirmations, shipping updates, invoices.
To send marketing (with consent) (Consent): promotional emails, newsletters and offers — you can opt out at any time.
To personalise and improve the Site (Legitimate interest): analytics, A/B testing and improving user experience.
To meet legal & tax obligations (Legal obligation): bookkeeping and regulatory compliance.
To verify identity and KYC checks (Legal obligation / legitimate interest): when opening merchant/payment accounts or large payouts.
4. Cookies & tracking
We use cookies and similar technologies to make the Site work, to understand how you use it, and to show relevant content/ads.
Essential cookies – necessary for core functionality (checkout, account login).
Analytics cookies – help us improve the Site (Google Analytics or similar).
Marketing / advertising cookies – used to show relevant ads and measure campaign performance.
You can manage cookie preferences via your browser or through our cookie banner. Disabling non-essential cookies may affect Site functionality.
5. Sharing your data with third parties
We share your personal data with trusted third parties only where necessary:
Payment processors: Stripe, Payoneer, Wise, etc. (card processing and payouts).
Ecommerce platform & hosting: Shopify / hosting provider (site operation, checkout).
Logistics & couriers: DHL, UPS, local shipping partners (delivery and tracking).
Analytics & marketing: Google Analytics, email providers (e.g., Mailchimp), advertising platforms.
Legal & regulatory bodies: where required by law (tax authorities, courts).
Service providers: customer support platform, accounting, fraud prevention.
We require our processors to keep data secure and only to process it for the agreed purpose.
6. International transfers
BluPeak is a UK-registered company and operates internationally. Personal data may be processed or stored outside the UK/EU (for example, in Malaysia or by third-party processors in other jurisdictions). Where we transfer data outside the UK/EU, we will ensure appropriate safeguards (e.g., adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms) are in place.
7. Data retention
We keep personal data only as long as necessary for the purpose collected and to meet legal/tax obligations.
Order & transaction records: typically retained for up to 7 years for accounting/tax purposes.
Marketing data: retained while you remain subscribed or until you withdraw consent.
Support conversations: retained for a reasonable period to handle disputes and service improvements (usually 1–3 years).
If you request deletion, we will remove or anonymise personal data unless we are required to retain it by law.
8. Your rights
You have certain rights under data protection law (subject to legal exceptions):
Right of access — request a copy of the personal data we hold about you.
Right of rectification — correct inaccurate or incomplete data.
Right to erasure (right to be forgotten) — in certain circumstances.
Right to restrict processing — in certain circumstances.
Right to object — to processing based on legitimate interests or for direct marketing.
Right to data portability — receive certain data in machine-readable format.
Right to withdraw consent — where processing is based on consent.
To exercise any right, contact us at contact@blupeak.online. We may ask for ID to verify your identity before fulfilling requests.
If you are unhappy with our response you can complain to the UK supervisory authority: Information Commissioner’s Office (ICO) — ico.org.uk.
9. Security
We use industry-standard technical and organisational measures to protect personal data (HTTPS/SSL, access controls, secure servers). While we strive to protect your data, no online system is 100% secure — if a data breach occurs that presents a real risk to your rights, we will notify the ICO and affected individuals where required by law.
10. Children
Our Site is not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us and we will delete it.
11. Automated decision-making / profiling
We do not use automated decision-making or profiling that produces legal effects about you. We may use automated systems to personalise content or product recommendations (based on purchase history), but these do not have significant legal effects.
12. Marketing communications
We will only send marketing messages where you have opted in. You can unsubscribe at any time using the “unsubscribe” link in emails or by contacting contact@blupeak.online. Even after unsubscribing, we may still send you transactional messages about orders or service updates.
13. Links to other sites
Our Site may contain links to third-party websites. This policy does not cover those third parties — check their privacy policies before providing personal data.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on the Site and update the “Last updated” date. For material changes we will notify active customers by email.
15. Contact & Data Protection Officer
If you have questions about this policy or want to exercise your rights contact:
Email: contact@blupeak.online
