Privacy Policy

1. Introduction

This privacy policy sets out how Bespoke Exhibits (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit our website at bespokeexhibits.com(“the Site”).

We are committed to ensuring that your privacy is protected. This policy applies only to your use of our Site and does not extend to any websites that are linked to from our Site, whether we provide those links or they are shared by other users.

2. Definitions & Interpretation

In this policy, the following terms shall have the following meanings:

• “Account” means an account required to access and/or use certain areas and features of our Site.
• “Cookie” means a small text file placed on your computer or device by our Site when you visit certain parts of our Site and/or when you use certain features of our Site.
• “Personal Data” means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data, as defined by the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

3. Information About Us

Our Site is owned and operated by Bespoke Exhibits.

• Email address: info@bespokeexhibits.com

4. Your Rights

As a data subject, you have the following rights under the UK GDPR:

• The right to be informed about our collection and use of your personal data.
• The right of access to the personal data we hold about you.
• The right to rectification if any personal data we hold about you is inaccurate or incomplete.
• The right to be forgotten — i.e. the right to ask us to delete or otherwise dispose of any personal data we hold about you.
• The right to restrict the processing of your personal data.
• The right to data portability — obtaining a copy of your personal data to re-use with another service or organisation.
• The right to object to us using your personal data for a particular purpose or purposes.
• Rights with respect to automated decision-making and profiling.

If you wish to exercise any of these rights, please contact us using the details in section 13 below. If you believe that we have not complied with your data protection rights, you have the right to make a complaint to the Information Commissioner's Office (ICO).

5. What Data We Collect

Depending on your use of our Site, we may collect some or all of the following personal data:

• First name and last name
• Email address
• Phone number
• Company/business name
• Billing and delivery address
• Payment information (processed securely via Stripe — we do not store card details)
• IP address
• Web browser type and version
• Which pages you visit on our Site and how you use them

6. How We Use Your Data

We use your personal data for the following purposes:

7. How Long We Keep Your Data

We will not keep your personal data for any longer than is necessary in light of the purpose(s) for which it was first collected. Your data will be retained as follows:

• Account data: retained for the lifetime of your account and for up to 2 years after account closure.
• Order and payment records: retained for 7 years in accordance with HMRC requirements.
• Quote requests and enquiries: retained for 2 years.
• Marketing preferences: retained until you unsubscribe or withdraw consent.

8. How We Store & Secure Your Data

Your data is stored securely using industry-standard measures. We take the following steps to ensure your data is treated securely:

• All data is transmitted over HTTPS (encrypted in transit).
• Passwords are hashed and never stored in plain text.
• Payment information is handled entirely by Stripe; we never store card details on our servers.
• Access to personal data is restricted to authorised personnel only.
• We use reCAPTCHA to prevent automated abuse of our forms and login systems.

9. Who We Share Your Data With

We may share your personal data with the following third parties for the purposes described:

• Stripe — for secure payment processing.
• Google — for website analytics (Google Analytics) and spam protection (reCAPTCHA).
• Resend / SMTP provider — for sending transactional emails (order confirmations, enquiry responses).
• Vercel — our hosting provider, which processes requests to serve the Site.

We will not sell, distribute, or lease your personal data to third parties unless we have your permission or are required by law to do so. We may also share your data if we are involved in a merger, acquisition, or sale of assets.

10. Your Right to Withhold Information

You may access our Site without providing any personal data at all. However, to use certain features such as creating an account, placing an order, or submitting a quote request, you may be required to provide certain personal data.

11. Cookies

Our Site may place and access certain first-party cookies on your computer or device. We use cookies to facilitate and improve your experience of our Site and to provide and improve our services.

We may also use third-party cookies from the following services:

• Google Analytics — to understand how visitors use our Site. These cookies track page views and session duration.
• Google reCAPTCHA — to protect our forms from spam and abuse.
• Stripe — to facilitate secure payment processing at checkout.

You can choose to enable or disable cookies in your internet browser. Most browsers allow some control over cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org.

12. Marketing Communications

We will not send you marketing communications unless you have specifically opted in to receive them. You can opt out of marketing communications at any time by:

• Clicking the “unsubscribe” link in any marketing email.
• Contacting us using the details in section 13 below.

13. Contacting Us

If you have any questions about this privacy policy, about our handling of your personal data, or wish to exercise any of your rights, please contact us:

• By email: info@bespokeexhibits.com

We aim to respond to all legitimate requests within one month. Occasionally it may take longer if your request is particularly complex or you have made a number of requests, in which case we will notify you and keep you updated.

14. Changes to This Policy

We may change this privacy policy from time to time. Any changes will be posted on this page and, where appropriate, notified to you. We recommend that you check this page regularly to keep up to date. This policy was last updated on the date shown at the top of this page.