1. Who we are
BZ Express UK(“we”, “us”, “our”) operates the website BZ Express at Unit 9, Maybells, Commercial Estate, Ripple Road, Barking, Essex, London, IG11 0TP. We are the data controller responsible for the personal data we collect through this site.
You can contact us about this policy or any data-protection question at info@bzexpress.uk or +44 20 3930 0545.
2. What data we collect
We only collect what we need to take and deliver your order. That includes:
- Contact details: full name, delivery address, billing address, email address and phone number.
- Order details: products ordered, prices paid, delivery instructions and any notes you add at checkout.
- Payment metadata: card brand, last four digits and transaction reference. We never see or store your full card number, expiry or CVV; card data is captured directly by our payment processor (Global Payments).
- Account & admin data: email address and an authentication session if you sign in to the admin area.
- Technical data: IP address, browser type, device type and pages visited, collected automatically when you use the site.
- Cookies: a small set of strictly necessary cookies (cart session, admin login, CSRF) needed for the site to function.
3. Why we use your data (lawful basis)
- Performance of a contract: to process and deliver your order, handle payments, send order updates and provide customer service.
- Legal obligation: to keep accounting and tax records as required by UK tax and consumer law.
- Legitimate interests: to keep our website secure, prevent fraud and improve our service.
- Consent,where required, for example before sending any marketing emails (we don't currently send marketing).
4. Who we share your data with
We do not sell your data. We share it only with carefully selected service providers we need to fulfil your order:
- Global Payments, to process card payments securely.
- Our hosting and database providers, for running the website and storing order records.
- Our email/SMTP provider, to send order confirmation, cancellation and refund emails.
- Couriers and delivery partners, so they can deliver your order (name, address and phone number only).
- HMRC and other authorities, where we are legally required to.
5. International transfers
Most of our processors are based in the UK or EEA. Where personal data leaves the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement (IDTA) / Standard Contractual Clauses to ensure equivalent protection.
6. How long we keep your data
- Order and accounting records: 6 years after the order, to meet HMRC requirements.
- Customer support correspondence: up to 2 years after the enquiry is resolved.
- Website logs: typically 30–90 days for security and abuse prevention.
7. Your rights
Under UK GDPR you have the right to: access the personal data we hold about you; ask us to correct it; ask us to delete it (where we're not required to keep it); restrict or object to our processing; and request a portable copy of data you provided.
To exercise any of these rights, email us at info@bzexpress.uk. We'll respond within one month.
8. Complaints
If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put things right first, so please get in touch with us before escalating.
9. Cookies
This site uses only strictly necessary cookies (cart session, admin login, CSRF protection). We do not use third-party advertising or analytics cookies that require consent. If that changes, we'll show a cookie banner and update this policy.
10. Changes to this policy
We may update this policy from time to time, for example, if we change a service provider or add a new feature. We'll update the “Last updated” date at the top of the page and, for significant changes, draw your attention to it.