Privacy Policy
Last updated: 2 June 2025
Thank you for choosing to work with Barratt Solutions LTD ("we", "our", or "us"). We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and store information when you subscribe to our monthly services and we process your payments through Stripe’s recurring payments platform.
1. Who We Are
Barratt Solutions LTD is a Shopify on‑demand agency registered in United Kingdom, with its principal place of business at 128 City Road, London, England, EC1V 2NX. We specialise in providing project‑based and subscription‑based Shopify development and optimisation services.
2. Scope of This Policy
This Policy applies to personal information we handle in connection with:
- Your subscription to our recurring monthly service plans.
- The processing of your payments via Stripe (including upgrades, downgrades, renewals, and cancellations).
- Any related communications, support tickets, or account management activities.
If you visit our public website or use other services, additional privacy notices may apply.
3. Information We Collect
When you subscribe to a monthly plan, we (or Stripe acting on our behalf) collect the following categories of data:
| Category | Examples | Source |
|---|---|---|
| Account Information | Name, business name, billing address, email, phone number, Shopify store URL | Directly from you |
| Payment Information | Last 4 digits of card, card type, expiration date, billing postal code (full card number is tokenised and stored only by Stripe) | Directly from you / Stripe |
| Transaction Data | Amounts charged, currency, timestamps, subscription status, invoice PDFs | Generated during use |
| Technical & Usage Data | IP address, device/browser info, interaction logs with our billing portal | Automated collection / cookies |
Note: Stripe acts as a separate controller for certain processing activities. Their Privacy Policy is available at https://stripe.com/privacy.
4. How We Use Your Information
We use your information to:
- Set up and manage your subscription (Art. 6 (1)(b) GDPR – contract).
- Process and collect payments via Stripe (Art. 6 (1)(b) GDPR – contract).
- Provide customer support and notify you of critical changes to your subscription (Art. 6 (1)(b) & (f) GDPR – contract & legitimate interest).
- Maintain our financial and tax records (Art. 6 (1)(c) GDPR – legal obligation).
- Prevent fraud or misuse of our services (Art. 6 (1)(f) GDPR – legitimate interest).
We do not sell or rent your personal information.
5. Sharing & Disclosure
We share information only when necessary:
- Stripe – to process recurring payments.
- Accounting & bookkeeping providers – for invoicing and compliance.
- Cloud‑hosting & backup services – to securely host our systems.
- Legal & regulatory authorities – if required by law or to enforce our Terms.
All service providers are bound by contractual obligations to safeguard your data and may only use it for the purposes we specify.
6. International Data Transfers
Our primary servers are located in the European Union (primary hosting region). Stripe may store data in the United States or other jurisdictions. When data leaves the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent frameworks.
7. Data Retention
We retain:
- Account & transaction records: 6 years after the end of the fiscal year in which the transaction occurred (to meet tax/legal obligations).
- Support records: 2 years after closure.
- Cookies/Analytics data: As per our Cookie Policy.
When retention periods expire, data is securely deleted or anonymised.
8. Security Measures
We implement industry‑standard safeguards, including:
- HTTPS/TLS encryption for all data in transit.
- Role‑based access controls & MFA for staff.
- Annual penetration tests and continuous monitoring.
- Encryption at rest for database backups.
9. Your Rights (UK & EU Residents)
Subject to legal conditions, you have the right to:
- Request access to your personal data.
- Request correction of inaccurate data.
- Request deletion or restriction of processing.
- Object to processing based on legitimate interests.
- Data portability.
- Lodge a complaint with your local supervisory authority (in the UK: the ICO).
To exercise any rights, contact us at bigboss@baseline-commerce.com.
10. Children’s Privacy
Our services are not directed to individuals under 16. We do not knowingly collect information from children. If we learn that we have inadvertently done so, we will delete it promptly.
11. Changes to This Policy
We may update this Policy from time to time. If changes are material, we will give you at least 14 days’ notice via email. The “Last updated” date will always show the revision date.
12. Contact Us
If you have questions about this Policy or our data practices, please reach out to: Email: bigboss@baseline-commerce.com Mail: Data Protection Officer, Barratt Solutions LTD, 128 City Road, London, England, EC1V 2NX
Thank you for trusting Barratt Solutions LTD with your data.