Privacy Policy

BAY38 Workwear is a trading name of Bay38 Limited (registered in England & Wales, company no. 17218099), the data controller for this site. Short version: we collect what we need to serve you, we don't sell it, and you can change your cookie choice at any time.

What we collect and why

• Account and order details: name, company, email, phone, addresses and order history, to run your account, fulfil orders and provide support (contract).
• Payment data: processed by Stripe, including PayPal and Klarna when you choose them at checkout. We never see or store card numbers.
• Enquiries: whatever you send us, so we can answer.
• Basket reminders: if you give us your email at checkout and leave without ordering, we may email you a reminder about that basket. Every reminder carries an unsubscribe link.
• How the site is used: analytics, so we can see what works and fix what doesn't (legitimate interest).
• Advertising measurement: only if you choose Accept all (consent). See below.

Cookies and tracking

The first time you visit, a bar asks you to choose Accept all or Essential only. Your choice is kept in a cookie for six months.

• Essential, always on: keep you signed in, hold your basket and remember your cookie choice.
• Analytics, on unless you choose Essential only: Google Analytics (with IP addresses anonymised) counts visits and what people do on the site. Microsoft Clarity records how pages are used, such as clicks, taps and scrolling, as session recordings and heatmaps, so we can see where the shop gets in people's way.
• Advertising, only with Accept all: Google Ads and Microsoft Advertising cookies link a purchase to the advert that brought you, so we know which adverts work. With your consent Google and Microsoft may also use this to show you our adverts on other sites. With Essential only, their tags still load but are told not to use advertising cookies.

How to opt out or change your mind

• Change your cookie choice: open cookie settings (also in the footer of every page) and pick again. Choosing Essential only switches analytics and advertising cookies off from that moment and deletes the ones already set.
• Analytics: choose Essential only in cookie settings. You can also block cookies for this site in your browser settings, or install Google's opt-out add-on at tools.google.com/dlpage/gaoptout.
• Personalised adverts: manage them with Google at myadcenter.google.com and with Microsoft at account.microsoft.com/privacy/ad-settings.
• Basket reminder emails: use the unsubscribe link in any reminder.
• Anything else: email us (below) to object to any processing.

Who processes it for us

Carefully chosen providers host and run parts of the service: payment (Stripe, plus PayPal and Klarna when you choose them), hosting and infrastructure (Vercel, Railway, Supabase), images and video (Cloudflare, Cloudinary), email (Google Workspace, Resend), analytics and advertising (Google, Microsoft) and the map on our contact page (Google Maps). Where you accept advertising cookies, Google and Microsoft also use that data under their own privacy statements. Some providers run infrastructure outside the UK; where they do, transfers are covered by UK-approved safeguards (adequacy or standard contractual clauses).

How long we keep it

Order and invoice records: 6 years (tax law). Accounts: while active, deleted on request. Enquiries that go nowhere: up to 2 years. Your cookie choice: six months.

Your rights

Under UK GDPR you can ask for a copy of your data, correction, deletion, restriction, or portability, and object to processing. Email hello@bay38.com and we'll act within one month. Not happy with our answer? You can complain to the ICO (ico.org.uk).