Privacy Policy

Last Updated: September 17, 2026

Bennet & Blake (operated by FF COMMERCE LTD, "we," "us," or "our") operates this store and website, including all related information, content, features, tools, products, and services, to provide you with a curated e-commerce experience (the "Services"). Our storefront is powered by Shopify, which enables us to deliver secure online commerce to you.

This Privacy Policy describes how we collect, use, and disclose your personal data when you visit, use, or make a purchase from bennettandblake.com or otherwise communicate with us. FF COMMERCE LTD is the "data controller" of your personal data for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal data.

1. Personal Data We Collect or Process

Under UK data protection law, "personal data" means any information that identifies or can reasonably be linked to you. Personal data does not include anonymous or de-identified data. Depending on how you interact with our Services, we collect and process the following categories of personal data:

Sources of Personal Data: We collect data directly from you (when creating an account or placing an order), automatically through cookies and device tracking, from our technology service providers, and from business or marketing partners.

2. Lawful Basis & How We Use Your Personal Data

Under the UK GDPR, we may only use your personal data where we have a valid lawful basis for doing so. We rely on the following lawful bases:

• Performance of a Contract: Fulfilling contracts, processing payments, executing orders, managing account credentials, arranging shipping, processing returns/exchanges, and enabling product reviews.
• Consent: Sending promotional communications via email or SMS where you have opted in, and displaying tailored online advertisements based on your shopping activity, which you may withdraw at any time.
• Legitimate Interests: Personalizing product recommendations, authenticating user accounts, securing checkout sessions, detecting and investigating fraudulent or illegal activity, and maintaining our business relationship with you, provided this does not override your own rights and interests.
• Legal Obligation: Complying with applicable UK law, responding to lawful requests from regulators or public authorities, and enforcing our site policies.

3. Disclosure of Personal Data & Shopify Relationship

We disclose personal data to third parties for legitimate operational purposes, including service providers (IT management, payment processors, analytics, customer support, shipping partners), business marketing partners, affiliated corporate entities, or in connection with corporate transactions such as mergers or asset sales. Any such third parties are required to process your data only as instructed by us and in line with applicable data protection law.

Relationship with Shopify: Our store is hosted on Shopify Inc. Shopify collects and processes personal data regarding your access to and use of the Services to support our storefront and provide enhanced e-commerce features, acting as a processor on our behalf. Shopify may process information obtained across multiple merchants to improve its services. For details on how Shopify manages data, review the Shopify Consumer Privacy Policy.

4. Your UK GDPR Rights & Choices

As a UK resident, you have the following statutory rights under the UK GDPR and the Data Protection Act 2018 regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, sometimes known as the "right to be forgotten."
• Right to Restrict Processing: Ask us to pause the processing of your personal data in certain circumstances.
• Right to Data Portability: Request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interests, or to direct marketing at any time.
• Rights Related to Automated Decision-Making: Request human intervention regarding any decision based solely on automated processing that significantly affects you.
• Communication Opt-Out: Unsubscribe from marketing emails anytime via the link displayed at the bottom of our emails.

To exercise any of these rights, email us at info@bennettandblake.com. We will respond within one calendar month, as required by law. If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection, at ico.org.uk.

5. Security, Retention & International Data Transfers

Security & Retention: While we employ industry-standard technical and organizational security measures, no transmission over the internet can be guaranteed as completely secure. We retain personal data only for as long as necessary to maintain accounts, satisfy contractual obligations, or comply with legal rules, in line with our data retention obligations under UK data protection law.

Children's Privacy: Our Services are not intended for children, and we do not knowingly collect personal data from individuals under 13 years of age in accordance with the Data Protection Act 2018.

International Transfers: Personal data may be transferred, stored, and processed outside the United Kingdom. Where cross-border transfers occur outside the UK, we rely on recognized transfer mechanisms, such as the UK International Data Transfer Agreement (IDTA), UK Addendum to the EU Standard Contractual Clauses, or adequacy regulations issued by the UK Government.

Data Controller Profile & Contacts