Privacy policy

Last updated: July 25, 2025

Bytehaus operates this store and website to provide customers worldwide with a specialised shopping experience for storage drives and related products (the "Services"). This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website, make a purchase, or communicate with us, regardless of where you are located.

Please read this Privacy Policy carefully. By using our Services, you acknowledge that you understand how we collect, use, and share your information as described below. This policy complies with applicable privacy laws in the jurisdictions where we operate and sell our products.

Personal Information We Collect

Personal information means information that identifies or can reasonably be linked to you. We may collect the following types of personal information:

Contact Details: Your name, address, billing address, delivery address, phone number, and email address.

Payment Information: Credit card, debit card, and payment account details, transaction information, and payment confirmation details.

Account Information: Your username, password, security questions, and account preferences.

Order Information: Items you view, add to your basket, purchase, return, or exchange, and your order history.

Communications: Information you provide when contacting our customer support or sending us enquiries.

Technical Information: Information about your device, browser, IP address, and how you interact with our website.

How We Collect Your Information

We collect personal information:

Directly from you when you create an account, place an order, or contact us
Automatically through your use of our website via cookies and similar technologies
From our service providers who help us process payments and fulfil orders
From delivery partners who help us ship your storage drives

How We Use Your Personal Information

We use your personal information to:

Provide Our Services: Process your orders, arrange delivery of storage drives, manage your account, handle returns and exchanges, and provide customer support.

Improve Your Experience: Remember your preferences, recommend suitable storage solutions, and customise your shopping experience.

Marketing: Send you promotional emails about new storage products, special offers, and industry updates (you can opt out at any time).

Security and Fraud Prevention: Protect your account, detect suspicious activity, and ensure secure transactions.

Legal Compliance: Meet our legal obligations and respond to valid legal requests.

Legal Basis for Processing

The legal basis for processing your personal information depends on your location and the specific information involved:

Contract performance: To fulfil our sales contract with you (processing orders, delivery, customer service)
Legitimate interests: To improve our services, prevent fraud, and conduct marketing (where permitted)
Consent: For marketing communications and cookies (where required by local law)
Legal obligation: To comply with tax, accounting, and other legal requirements

How We Share Your Information

We may share your personal information with:

Shopify: Our e-commerce platform provider who helps us operate our online store.

Service Providers: Payment processors, delivery companies, IT support providers, and other companies that help us run our business.

Marketing Partners: To show you relevant advertisements for storage products (you can opt out of targeted advertising).

Legal Requirements: When required by law, to protect our rights, or in connection with business transactions.

We do not sell your personal information to third parties for their own marketing purposes.

Your Rights

Your privacy rights depend on where you live. You may have some or all of the following rights:

Access/Know: Request a copy of the personal information we hold about you.

Correction: Ask us to correct inaccurate information.

Deletion: Request that we delete your personal information.

Portability: Receive a copy of your information in a commonly used format.

Opt-out of Sale/Sharing: Stop the sharing of your information for targeted advertising (required by some US state laws).

Marketing Preferences: Unsubscribe from promotional emails at any time.

Additional Rights for UK/EU Residents:

Object to certain types of processing
Restrict processing in specific circumstances
Withdraw consent where we rely on it
Lodge complaints with your local data protection authority

Additional Rights for US Residents:

California residents have specific rights under the CCPA/CPRA
Residents of Virginia, Colorado, Connecticut, and other states may have additional rights under their state privacy laws
Right to non-discrimination for exercising privacy rights

Additional Rights for Canadian Residents:

Rights under PIPEDA and provincial privacy laws where applicable

Additional Rights for Australian Residents:

Rights under the Australian Privacy Act where applicable

Data Security and Retention

We implement appropriate security measures to protect your personal information, though no system is completely secure.

We retain your information for as long as necessary to:

Provide our services and maintain your account
Comply with legal obligations (which may vary by jurisdiction)
Resolve disputes and enforce our agreements
Meet tax and accounting requirements

Specific retention periods may vary based on your location and applicable local laws.

International Data Transfers

As we serve customers globally, your personal information may be transferred to, stored, and processed in countries outside your home country, including the United Kingdom, United States, and other countries where our service providers operate.

When we transfer your information internationally, we ensure appropriate safeguards are in place:

For transfers from the UK/EU: We use Standard Contractual Clauses approved by UK/EU authorities or transfer to countries with adequacy decisions
For transfers from other countries: We implement appropriate safeguards as required by local laws
All our service providers are contractually required to provide adequate protection for your personal information

Cookies and Tracking

We use cookies and similar technologies to improve your experience, remember your preferences, and analyse website usage. You can manage your cookie preferences through your browser settings.

Children's Privacy

Our services are not intended for children under 18, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll post any changes on this page and update the "Last updated" date. For significant changes, we'll provide additional notice as required by law.

Exercising Your Rights

To exercise any of your privacy rights, please contact us using the details below. We may need to verify your identity before processing your request. We will respond within the timeframes required by applicable law in your jurisdiction.

If you are using an authorised agent to make a request on your behalf, we may require proof of authorisation and verification of your identity.

Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us:

Email: hello@bytehaus.co.uk
Address: 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom

For data protection matters, we are the data controller of your personal information.

For customers in specific regions:

EU residents: You may also contact your local data protection authority
California residents: You have the right to lodge complaints with the California Attorney General
Canadian residents: You may contact the Privacy Commissioner of Canada or your provincial privacy commissioner
Australian residents: You may contact the Office of the Australian Information Commissioner

This policy is designed to comply with privacy laws worldwide, including UK GDPR, EU GDPR, California CCPA/CPRA, Canadian PIPEDA, Australian Privacy Act, and other applicable regional privacy laws.