Privacy policy
Last updated: 17 September 2026
About this policy
Beloucca respects your privacy. This policy explains how BELOUCCA LTD (“Beloucca”, “we”, “us” or “our”) collects, uses and protects personal information when you visit www.beloucca.com, sign up for updates about our launch, or contact us.
Our current website is a prelaunch landing page. This policy covers that page and its launch notification list. We will update our privacy information before introducing purchases, customer accounts or other activities not described here.
Our website can be accessed internationally. Applicable privacy rights and legal requirements depend on your location, our activities and the scope of the relevant law. This policy does not limit any mandatory rights you have.
Who is responsible for your information
BELOUCCA LTD is the controller responsible for the personal information we process for the purposes described in this policy.
- Registered company: BELOUCCA LTD, registered in England and Wales
- Company number: 17338715
- Registered address: Saxon House, 27 Duke Street, Chelmsford, United Kingdom, CM1 1HT
- Website: www.beloucca.com
How to contact us
Until our shop opens, the easiest way to reach us is through social media. Links to our Instagram, TikTok and Facebook accounts appear on our home page at www.beloucca.com, under “Follow the story”. You are welcome to send us a direct message on any of them with a question about your information, and we monitor all three.
You can also contact us:
- Through the contact form at www.beloucca.com/pages/contact
- By post to BELOUCCA LTD, Saxon House, 27 Duke Street, Chelmsford, United Kingdom, CM1 1HT, marking your letter “Privacy”
For a formal request to access, correct or delete your information, we would prefer you use the contact form or write to us, so that there is a clear record and we can verify who you are. We will still accept and act on a request made by direct message.
We will publish a dedicated privacy email address here when one is in place.
Information we collect
We collect information you provide and technical information generated when you use our website.
| Category | Information and source |
|---|---|
| Launch subscription | The email address you enter into our sign-up form. |
| Subscription and consent records | Your subscription status, the date and time you signed up, the consent wording shown to you at the time, the tags applied to your record, and unsubscribe and suppression records. These are held in our Shopify customer records. |
| Correspondence | The contact details and information you choose to include when you write to us, together with our replies. |
| Technical and security information | Information processed by Shopify as our website provider, which may include IP address, browser and device information, timestamps, pages requested and security logs. Shopify sets the categories and retention periods for this data; these are described in Shopify’s own privacy documentation. |
| Cookies and similar technologies | As described in the cookies section below. |
Please do not send us sensitive personal information, identity documents or payment information through the waitlist form. We do not need those details to notify you about our launch.
Providing an email address is voluntary and is not a statutory or contractual requirement. If you do not provide it, you can still browse the landing page, but we cannot send you launch emails.
How and why we use your information
Where UK or EU data protection law applies, we use the following lawful bases.
| Purpose | Information used | Lawful basis |
|---|---|---|
| Send the launch updates you requested, including notification when the website opens | Email address and subscription status | Your consent |
| Record and respect your choices, including avoiding further emails after you unsubscribe | Email address, consent and suppression records | Our legitimate interests in respecting your preferences and demonstrating responsible handling; legal obligation where a specific law requires retention |
| Respond to questions and privacy requests | Contact information and correspondence | Our legitimate interests in answering enquiries; legal obligation for requests we must handle under privacy law |
| Operate and secure the website, prevent abuse and troubleshoot problems | Necessary technical and security information | Our legitimate interests in operating a reliable, secure website; this does not replace any separate consent requirement for device tracking |
| Comply with applicable law and establish, exercise or defend legal claims | Relevant records only | Legal obligation where required; otherwise our legitimate interests in protecting legal rights |
We consider the impact on your rights before relying on legitimate interests. You can ask us for more information or object as explained below.
We do not currently run analytics or advertising tracking of our own on this landing page. If we introduce it, we will update this policy and obtain any consent required before it starts.
Launch emails and your choices
We use your email address to send updates about Beloucca’s launch and to let you know when our website opens, within the scope explained when you sign up.
Joining this list does not automatically enrol you in unrelated marketing or another business’s mailing list. If we want to send ongoing product news and offers beyond your original permission, we will first obtain any additional consent required.
You can withdraw your consent at any time by using the unsubscribe link in our emails or by contacting us. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
We stop launch emails promptly after an unsubscribe request and within applicable legal deadlines. We may retain a limited suppression record so that we do not accidentally add you back to the list.
We have not yet sent any marketing emails. Our emails are sent through Shopify, which by default records whether an email was opened and whether links in it were clicked. We use this only to understand whether our emails are working and to stop sending to addresses that no longer exist. It is not used to build a profile of you, and you can object at any time by unsubscribing or contacting us.
Cookies and similar technologies
Cookies are small files placed on your device by a website. Our landing page uses the following.
- Strictly necessary cookies set by Shopify. These keep the site secure, maintain your session, and remember your cookie preferences. The site cannot function properly without them and they do not require consent.
- Shopify’s own analytics cookies. Shopify sets cookies to count unique and returning visitors and to produce the traffic reports available to us as a merchant. These are set by Shopify as part of the platform rather than by us.
- Web fonts served by Google. Our page loads typefaces from Google’s font service. When your browser requests them, your IP address is transmitted to Google in order to deliver the files. No cookie is set by this, and we receive no data from it.
We do not run our own analytics, advertising pixels, retargeting or social tracking on this page. There are no Meta, TikTok, Google Ads or Pinterest tracking tags installed.
You can delete or block cookies through your browser settings, although blocking strictly necessary cookies can affect how the website works. Email sign-up consent is separate from any consent to cookies.
If we add optional analytics or advertising technologies, we will present a consent control before they are set, and update this section to name the providers, purposes and durations.
