GDPR Policy
This GDPR Policy explains how BagsBoards, operated by BAGS & BOARDS, LLC ("BagsBoards", "we", "us", or "our"), collects, uses, stores, shares, and protects personal information when the United Kingdom General Data Protection Regulation ("UK GDPR"), the European Union General Data Protection Regulation ("EU GDPR"), or other applicable data-protection laws apply.
This GDPR Policy should be read together with our Privacy Policy and Cookie Policy.
1. Data Controller
For personal information collected through https://bagsboards.shop, the data controller is:
BAGS & BOARDS, LLC
1201 Elegance Ct.
Orlando, FL 32828
United States
Email: contact@bagsboards.shop
Phone: +19549001988
Support Hours:
Monday – Friday, 9:00 AM – 5:00 PM ET
2. Personal Information We Collect
Depending on how you interact with our Site, we may collect the following categories of personal information:
2.1 Contact Information
• Full name.
• Email address.
• Telephone number.
• Billing address.
• Shipping address.
2.2 Order and Transaction Information
• Products purchased or returned.
• Order number and order status.
• Billing and shipping details.
• Transaction date and amount.
• Refund, cancellation, or return information.
• Communications concerning an order.
Payments are processed through Shopify and enabled payment-service providers. We do not normally receive or store complete payment-card details.
2.3 Account Information
When customer-account features are available, we may collect:
• Account name.
• Email address.
• Login and authentication information.
• Saved addresses.
• Order history.
• Account preferences.
2.4 Communications
We may collect information that you provide when you:
• Contact customer support.
• Submit a contact form.
• Ask a question about a product.
• Request a return, refund, or cancellation.
• Report a problem with an order.
• Respond to a survey or customer-service request.
2.5 Device and Usage Information
When you visit the Site, we or our service providers may automatically collect information such as:
• Internet Protocol address.
• Browser type.
• Device type.
• Operating system.
• General location derived from an IP address.
• Pages viewed.
• Products viewed.
• Referring website.
• Date and time of access.
• Shopping-cart activity.
• Cookie and privacy preferences.
• Website-performance and security information.
Further information about Cookies is available in our Cookie Policy.
2.6 Marketing Information
Where marketing features are enabled, we may collect:
• Email-marketing preferences.
• Advertising and Cookie preferences.
• Information about interactions with marketing communications.
• Records of consent or withdrawal of consent.
3. How We Collect Personal Information
We may collect personal information:
• Directly from you when you place an order, create an account, contact us, or submit information through the Site.
• Automatically through Cookies and similar technologies.
• From Shopify, payment processors, shipping providers, analytics providers, fraud-prevention services, and other service providers involved in operating the store.
• From advertising or marketing services where enabled and permitted by applicable law.
4. Purposes and Lawful Bases
We process personal information only when we have an applicable lawful basis.
4.1 Performance of a Contract
We may process personal information when necessary to:
• Process and deliver an order.
• Confirm payment and transaction details.
• Provide order tracking.
• Handle returns, refunds, cancellations, and customer requests.
• Communicate with you about an order.
• Provide customer-account features.
• Take steps requested by you before entering into a transaction.
4.2 Legal Obligations
We may process personal information when necessary to:
• Maintain tax, accounting, and transaction records.
• Respond to lawful requests from public authorities.
• Meet consumer-protection obligations.
• Comply with applicable laws, regulations, court orders, or legal proceedings.
• Prevent or investigate unlawful activity where required by law.
4.3 Legitimate Interests
We may process personal information for legitimate business interests, provided that those interests are not overridden by your rights and freedoms.
These interests may include:
• Operating and improving the Site.
• Providing customer support.
• Protecting customers, the Site, and our business against fraud or misuse.
• Maintaining website and account security.
• Understanding store performance.
• Managing business records.
• Establishing, exercising, or defending legal claims.
• Improving products, services, and customer experience.
4.4 Consent
Where required, we may rely on your consent to:
• Use non-essential analytics Cookies.
• Use advertising or marketing Cookies.
• Send certain marketing communications.
• Process information for another purpose clearly explained when consent is requested.
You may withdraw consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.
5. How We Use Personal Information
We may use personal information to:
• Operate the BagsBoards online store.
• Display products and maintain shopping-cart functionality.
• Process payments and orders.
• Arrange shipping and delivery.
• Provide tracking information.
• Process returns, refunds, and cancellations.
• Verify transactions and reduce fraud.
• Communicate with customers.
• Respond to questions and support requests.
• Maintain customer accounts.
• Improve the Site and customer experience.
• Measure website performance.
• Comply with legal, accounting, tax, and regulatory requirements.
• Protect our legal rights and the security of our Services.
6. Sharing Personal Information
We may share personal information with service providers only when reasonably necessary to operate the store, complete transactions, provide customer service, or comply with applicable law.
Recipients may include:
• Shopify, which hosts and supports our e-commerce store.
• Payment processors and financial-service providers.
• Shipping, delivery, and fulfillment providers.
• Fraud-prevention and security providers.
• Website-hosting and technical-support providers.
• Analytics providers where enabled.
