Privacy policy

Last updated: 18 February 2026

1. Introduction

This Privacy Policy explains how Blue Light Gift CIC, a not-for-profit Community Interest Company limited by guarantee and registered in England and Wales (company number 16127611) (“we”, “us”, “our”), collects, uses and protects personal data when you visit bluelightgift.org.uk, make a purchase, or otherwise interact with us (together, the “Services”).

For the purposes of UK data protection law, we are the data controller. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018.

2. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, legal requirements, or operational reasons. Any updates will be published on this page and the “Last updated” date will be amended.

3. Personal data we collect

We may collect the following categories of personal data:

  • Contact details: name, postal address, email address, telephone number.
  • Order and transaction details: billing and delivery address, items purchased, payment confirmation.
  • Account information: where you create an account (if applicable).
  • Communications: messages you send to us (e.g. customer support enquiries).
  • Technical data: IP address, device and browser information, and usage information collected via cookies and similar technologies.

4. How we collect personal data

  • Directly from you: when you place an order, create an account, or contact us.
  • Automatically: when you use our Site (e.g. via cookies).
  • From third parties: such as Shopify (our ecommerce platform), payment service providers, and delivery/fulfilment partners.

5. How we use your personal data and our lawful bases

We use personal data for the purposes below, relying on the following lawful bases under UK GDPR:

Purpose Lawful basis
Processing orders, taking payment, delivery, returns and refunds Performance of a contract
Customer support and responding to enquiries Legitimate interests
Website security, fraud prevention and misuse detection Legitimate interests
Marketing communications (where permitted) Consent and/or legitimate interests (as applicable)
Legal, regulatory and accounting obligations Legal obligation


6. Marketing preferences

Where we send marketing communications, you can opt out at any time by using the unsubscribe option in the message or by contacting us using the details below. Opting out will not affect service messages (e.g. order confirmations).

7. Cookies

We use cookies and similar technologies to operate and improve our Site, remember preferences, and understand how the Site is used. You can manage cookies through your browser settings. Disabling cookies may affect Site functionality.

For information about cookies used by Shopify, please see: https://www.shopify.com/legal/cookies

8. Who we share personal data with

We may share personal data with trusted third parties where necessary, including:

  • Shopify: to host and operate our online store.
  • Payment service providers: to process payments securely.
  • Delivery and fulfilment partners: to dispatch and deliver orders.
  • Service providers: such as IT, analytics, customer support, and cloud storage providers.
  • Professional advisers and authorities: where required for legal, regulatory, or compliance purposes.

We do not sell your personal data.

9. International transfers

Some of our service providers may process personal data outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR (for example, UK-approved standard contractual clauses or other lawful transfer mechanisms).

10. Data retention

We retain personal data only for as long as necessary for the purposes set out in this Privacy Policy, including to meet legal, accounting, or reporting requirements.

11. Your rights

Under UK data protection law, you have rights including:

  • Access: request a copy of your personal data.
  • Rectification: request correction of inaccurate or incomplete data.
  • Erasure: request deletion of your personal data in certain circumstances.
  • Restriction: request we limit how we use your data in certain circumstances.
  • Objection: object to processing based on legitimate interests in certain circumstances.
  • Withdraw consent: where we rely on consent, you can withdraw it at any time.

12. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

13. Contact us

Blue Light Gift CIC

Company number 16127611

Email: sales@bluelightgift.org.uk

Registered office:
Unit 4
Boundary Way
Hemel Hempstead Industrial Estate
Hemel Hempstead
Hertfordshire
England
HP2 7TE