Privacy matters. This page may not look as exciting as the rest, but it's just as important because it describes how your Personal Data are collected, used, and shared when you visit or make a purchase from, subscribe to our newsletter, read our emails, create an account on our Website, contact customer services, enter a competition, or register for a promotion.

The website (“Website”) is the website of Bocka Bocka, which is the trading name of Bocka Bocka Ltd ("We", "Us", "Our"), a company registered in England and Wales under company number 10180471.

Bocka Bocka Ltd is the Data Controller and is responsible for your Personal Data and can be contacted using the contact information in Section 13 below.

Identity, Contact, Financial, Marketing, Profile and Transaction Data

When you make a purchase or attempt to make a purchase through the Website, subscribe to our newsletter, create an account on our Website, contact customer services, enter a competition, or register for a promotion, we collect certain information from you, including your name, billing address, postal address, payment details, email address, and contact phone number. We refer to this information as “Identity, Contact, Financial, Marketing, Profile and Transaction Data”.

Technical and Usage Data

When you visit the Website or read our emails, we automatically collect certain information such as your device, web browser, and IP address. Additionally, as you use the Website we collect information about what web pages you view and how you interact with them. We refer to this automatically-collected information as “Technical and Usage Data”.

When we talk about “Personal Data” in this Privacy Policy, we’re talking about both Identity, Contact, Financial, Marketing, Profile and Transaction Data and Technical and Usage Data.

To be absolutely clear, we do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data), nor do we collect any information about criminal convictions and offences. Finally, we don’t knowingly collect Personal Data relating to individuals under the age of 16.

We primarily use the Identity, Contact, Financial, Marketing, Profile and Transaction Data that we collect to fulfill orders placed through the Website (this includes processing your payment, arranging for delivery, and providing you with order confirmation). We also use them to:

- Communicate with you;
- Screen orders for potential risk and/or fraud;
- Provide you with information or advertising relating to our products; and

- Process Exchanges or Returns and address complaints and queries.

We use the Technical and Usage Data that we collect to:

- Improve and optimise our Website;

- Screen orders for potential risk and/or fraud; and

- Assess the success of our marketing and advertising campaigns.

We share your Personal Data with third parties to help us use your Personal Data in the ways described in Section 3 above. For example, we use Shopify Inc to power our online store (you can read more about how Shopify uses your Personal Data here: and Google Analytics to help us understand how you use the Website (you can read more about how Google uses your Personal Data here:

We may share your Personal Data with credit reference, fraud protection, and law enforcement agencies where it’s necessary for us to do so in order to comply with a legal obligation, to enforce or apply our terms and conditions, to protect the rights, property, or safety of Bocka Bocka Ltd, our customers, or others, or where it’s fair and reasonable for us to do so and where there’s no disadvantage to you.

If Bocka Bocka Ltd is acquired by, or sells substantially all of its assets to, a new owner, your Personal Data will be transferred to the new owner, to be used for the purposes set out in this Privacy Policy. If your Personal Data becomes subject to a different Privacy Policy, we’ll notify you before they’re transferred.

We don’t share, disclose, sell, rent, or otherwise provide your Personal Data to other companies for the marketing of their own products or services.

We use cookies to enable our Website to function correctly and to provide you with a better and more personalised experience. Along with our third-party advertising partners, we also use cookies, and other information from your browser and/or device, to provide you with targeted advertising.

You can refuse to accept cookies by changing the settings on your browser. Please note that this may, however, mean you are unable to use certain parts of our Website.

You can read more about how we use cookies in our Cookie Policy.

If you’re a resident of the EEA, you have certain rights under European law with respect to your Personal Data, including the right to request access to, correct, amend, transfer, or delete your Personal Data. If you’d like to exercise any of these rights, please get in touch using the contact information in Section 13 below.

The Personal Data that we collect about you may be transferred to, stored in, or processed in a country outside the EEA, either by us or by any of the third parties with whom we share your Personal Data. By submitting your Personal Data, you agree to this transfer, storing or processing.

Where your Personal Data is transferred to a country outside of the EEA and that country is not subject to an EU adequacy decision, we will ensure they are protected by appropriate safeguards and that they continue to be governed by this Privacy Policy. These safeguards can be in the form of EU-approved standard contractual clauses, a Privacy Shield certification, or a supplier’s Binding Corporate Rules.

When you place an order online you’ll also be given the option to opt in for email marketing. We won’t send you email marketing unless you tick the box to ask us to, or unless you’ve asked us to previously.

You’ll also receive marketing communications from us if you’ve provided us with your details when you subscribed to our newsletter, entered a competition or registered for a promotion, and gave us your consent as part of that process.

You can opt out of email marketing at any time by clicking the Unsubscribe link at the bottom of any email, or by contacting us using the details in Section 13 below.

Opting out of email marketing will not prevent you receiving non-marketing emails from us, for example relating to products ordered from us.

This Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy notice of every website you visit.

We will only retain your Personal Data as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

We’ve put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Data on our instructions and they’re subject to a duty of confidentiality.

However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we can’t guarantee the absolute security of your Personal Data. We’ve put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where we’re legally required to do so.

We never retain your payment details. Rather, payment details are sent to and managed securely by Shopify Payments, a third-party payment processor. Shopify performs annual audits to ensure that their handling of your payment details aligns with industry guidelines. Shopify is certified as a PCI DSS Level 1 compliant service provider, which is the highest level of compliance available, and their platform is audited annually by a third-party qualified security assessor.

We may update this Privacy Policy from time to time in order to reflect changes to our practices or for other operational, legal or regulatory reasons. If we make material changes to this Privacy Policy, we’ll give you notice of such changes by posting the revised policy on this Website and, where appropriate, by sending a notice to your account’s primary email address. By continuing to use this Website after these changes are communicated, you agree to the revised Privacy Policy.

This is v1.0 of our Privacy Policy and it was last updated on 10 November 2019.

For more information about our privacy practices please contact us via our Contact Form or write to us at: Data Protection Officer, Bocka Bocka Ltd, Haddon House, Maddox Park, Bookham, KT23 3BW, United Kingdom.