Privacy policy

Last updated: 4 November 2026

Who we are

Bone Idyll Limited, company number 11101402, operates www.boneidyll.co.uk. We are responsible for the personal information we collect and use to run our website, fulfil orders and communicate with you.

For privacy enquiries or to exercise your data protection rights, email hello@boneidyll.co.uk or write to: Privacy enquiries, Bone Idyll Limited, 60 Claremont Road, Surbiton, KT6 4RH, United Kingdom.

Information we collect

Orders and accounts: your name, billing and delivery addresses, email address, telephone number, purchases, payment and transaction information, and any account details you provide. Payments are processed through Shopify and the payment providers available at checkout.
Enquiries: the contact details, messages and other information you give us when you contact us, including information needed to resolve a question, return or complaint.
Marketing preferences: your email address, subscription choices and records of your consent or requests to stop marketing. Our email platform may also record interactions with our emails, such as opens and link clicks, depending on its settings and your privacy choices.
Website activity: technical information such as your IP address, browser and device type, pages viewed, referral information and interactions with our website. Cookies and similar technologies may collect or store this information.

We collect information directly from you and through the services that support our website. If you give us someone else's details, for example a gift recipient's delivery address, please make sure they know you have done so and direct them to this policy.

Why we use your information

We use personal information for the following purposes and on the following legal bases under UK data protection law:

Processing orders and providing customer service: to take payment, deliver purchases, send order updates and deal with returns or order enquiries. This is necessary to perform our contract with you or take steps you request before entering into a contract.
Keeping business records and meeting legal duties: to maintain accounting and tax records and comply with legal requests. We rely on our legal obligations.
Protecting and improving our business: to secure the website, prevent fraud, resolve complaints and understand service problems. We rely on our legitimate interests in running a secure and effective business, balanced against your rights and interests.
Email marketing: to send news and offers when you subscribe. We rely on your consent. You can unsubscribe at any time using the link in an email or by contacting us.
Optional tracking: where analytics, email tracking or advertising technologies require consent, we rely on your consent. You may refuse or withdraw that consent.

We need certain contact, payment and delivery details to process an order. If you do not provide the necessary information, we may be unable to fulfil your purchase. Subscribing to marketing is optional.

Who receives your information

We share relevant information with service providers where needed for the purposes described above. These include:

Shopify: hosting our online store and supporting checkout, orders, payments and store security. Shopify also processes some information for its own purposes, as explained in its Consumer Privacy Policy.
Payment and delivery providers: processing payments and getting orders to you.
Mailchimp: managing email subscriptions and sending marketing communications. See Mailchimp's privacy information.
Google Analytics: helping us understand website usage, subject to applicable privacy choices. See how Google uses information from websites that use its services.
Professional advisers and public authorities: where necessary for accounting, legal advice, compliance, preventing fraud or protecting legal rights.

Our website may also link to external booking, voucher, social media and map services. Those services have their own privacy notices explaining how they handle information you provide to them.

Advertising and sale of data

We do not sell customer personal information to other businesses.

We use Meta advertising and plan to introduce advertising pixels on our website. We do not currently use advertising pixels on this website. Before introducing them, we will update this policy to describe the information shared, the purposes and the choices available to you, and obtain consent where required.

Planned uses include measuring advertising performance and showing relevant adverts on Facebook and Instagram. If introduced, the pixels may share information about website visits, product views and purchases with Meta. You can read Meta's Privacy Policy and manage advertising preferences through your Meta account.

Cookies and similar technologies

Our website uses cookies and similar technologies to support functions such as your basket, checkout, security and privacy preferences. Optional analytics and marketing technologies can also help us understand how the website is used and measure communications.

Where consent is required for optional technologies, you have the right to refuse or withdraw it. You can also manage cookies through your browser settings, although blocking essential cookies may prevent parts of the store from working. For information about Google's browser opt-out tool, visit Google Analytics Opt-out. Contact us if you need help with your privacy choices.

International transfers

Some of our service providers process personal information outside the UK, including in the United States and other countries where they operate. International transfers must be covered by an appropriate legal mechanism, such as UK adequacy regulations or approved contractual safeguards.

Shopify describes its arrangements in its Data Processing Addendum. Mailchimp explains its use of the Data Privacy Framework, including the UK extension, and contractual safeguards in its European data transfer information. You can contact us for more information about safeguards relevant to your information.

How long we keep information

We keep personal information for as long as needed for the purpose for which it was collected. We assess this by considering the type of information, whether an order or enquiry is still being handled, accounting and tax obligations, fraud prevention, and the time needed to resolve disputes or legal claims.

Marketing information is kept while you remain subscribed or while otherwise needed to manage your preferences. If you unsubscribe, we may retain a limited record to make sure your request is respected. Asking us to delete information does not require us to remove records we must retain to meet a legal obligation or establish, exercise or defend legal claims.

Your rights

Depending on the circumstances, you can ask to access your personal information, correct inaccurate information, have information erased, restrict its use, or receive certain information in a portable format. You may also object to processing based on legitimate interests. You can object to direct marketing at any time.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that was lawful before you withdrew consent. Some rights are subject to conditions and exceptions.

To make a request, email hello@boneidyll.co.uk. We may need to verify your identity before disclosing or changing information. We will respond within the period required by applicable data protection law.

Under 18s

Our website and alcoholic products are intended for people aged 18 and over. If you believe someone under 18 has provided personal information to us, please contact us so we can investigate and take appropriate action.

Complaints and changes

Please contact us if you have a concern about how we handle your information. You can also complain to the UK's Information Commissioner's Office at ico.org.uk/make-a-complaint. You do not have to contact us first.

We may update this policy when our services or data practices change. The date at the top shows when it was last updated.