Privacy policy
Privacy Policy — Rose & Co Bare®
Last updated: 14/05/2026
Rose & Co Bare® (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains how we collect, use, and protect your information when you visit our website or make a purchase.
1. Who We Are
Rose & Co Bare® is based in the United Kingdom and acts as the Data Controller for your personal data.
Contact: hello@roseandcobare.co.uk
2. Information We Collect
We may collect personal data when you:
· Browse our website
· Place an order
· Create an account
· Subscribe to our mailing list
· Contact us
· Interact with our website (including via cookies)
This may include:
Personal details:
· Name
· Email address
· Phone number
· Billing and delivery address
Order information:
· Products purchased
· Order value
· Delivery details
· Payment method (we do not store full card details)
Technical data:
· IP address
· Device and browser type
· Location data
· Website usage (pages viewed)
Marketing data:
· Email preferences
· Interactions with emails and content
3. How We Use Your Information
We use your data to:
Process Orders
· Confirm, produce, and deliver your order
· Provide updates and manage returns
Customer Support
· Respond to enquiries
· Resolve issues
Improve Our Website
· Analyse usage and performance
· Improve user experience
Marketing (with consent)
· Send updates, offers, and product launches
· You may unsubscribe at any time
Legal & Security
· Prevent fraud
· Comply with legal obligations
We never sell or rent your personal data.
4. Legal Basis for Processing
We process your data under:
· Contractual necessity (to fulfil orders)
· Consent (for marketing communications)
· Legitimate interests (website improvement and security)
· Legal obligations (e.g. accounting records)
5. Cookies & Tracking
We use cookies and similar technologies to:
· Enable essential website functionality
· Analyse performance (e.g. Shopify / Google Analytics)
· Support marketing (if enabled)
You can manage your preferences through your browser or our cookie banner.
For more details, see our Cookie Policy.
6. Sharing Your Information
We only share data where necessary with trusted providers, including:
· Shopify (website and checkout)
· Payment providers (e.g. Shopify Payments, PayPal)
· Email platforms (if used)
· Delivery couriers
· Analytics providers
These partners process data securely and only for the purposes required.
7. International Data Transfers
Some providers may process data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place, such as:
· UK adequacy regulations
· Standard contractual clauses
8. Data Retention
We retain personal data only as long as necessary:
· Orders: up to 6 years (legal requirement)
· Marketing data: until you unsubscribe
· Analytics: limited retention depending on provider
Data is securely deleted when no longer required.
9. Your Rights
Under UK GDPR, you have the right to:
· Access your data
· Correct inaccuracies
· Request deletion
· Restrict or object to processing
· Withdraw consent
· Request a copy of your data
To exercise your rights, contact: hello@roseandcobare.co.uk
We will respond within 30 days.
10. Marketing Preferences
You will only receive marketing communications if you have opted in.
You can unsubscribe at any time via:
· The unsubscribe link in emails
· Contacting us directly
11. Security
We take appropriate measures to protect your data, including:
· Secure payment processing
· Encrypted systems
· Restricted access controls
While no system is completely secure, we take all reasonable steps to safeguard your information.
12. Third-Party Links
Our website may link to third-party websites.
We are not responsible for their content or privacy practices.
13. Changes to This Policy
We may update this policy from time to time.
The latest version will always be available on this page.
14. Contact
For any privacy-related enquiries: hello@roseandcobare.co.uk
15. Your Statutory Rights
Nothing in this policy affects your statutory rights under applicable data protection laws.