Privacy policy

Privacy Policy

Last updated: 21 October 2026

1. Who we are

This store, wovenrove.com, is operated by BINGAI SOLUTIONS LTD, trading as Woven Rove (“we”, “us”, “our”).

For the purposes of applicable data protection laws, including the UK GDPR and the EU GDPR, BINGAI SOLUTIONS LTD is the data controller of the personal information described in this policy.

  • Legal entity: BINGAI SOLUTIONS LTD
  • Company registration number: 16557452
  • Registered in: England and Wales
  • Data protection contact: support@wovenrove.com — please use the subject line “Data Protection Request”
  • Telephone: +44 7871 312201

We have not appointed a statutory Data Protection Officer. Data protection enquiries are handled by our operations lead, who can be reached through the contact details above.

2. What we collect

Depending on how you interact with us, we may collect:

  • Contact and identity details: name, email address, telephone number, and delivery and billing addresses.
  • Order details: what you bought, order value, currency, delivery method, order number and your correspondence with us.
  • Payment details: the method used and the last four digits of the card. We never receive or store your full card number or security code. Card details are entered on fields hosted by our payment provider.
  • Delivery and returns data: tracking numbers, delivery status, and information needed to receive and process a return.
  • Technical and device data: IP address, device and browser type, operating system, pages viewed, referring URL, and timestamps.
  • Marketing preferences: whether you have subscribed to our email list, and your interactions with those emails.

We do not collect special category data such as health data, and we do not ask for it. We do not store full card numbers.

3. Where it comes from

  • Directly from you, when you place an order, contact us, subscribe to our emails, or return an item.
  • Automatically, from your device and browser as you use the store (cookies and similar technologies).
  • From our service providers, such as our payment provider (confirming that a payment succeeded) and our delivery carriers (tracking and delivery status).

4. Why we use it, and on what basis

  • To fulfil your order — taking payment, packing, shipping, customs clearance, delivery confirmation, and handling returns and refunds. Legal basis: performance of a contract.
  • To provide customer support — answering questions, resolving delivery problems and disputes, and keeping a record of our correspondence. Legal basis: performance of a contract, and our legitimate interest in resolving issues fairly.
  • To meet legal and accounting obligations — tax, customs, consumer law and record-keeping. Legal basis: compliance with a legal obligation.
  • To prevent fraud and misuse — screening orders and protecting the store. Legal basis: our legitimate interest in preventing fraud.
  • To improve the store — understanding which pages and products are used, and fixing problems. Legal basis: our legitimate interest in running and improving our business, or your consent where cookies require it.
  • To send marketing emails — only where you have subscribed. Legal basis: consent, which you can withdraw at any time using the unsubscribe link in any email or by contacting us.
  • To advertise — measuring and targeting advertising on third-party platforms where permitted, subject to your consent where required.

5. Cookies and analytics

We use cookies and similar technologies that are necessary for the store to work (such as keeping your cart and completing checkout), and, where you consent, cookies used for analytics and advertising measurement. You can block or delete cookies in your browser settings; blocking essential cookies may prevent checkout from working. Where consent is required by law, we ask for it before setting non-essential cookies.

6. Who we share it with

We do not sell your personal information, and we do not share it for payment. We share it only with providers who help us run the store, and only as far as needed:

  • Our ecommerce platform, Shopify, which hosts the store and processes orders and payments.
  • Payment providers, to authorise, capture and refund payments, and to screen for fraud.
  • Delivery carriers and customs brokers, to deliver your parcel and clear it through customs (this includes sharing your name, address, telephone number and the contents and value of the parcel).
  • Our email and marketing provider, if you have subscribed to our emails.
  • Analytics and advertising providers, in aggregated or pseudonymised form, subject to your consent where required.
  • Professional advisers and authorities, where we are required by law, or need to establish or defend a legal claim.

Our providers are only permitted to use your information to provide their service to us, not for their own marketing.

7. International transfers

We are based in the United Kingdom, our store is hosted by Shopify, and our order fulfilment and returns facility is in Chengdu, China. Your information may therefore be transferred to, stored in and processed in countries outside the UK and the EEA, including the United States and China.

Where we transfer personal information out of the UK or the EEA, we rely on recognised transfer mechanisms — the UK International Data Transfer Addendum, the European Commission’s Standard Contractual Clauses, or an adequacy regulation where one applies — together with appropriate technical and organisational safeguards.

8. How long we keep it

  • Order and transaction records: kept for as long as needed for tax, accounting and consumer-law purposes, generally six years from the end of the relevant financial year.
  • Customer support correspondence: kept for up to three years after the matter is resolved.
  • Marketing subscription data: kept until you unsubscribe, plus a short suppression record so we do not contact you again.
  • Analytics data: kept in identifiable form for no longer than 14 months.

9. Your rights

If you are in the UK or the EEA, you have the right to: access your personal information; have inaccurate information corrected; have information erased; restrict or object to processing; receive your information in a portable format; and withdraw consent at any time where processing is based on consent. Withdrawing consent does not affect processing carried out before withdrawal.

If you are a resident of a US state with a consumer privacy law (for example California, Colorado, Connecticut, Virginia or Utah), you may have the right to know what we collect, to request deletion or correction, to obtain a copy, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising those rights. We do not sell personal information and we do not share it for cross-context behavioural advertising where you have opted out.

To exercise any right, email support@wovenrove.com with the subject line “Data Protection Request”. We may need to verify your identity before acting, and we respond within the period required by applicable law (normally one month under UK/EU law, or 45 days under US state laws).

10. Security

The store is served over HTTPS with TLS encryption. Card details are handled by our payment provider and never stored on our systems. Access to order data is restricted to staff who need it. No system is perfectly secure, so please do not send sensitive information by unencrypted email.

11. Children

This store is not intended for children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Automated decision-making

We do not make decisions producing legal or similarly significant effects about you by automated means alone. Our payment provider may run automated fraud checks; a declined payment can be reviewed by contacting us.

13. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The revised version will be posted on this page with a new “Last updated” date. Material changes will be notified where required by law.

14. Contact and complaints

Questions, requests and complaints about privacy should be sent to:

BINGAI SOLUTIONS LTD (trading as Woven Rove)
Company No. 16557452
Email: support@wovenrove.com — subject line “Data Protection Request”
Phone: +44 7871 312201

We will always try to resolve your concern first. If you are in the UK, you also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. If you are in the EEA, you may complain to your national data protection authority.