Privacy policy.

What we collect

• Contact form: name, email and message, used only to reply; deleted within twelve months.
• Newsletter: your email address, until you unsubscribe.
• Server logs: IP address, browser type, pages requested and timestamps, kept by our host for security for up to 30 days.
• Analytics (optional): aggregated, anonymised page-view data if you accept analytics cookies.

We do not collect payment details, store account details or special-category data, and we do not sell personal data.

Legal basis

Replying to your message and keeping the site secure: our legitimate interest. Newsletter and analytics: your consent, which you can withdraw at any time.

Third parties

Fonts are loaded from Google Fonts, which receives your IP address to serve the files. Store links lead to third-party sites with their own policies. Affiliate links may pass an anonymous referral identifier; they do not pass your personal details.

Your rights

You can ask what data we hold, have it corrected or deleted, restrict processing, or receive a copy. Email desk@boughtandheld.com; we respond within one month. You can also complain to your local data protection authority.