Privacy policy
Last updated: 30 October 2026
This policy explains how we collect and use your personal information when you visit our website or buy from us, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Flippin Bounty Limited, trading as Flippin Bounty. Registered in England and Wales, company number 17093563. Registered office: Suite 17 Barnfield House, Sandpits Lane, Accrington Road, Blackburn, England, BB1 3NY. Office, returns and correspondence: Flippin Bounty, First Floor, The Old Co-Op Bakery, Borough Road, Darwen, Lancashire, BB3 2FT, United Kingdom. Email: info@flippinbounty.com.
We are the “controller” of your personal information. For any privacy question or request, email info@flippinbounty.com.
What we collect
- Order details: your name, delivery and billing address, email, phone number, what you bought and what you paid.
- Payment details: card payments are handled by our payment provider. We receive confirmation that you paid and limited details such as the card type and last four digits. We never see or store your full card number.
- Account details if you create one: your login, saved addresses and order history.
- Messages you send us, offers you make, reviews you write and your gift card messages.
- Mailing list: your email address if you sign up for new-drop emails or price-drop alerts.
- Technical information: your IP address, browser and device type, and the pages you visit, kept in our server logs for security. See our Cookie policy.
How and why we use it
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order, refunds and returns, and order emails | Contract |
| Answering your questions, offers and complaints | Contract / legitimate interests |
| Preventing fraud and keeping the website secure | Legitimate interests / legal obligation |
| Keeping tax and accounting records | Legal obligation |
| New-drop emails and price-drop alerts | Consent (unsubscribe any time using the link in every email) |
| One reminder if you leave items in your bag while signed in, and a request for a review after an order | Legitimate interests (you can opt out using the link in the email) |
| Improving our shop and service | Legitimate interests |
We do not sell your personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.
Who we share it with
Only with the service providers we need to run the shop, who act on our instructions and must keep it secure:
- our payment providers (for example card payment and PayPal services), to take payment, prevent fraud and give refunds;
- Royal Mail and other couriers, to deliver your order (name, address, and email or phone for tracking);
- our email provider (Brevo), to send order and marketing emails;
- our website host and developer (SmoothByte IT), who host and maintain the website and its backups in the UK;
- eBay or Vinted, if you buy through their marketplaces (their own privacy policies apply);
- professional advisers, HMRC and other authorities where the law requires.
Some of these providers may process data outside the UK. Where they do, we make sure appropriate safeguards are in place (such as UK adequacy regulations or the UK International Data Transfer Agreement).
Some back-office tools we use to write product listings rely on AI services. These only process product photos and item details, never your personal information.
How long we keep it
- Order and payment records: 6 years after the end of the tax year (HMRC requirement).
- Your account: until you ask us to close it.
- Mailing list: until you unsubscribe.
- Server logs and backups: up to 30 days.
Your rights
You have the right to: access your information; correct it; ask us to delete it; restrict or object to how we use it (including stopping marketing at any time); ask for it in a portable format; and withdraw consent at any time. Email info@flippinbounty.com and we will reply within one month. There is no charge.
If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, tel. 0303 123 1113. We would appreciate the chance to put things right first.
Security
Our website uses an encrypted (HTTPS) connection, card payments are handled by PCI-DSS compliant payment providers, and access to customer information is limited to the people who need it.
Children
Our shop is not intended for children under 18 and we do not knowingly collect their information.
Changes
We may update this policy. The latest version is always on this page.