• Advertising and marketing providers where permitted.
• Professional advisers such as accountants, insurers, or legal advisers.
• Public authorities where disclosure is legally required.
Service providers may process personal information according to their own privacy notices or under contractual obligations applicable to the services they provide.
We may also transfer information as part of a merger, acquisition, reorganization, financing, sale of assets, or similar business transaction, subject to applicable data-protection requirements.
7. International Data Transfers
BAGS & BOARDS, LLC is located in the United States, and some of our service providers may process personal information in the United States, Canada, the United Kingdom, the European Economic Area, or other countries.
When applicable data-protection law requires safeguards for an international transfer, we or our service providers may rely on:
• An adequacy decision.
• Approved standard contractual clauses.
• The United Kingdom International Data Transfer Agreement or applicable UK addendum.
• Another transfer mechanism permitted by applicable law.
The data-protection laws of a destination country may differ from those in your country.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.
Retention periods may depend on:
• The duration of our relationship with you.
• Order, payment, delivery, return, and refund requirements.
• Tax, accounting, and legal obligations.
• Fraud-prevention and security needs.
• Applicable limitation periods.
• The need to establish, exercise, or defend legal claims.
• Whether you maintain a customer account.
• Whether consent remains valid.
When personal information is no longer required, we may delete, anonymize, or securely restrict access to it, subject to applicable legal obligations.
9. Your Data-Protection Rights
Depending on your location and applicable law, you may have the following rights:
9.1 Right to Be Informed
You may request information about how and why we process your personal information.
9.2 Right of Access
You may request confirmation that we process your personal information and request a copy of eligible personal information.
9.3 Right to Rectification
You may request correction of inaccurate personal information or completion of incomplete information.
9.4 Right to Erasure
You may request deletion of eligible personal information in circumstances provided by applicable law.
This right is not absolute. We may retain information where necessary for legal obligations, transaction records, fraud prevention, dispute resolution, or legal claims.
9.5 Right to Restrict Processing
You may request that we restrict processing in certain circumstances, including while the accuracy or lawfulness of processing is being reviewed.
9.6 Right to Data Portability
Where applicable, you may request certain personal information in a structured, commonly used, and machine-readable format or request that it be transferred to another controller where technically feasible.
9.7 Right to Object
You may object to processing based on legitimate interests in certain circumstances.
You may object at any time to the use of personal information for direct marketing.
9.8 Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.
9.9 Rights Concerning Automated Decisions
Where applicable, you may have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.
10. Submitting a Data Request
To exercise an applicable data-protection right, contact us at:
Email: contact@bagsboards.shop
Please include:
• Your full name.
• The email address associated with your order or account.
• Your order number, where relevant.
• A clear description of your request.
• The country or region in which you reside.
We may request reasonable information to verify your identity and protect personal information against unauthorized access or disclosure.
We will respond within the period required by applicable law. Complex or multiple requests may require additional time where permitted, and we will inform you when an extension applies.
Data-protection requests are normally handled without charge. A reasonable fee may apply, or a request may be refused, where permitted by law, if it is manifestly unfounded, excessive, or repetitive.
11. Marketing Preferences
You may unsubscribe from marketing emails by using the unsubscribe option included in the communication or by contacting us.
Unsubscribing from marketing does not prevent us from sending necessary transactional or service messages concerning an order, payment, delivery, return, refund, security matter, or customer-support request.
12. Cookie Preferences
Where a Cookie banner or privacy-preference tool is available, you may use it to manage non-essential Cookies.
Strictly necessary Cookies may continue to operate because they are required for shopping-cart functionality, checkout, security, account access, and other essential store features.
Further information is available in our Cookie Policy.
13. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse.
No online service or electronic transmission is completely secure. You should protect your account credentials and contact us if you believe that your information or account has been compromised.
14. Children’s Privacy
The Site is not directed toward children, and we do not knowingly collect personal information from children in violation of applicable law.
A parent or legal guardian who believes that a child has provided personal information may contact us to request review and, where appropriate, deletion.
15. Complaints
Please contact us first so that we can review and address your concern.
Individuals in the United Kingdom may also have the right to submit a complaint to the Information Commissioner’s Office.
Individuals in the European Economic Area may have the right to submit a complaint to the data-protection supervisory authority in the country where they live, work, or believe an infringement occurred.
16. Relationship With Other Policies
This GDPR Policy supplements our Privacy Policy and Cookie Policy.
Where another policy provides more specific information about a particular processing activity, that specific information should be read together with this GDPR Policy.
17. Updates to This GDPR Policy
We may update this GDPR Policy to reflect changes to our services, technology, service providers, legal obligations, or business practices.
The updated version will be posted on this page with a revised “Last Updated” date.
18. Contact Us
Questions, complaints, and data-protection requests may be submitted to:
BAGS & BOARDS, LLC
1201 Elegance Ct.
Orlando, FL 32828
United States
Email: contact@bagsboards.shop
Phone: +19549001988
Support Hours:
Monday – Friday, 9:00 AM – 5:00 PM ET
Response Target:
Within 1 business day