Privacy policy

This privacy policy explains how we collect, use and protect your personal data when you visit this website or place an order, and which rights you have. Last updated: 21 August 2026.

1. Who is responsible

The controller responsible for data processing on this website is:
Justin Brodrecht (sole trader), trading as Bellanio
Friedrich-Ebert-Straße 15, 63500 Seligenstadt, Germany
Email: info@bellanio.com

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation.

2. What data we collect and why

Ordering and contract processing. When you place an order, we collect the data needed to fulfil it: your name, delivery address, email address and the details of your order. Legal basis: performance of a contract (Article 6(1)(b) UK GDPR). Without this data we cannot process your order.

Payment. Payments are processed by the payment service provider you choose at checkout. Your payment details (for example card number) are transmitted directly to the payment provider; we do not receive or store your full payment credentials. We only receive confirmation of the payment and the data needed for bookkeeping. Legal basis: performance of a contract and our legal obligations (Article 6(1)(b) and (c) UK GDPR).

Shipping. To deliver your order, we pass your name, delivery address and, where needed for delivery notifications, your email address to the carrier delivering your parcel. Legal basis: performance of a contract (Article 6(1)(b) UK GDPR).

Contact. When you email us, we process the data you provide (email address, name, content of your message) to answer your enquiry. Legal basis: our legitimate interest in handling your enquiry and, where your enquiry relates to a contract, its performance (Article 6(1)(b) and (f) UK GDPR).

Server logs. When you visit the website, technical data is processed automatically to deliver the site securely (IP address, date and time, browser type, pages accessed). Legal basis: our legitimate interest in providing and securing the website (Article 6(1)(f) UK GDPR).

3. Shopify as our platform

This shop runs on Shopify, an e-commerce platform provided by Shopify International Limited (Ireland) with its group companies, including Shopify Inc. in Canada. Shopify processes personal data on our behalf to host the website, process orders and provide checkout functionality. Data may be processed on servers outside the United Kingdom; Shopify relies on recognised safeguards for such transfers, including adequacy decisions and standard contractual clauses. Further information: Shopify privacy policy.

4. Cookies

This website uses the cookies that are necessary to operate the shop: they keep your basket together, enable the checkout and provide basic security and functionality. In addition, the Shopify platform sets its own first-party cookies (for example for session handling, localisation and basic, aggregated shop statistics). These cookies are set on the basis of our legitimate interest in providing and improving a functioning shop (Article 6(1)(f) UK GDPR).

We do not use any third-party advertising or marketing tracking cookies on this website, and no advertising networks receive data about your visit. Should this change in the future, we will update this policy and ask for your consent where required.

5. How long we keep your data

We keep personal data only as long as needed for the purposes described above. Order and invoice data is retained for the statutory commercial and tax retention periods (up to 10 years). Enquiry correspondence is deleted once the enquiry is fully resolved, unless a contract requires longer retention. Server logs are kept for a short period for security purposes.

6. Who receives your data

We share your data only where necessary to run the shop: with Shopify as our platform provider, with the payment provider you choose at checkout, with the carrier delivering your parcel, and, where legally required, with authorities. We do not sell your personal data.

7. Your rights

You have the following rights regarding your personal data:

  • Right of access to the data we hold about you (Article 15 UK GDPR)
  • Right to rectification of inaccurate data (Article 16 UK GDPR)
  • Right to erasure (Article 17 UK GDPR)
  • Right to restriction of processing (Article 18 UK GDPR)
  • Right to data portability (Article 20 UK GDPR)
  • Right to object to processing based on legitimate interests (Article 21 UK GDPR)

To exercise any of these rights, email us at info@bellanio.com. You also have the right to lodge a complaint with a supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ICO), ico.org.uk. You may also contact the data protection authority responsible for our registered office in Germany.

8. Changes to this policy

We update this privacy policy when our processing or legal requirements change. The current version is always available on this page, with the date of the last update shown at the top.

Related policies

Shipping policy · Refund policy · Terms of service · Legal notice

Contact

Bellanio
Business name: Justin Brodrecht (sole trader)
Business address: Friedrich-Ebert-Straße 15, 63500 Seligenstadt, Germany
Email: info@bellanio.com
Support: Monday to Friday, 9:00 AM to 3:00 PM GMT/BST (UK time)