Privacy Policy

Last updated: September 25, 2026

North Bioko Club (“NBC”, “we”, “us” or “our”) operates this store and website, including its related content, products and services (the “Services”). Our online store is powered by Shopify. We also sell through TikTok Shop.

This Privacy Policy explains how we collect, use and share your personal information when you browse our website, purchase from us, interact with our marketing or contact us.

Who is responsible for your information

North Bioko Club is a UK-based sole trader business and is the data controller for personal information we process to operate our store and manage customer relationships, including orders received through TikTok Shop.

We are registered with the Information Commissioner’s Office (ICO) in respect of our processing of customer data.

For information identifying our legal operator and further contact details, please visit our North Bioko Club - Contact Page.

Some providers, including Shopify, payment providers and advertising platforms, may also act as independent data controllers for particular activities described in their own privacy policies.

Personal information we collect

Depending on how you interact with our Services and your privacy choices, we may collect:

• Contact and delivery information: your name, email address, telephone number, billing address and shipping address.

• Order and transaction information: products purchased, payment status, transaction references, delivery details, returns, exchanges and refunds.

• Payment information: information needed to process purchases and refunds through the payment provider used at checkout. Payment providers process your payment credentials under their own privacy and security arrangements.

• Account information: account identifiers, login information, preferences and settings where you use a customer account.

• Communications: information you provide when contacting us, requesting support or raising a concern.

• Device and usage information: your IP address, browser, device details, cookie identifiers, referring pages and information about your interaction with our website.

• Browsing and interaction information: pages viewed, clicks, scrolling, navigation, products viewed, cart activity and checkout events. Where enabled, Mouseflow may collect interactions for heatmaps and session recordings.

• Marketing information: subscription preferences and, where enabled and permitted, interactions with emails and advertisements, such as opens, clicks and purchases attributed to campaigns.

Some information is necessary to process an order or provide support. Without it, we may be unable to complete your purchase or respond fully to your request.

How we collect your information

We collect information directly from you when you place an order, subscribe to marketing, use a customer account, contact us or otherwise provide information.

We also collect information through cookies, pixels and similar technologies, subject to applicable consent requirements and your choices.

We receive information from providers involved in operating our Services, including Shopify, TikTok Shop, payment providers, delivery providers, analytics services and marketing platforms.

For TikTok Shop purchases, we receive information needed to fulfil your order and manage related customer service. TikTok’s own privacy policy also applies to your use of its platform.

How we use your information

We use personal information to:

• Process payments, fulfil orders and arrange deliveries.

• Manage returns, exchanges and refunds.

• Provide support and communicate about your purchases.

• Maintain customer accounts and remember preferences.

• Understand how visitors use our website and identify usability problems.

• Operate, secure and improve our Services.

• Detect and investigate suspected fraud or misuse.

• Manage marketing subscriptions and send permitted promotional communications.

• Measure advertising performance and, where enabled and permitted, personalise advertising and reach relevant audiences.

• Maintain business records, meet legal obligations and handle disputes.

Our lawful bases for processing

Where UK or European data protection law applies, we rely on the following lawful bases:

• Contract: to process purchases, deliver orders and provide related services.

• Legal obligation: to maintain required records and meet applicable legal requirements.

• Legitimate interests: to operate and protect our business, respond to enquiries, improve our Services and manage disputes, where those interests are not overridden by your rights. We do not use this basis to bypass consent requirements for tracking technologies.

• Consent: where required for cookies, session recording, advertising technologies, marketing communications or other optional processing.

You may withdraw consent at any time. Withdrawal does not affect processing carried out lawfully before you withdrew consent.

Who we share information with

We share information with the following providers where necessary for the purposes described in this policy and subject to applicable privacy choices:

• Shopify: to host and operate our online store and provide related platform services.

• TikTok Shop: to manage purchases and customer service through that platform.

• The payment provider used at checkout: to process payments and refunds.

• Our delivery couriers: to deliver orders and provide delivery updates.

• Mouseflow: to analyse website interactions and help us improve the shopping experience.

• Omnisend: to manage subscribers, send marketing communications and operate marketing automations.

• Google: to provide measurement and advertising services through the Google tags or pixels used on our website.

• TikTok: to measure advertising performance and support advertising through the TikTok Pixel.

• Meta, including Facebook and Instagram: to measure advertising performance and support advertising through the Meta Pixel.

These providers may use authorised service providers of their own. Their roles and processing activities depend on the services supplied and applicable contractual terms.

We do not currently operate a separate loyalty programme or dedicated mobile app, or use a third-party warehouse, separate third-party fraud-detection service or buy-now-pay-later service. Shopify and payment providers may nevertheless perform security and fraud-prevention checks within their services.

We may also disclose information where legally required, in response to valid requests from public authorities, or where necessary to establish, exercise or defend legal claims.

Mouseflow: website analytics and session recordings

We use Mouseflow to understand how visitors interact with our website and identify areas for improvement.

Depending on the features enabled, Mouseflow may generate heatmaps and session recordings from interactions such as clicks, scrolling and navigation. These recordings reconstruct activity on our website; they are not recordings from your camera or microphone.

Information processed may include device and browser details, pages visited, interaction events and technical identifiers. Any collection is subject to applicable consent requirements.