Who receives your information
We disclose information only as needed for the purposes described in this policy, to the following categories of recipient.
- Website and email platform: Shopify, which hosts our landing page, stores our subscriber records and sends our emails.
- Domain and DNS provider: Namecheap, which registers our domain, operates our DNS and provides email forwarding for our domain.
- Web font provider: Google, which delivers the typefaces used on our page as described above.
- Professional advisers and public authorities: where reasonably necessary for advice, a legal claim or compliance with applicable law.
- Business transaction parties: if a genuine sale, restructuring or transfer of our business takes place, information may be disclosed where necessary, subject to appropriate confidentiality and privacy safeguards.
Shopify generally processes customer personal data on a merchant’s behalf, but can act as an independent controller for specified services and activities. Its role depends on the services enabled. See Shopify’s Data Processing Addendum and Shopify’s Privacy Policy.
We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.
International processing
We are based in the United Kingdom. Our providers may process information in other countries, where privacy laws may differ from those in your location.
Shopify’s contractual documentation describes international processing, including in Canada, the United States and Singapore, and transfer safeguards such as adequacy decisions, binding corporate rules and standard contractual clauses, depending on the transfer. Details are available in Shopify’s Data Processing Addendum. Google’s font service is operated from the United States.
Where applicable law requires safeguards for an international transfer, we use the safeguards appropriate to that transfer. You can contact us for information about these arrangements and how to obtain a copy of relevant safeguards, subject to lawful redactions.
Signing up is not a waiver of your privacy rights or blanket consent to unprotected overseas transfers.
How long we keep information
We keep personal information only for as long as necessary for the purpose for which we collected it, including applicable legal and recordkeeping needs.
| Record | Retention rule |
|---|---|
| Active launch waitlist | Until you unsubscribe, or until 90 days after the website launches, whichever comes first, unless you separately choose ongoing marketing. If launch is delayed, we review the list at least every six months and delete it if the project is abandoned. |
| General enquiries | Normally up to 12 months after resolution, unless a dispute or legal requirement justifies longer retention. |
| Consent evidence and suppression records | The minimum needed to demonstrate permission and respect opt-outs while relevant. Reviewed annually and deleted when no longer needed. |
| Technical logs, cookies and backups | Held by Shopify under its own retention and backup schedules, which are set by the platform rather than by us and are described in Shopify’s privacy documentation. |
Where we need to retain information for a legal obligation or claim, we restrict its use to that purpose. Information scheduled for deletion from backups is not reused for marketing.
Security
We use reasonable organisational and technical measures appropriate to the information and risks involved. These are intended to prevent unauthorised access, misuse, loss and disclosure. Our website and sign-up form are served over an encrypted connection, and access to our subscriber records is limited and password protected.
No internet transmission or storage system is completely secure. We cannot promise absolute security and will handle personal data incidents in accordance with applicable requirements, including notifying the Information Commissioner’s Office where required.
Your privacy rights
Depending on applicable law and the circumstances, you may have rights to:
- Access: ask whether we process your information and obtain a copy.
- Correction: ask us to correct inaccurate or incomplete information.
- Deletion: ask us to delete information where there is no lawful reason to retain it.
- Restriction and objection: ask us to restrict processing or object to processing based on legitimate interests.
- Portability: receive certain information in a usable format and, where applicable, have it transferred.
- Consent withdrawal: withdraw permission for consent-based processing.
- Marketing choices: stop direct marketing at any time.
- Additional local protections: exercise applicable opt-out, appeal, authorised-agent or other rights available under your local law.
Use the contact form at www.beloucca.com/pages/contact, write to our registered address, or send us a direct message on Instagram, TikTok or Facebook to make a request. We may ask for proportionate information to confirm your identity, but will not request excessive information or require an account simply to unsubscribe.
We respond within the period required by applicable law. Under the UK and EU GDPR this is normally within one month, with a permitted extension for complex or multiple requests. We will explain any applicable extension or lawful refusal.
We do not penalise you for exercising applicable privacy rights. Some rights have legal exceptions, and deleting your email address means we can no longer send you launch updates.
Visitors outside the United Kingdom
We accept launch sign-ups from outside the UK. This section describes how to raise privacy concerns. It does not mean every named jurisdiction’s law automatically applies to Beloucca.
- EU and EEA: where the EU GDPR applies, the rights described above apply subject to its conditions. You may complain to your competent data protection authority, including in the country of your habitual residence, place of work or alleged infringement.
- Other locations: contact us to exercise rights available under the laws applicable to your information, including any local rights concerning consent, access, deletion, objection or complaints. We assess requests under applicable law rather than treating this policy as a waiver of local protections.
Children
Our launch mailing list is intended for adults aged 18 and over. We do not knowingly seek children’s personal information for this list.
If you believe a child has provided personal information, contact us so that we can investigate and take appropriate action, including deletion where appropriate.
Automated decisions
We do not use launch waitlist information to make solely automated decisions that produce legal or similarly significant effects on you. Sending a confirmation or launch email automatically is part of administering the list.
We do not currently segment, profile or personalise our emails. If we begin to do so, we will update this policy first.
External websites
Our landing page contains links to social media platforms. If you follow a link, the destination platform handles information under its own privacy terms.
These are ordinary links only. We do not embed social media widgets, pixels or other tracking from those platforms on our own page.
Complaints and changes
Please contact us if you have a concern. You may also complain to a competent privacy regulator without first contacting us where your applicable law permits it.
For UK concerns, the regulator is the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, ico.org.uk. Local privacy and electronic marketing regulators may also be relevant to visitors in other countries.
We may update this policy when our practices or applicable requirements change. We will display the updated date and provide additional notice or request new consent where required. Continued browsing does not by itself constitute consent to new processing.