Effective Date: 2nd July 2025
Last Updated: 2nd July 2025
Welcome to AquaBay.org (“AquaBay”, “we”, “us”, or “our”). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you interact with our website and services, including your rights under applicable data protection laws.
By accessing or using AquaBay.org, you agree to the terms of this Privacy Policy.
1. Scope
This Privacy Policy applies to personal data collected through:
- AquaBay.org (our website)
- User registrations and online accounts
- Purchase and sale transactions
- Communications, newsletters, and customer support
It does not apply to third-party websites or platforms accessed through AquaBay.
2. Data We Collect
We collect and process the following categories of personal data:
A. Account Information
- Full name
- Username
- Email address
- Password (encrypted)
- Account preferences
B. Transactional & Financial Data
- Shipping and billing address
- Purchase and sales history
- Order details and invoices
- Partial payment details (processed via third-party services; AquaBay does not store full credit card numbers)
C. Communication Data
- Customer service interactions
- Messages sent via AquaBay
- Emails and responses
D. Technical & Usage Data
- IP address
- Browser type and version
- Device identifiers
- Referring pages and site interactions
- Cookies and other tracking technologies (see Section 7)
3. How We Use Your Data
We process your data for the following lawful purposes:
- To create and manage user accounts
- To enable listings, purchases, and sales on the platform
- To process payments and manage orders
- To provide customer support and resolve disputes
- To communicate updates, offers, or system changes
- To personalize user experience
- To detect, investigate, and prevent fraud or illegal activity
- To comply with legal obligations
4. Legal Basis for Processing (UK & EU Residents)
We rely on the following lawful bases for processing personal data:
- Consent – for marketing communications or certain cookies
- Contract – to fulfill transactions and user account management
- Legal obligation – to comply with applicable laws and tax reporting
- Legitimate interests – for platform security, fraud prevention, and business insights
5. Sharing of Personal Data
We may share your data with:
- Payment processors (e.g., Stripe, PayPal)
- Shipping and logistics providers
- Service providers (e.g., IT support, cloud hosting, analytics platforms)
- Public authorities when legally required
- Buyers or sellers, as necessary for transaction completion (e.g., shipping info)
All service providers are contractually bound to handle your data securely and in compliance with relevant data protection laws.
6. Data Retention
We retain personal data only as long as necessary for:
- Providing services to you
- Fulfilling legal and regulatory obligations
- Resolving disputes and enforcing our policies
Inactive accounts may be deleted or anonymized after a reasonable retention period, unless extended by legal requirements.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Maintain user sessions
- Remember user preferences
- Analyze site usage and improve functionality
- Deliver relevant advertisements (where applicable)
You can manage cookie preferences through your browser settings or our cookie banner.
8. Your Rights
Subject to applicable laws (e.g., UK GDPR, EU GDPR), you have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion (“right to be forgotten”)
- Restrict or object to certain processing
- Receive your data in a portable format (data portability)
- Withdraw consent at any time (for consent-based processing)
To exercise these rights, contact us at: support@aquabay.org
9. Data Security
We implement industry-standard security measures, including:
- SSL/TLS encryption for data transmission
- Password hashing and access control
- Secure hosting infrastructure
- Regular vulnerability assessments
However, no system is completely secure. Users are responsible for safeguarding their login credentials.
10. Children’s Privacy
AquaBay is not intended for children under the age of 13. We do not knowingly collect data from minors. If you believe a child has provided us data, please contact us to have it removed.
11. International Data Transfers
Your data may be processed and stored outside your country of residence, including in countries that may not have equivalent data protection laws. We ensure adequate safeguards are in place when transferring data internationally, such as Standard Contractual Clauses (SCCs).
12. Changes to This Policy
We may update this Privacy Policy from time to time. All updates will be posted here with the revised “Last Updated” date. If changes are significant, we may notify you by email or on the site.
13. Contact Us
For questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact:
📧 Email: support@aquabay.org
🌐 Website: https://aquabay.org
📍 Postal Address: 38 Poppy Close, Spalding, Lincolnshire PE113FQ