Please avoid entering sensitive information into fields that do not require it. You can manage applicable tracking choices through our website’s privacy or cookie controls.

Omnisend: marketing and communications

We use Omnisend to manage marketing subscriptions, send promotional emails and operate automated communications.

Depending on how you interact with our Services and the features enabled, Omnisend may process contact details, subscription preferences, order history, browsing activity and interactions with marketing messages. This can help us tailor communications, measure campaign performance and send relevant reminders where permitted.

Where enabled and legally permitted, email tracking technologies may indicate whether a message was opened or a link was clicked.

You can unsubscribe from promotional emails using the unsubscribe link in those messages. Essential order and customer service communications may continue after you unsubscribe.

Google, TikTok and Meta advertising technologies

We use Google tags or pixels, the TikTok Pixel and the Meta Pixel to measure website events and advertising performance and, where enabled, support personalised advertising and remarketing.

Depending on their configuration and your choices, these technologies may collect or receive information such as device and browser details, IP addresses, cookie identifiers, pages viewed, product interactions, cart activity and purchase events.

The providers may associate website events with other information they hold, including an account you have with their platform, in accordance with their own privacy policies and your settings.

Our use of the TikTok Pixel is separate from processing orders through TikTok Shop.

Where required by law, advertising tracking is used only with your prior consent. You can manage or withdraw that consent through our website’s privacy or cookie controls.

Cookies and your choices

Our website uses cookies and similar technologies for essential shopping functions and, where enabled, analytics, personalisation and advertising.

Essential technologies support functions such as operating the shopping cart, checkout and security. Optional technologies are subject to applicable consent requirements.

You can manage available choices through the website’s privacy or cookie controls. Where consent is required, declining or withdrawing consent prevents the relevant optional tracking from being used.

Browser settings may also allow you to block or delete cookies, although doing so can affect website functionality. Unsubscribing from marketing emails does not automatically change your website cookie preferences.

Where applicable, you can use our privacy choices page to opt out of data sharing for targeted advertising.

Our relationship with Shopify

Shopify processes personal information to provide and support our online store.

Where Shopify enhanced features are enabled, Shopify may process information about your interactions with our store alongside interactions with other merchants and Shopify. For certain purposes, Shopify acts as an independent data controller and handles requests relating to that processing.

For more information, read the Shopify Consumer Privacy Policy. Shopify’s privacy controls are available through its Privacy Portal.

Special category information

We do not knowingly collect special category information, such as information about your health, racial or ethnic origin, religious beliefs or sexual orientation. We also do not knowingly collect information about criminal convictions or offences.

Please avoid including this information in messages or other submissions unless it is necessary to explain your request.

Children’s privacy

Our Services are intended for people aged 18 and over. We do not knowingly collect personal information from anyone under 18.

If you believe a child has provided personal information to us, please contact us so we can investigate and take appropriate steps to remove it.

How long we keep information

We retain personal information only for as long as necessary for the purposes described in this policy.

Retention depends on the type of information and why it is needed. We consider outstanding orders, customer service needs, account activity, legal record-keeping requirements and the time needed to resolve disputes or legal claims.

Marketing information is retained while needed to manage your subscription or other permitted marketing activity. If you unsubscribe, we may retain limited information to respect your choice.

Analytics, session-recording and advertising information is retained according to the applicable service settings and the purposes for which it was collected.

When information is no longer required, we delete it or anonymise it.

Keeping information secure

We use appropriate technical and organisational measures to protect personal information. However, no website, storage system or method of transmission is completely secure.

Please keep account credentials confidential and avoid sending payment credentials or other sensitive information by email.

International transfers

Our providers may store or process personal information outside the UK or your country of residence.

Where required by applicable law, international transfers are protected through recognised safeguards, such as adequacy decisions, approved standard contractual clauses and applicable UK transfer arrangements.

You can contact us for information about safeguards relevant to your personal information.

Your privacy rights

Depending on your location and the circumstances, you may have the right to:

• Access personal information we hold about you.

• Correct inaccurate or incomplete information.

• Request deletion of your information.

• Restrict how we process your information.

• Receive certain information in a portable format.

• Withdraw consent where processing relies on consent.

• Opt out of certain data sharing or targeted advertising where applicable law provides this right.

Your right to object: You may object to processing based on legitimate interests, depending on your circumstances. You can object to the use of your personal information for direct marketing at any time.

To exercise your rights, email North Bioko Club - Contact Page.

We may need to verify your identity before responding. We will respond within the time required by applicable law and explain any lawful reason why a request cannot be fulfilled. We will not discriminate against you for exercising your rights.

Complaints

If you are concerned about how we handle your personal information, visit our North Bioko Club - Contact Page.

You may complain to the Information Commissioner’s Office (ICO) at any time. You do not need to contact us first. For information about contacting the ICO or another relevant data protection authority, please refer to our Contact Us page.

If you live outside the UK, you may also have the right to complain to your local data protection authority.

Third-party websites

Our Services may contain links to third-party websites or platforms. Their privacy policies govern information you provide to them. Please review those policies before sharing personal information.

Changes to this policy

We may update this Privacy Policy to reflect changes to our practices, Services or legal obligations. We will publish the revised policy here, update the “Last updated” date and provide additional notice where required by law.

Contact

For questions about this Privacy Policy or how we handle your personal information, visit our North Bioko Club - Contact Page.