Last updated: 11 February 2026

BONO B.V. (hereinafter: "BONO", "we" or "us") values the protection of your personal data. In this privacy policy, we explain what data we collect, why we do so, how long we retain it and what rights you have. This policy applies to all activities via bono.co.uk.

Our website and webshop are not intended for children under the age of 16. We do not knowingly collect personal data from children. If we discover that we have processed data from a child, we will delete it as soon as possible.

1. Data Controller

Company name	BONO B.V.
Address	Westeinde 110, 1511 MA Oostzaan, Netherlands
Company registration number	74636391
VAT number	NL859976026B01
Contact	Via the contact form on bono.co.uk
Data Protection Officer	Justin Regterschot (reachable via the contact form on bono.co.uk)

2. What personal data we process

Category	Data	Purpose	Legal basis	Retention period
Order	Name, address, email, phone number, payment details, order history	Processing and delivering your order, customer service, invoicing	Performance of a contract	7 years (statutory retention obligation)
Account	Name, email, address, phone number, password (encrypted)	Creating and managing your customer account	Performance of a contract	Until account closure, then max. 7 years for order data
Newsletter	Email address, name (optional)	Sending newsletters and offers	Consent	Until unsubscription
Contact form	Name, email, phone number, message content	Responding to your question or request	Performance of a contract / legitimate interest	Up to 1 year after handling
Reviews	Name (or pseudonym), email address, review text	Publishing product reviews	Consent / legitimate interest	For as long as the review is published
Website visit	IP address, browser type, pages visited, click behaviour, device data	Website analysis, improving user experience, advertising	Consent (via cookie banner)	In accordance with cookie banner settings

3. Sharing with third parties (processors)

We only share your personal data with third parties where this is necessary for the purposes stated above. We have entered into a data processing agreement with all such parties. These include:

Party	Purpose
Shopify	Webshop platform and hosting
Klaviyo	Email marketing and newsletters
Active Ants	Warehouse management and order fulfilment (3PL)
DHL, PostNL, bpost, PostNord (and other carriers)	Delivery of orders
Google (Analytics, Ads)	Website analysis and advertising
Meta (Facebook/Instagram)	Advertising and remarketing
Cookiebot (Usercentrics)	Cookie consent management
Trusted Shops, Trustpilot	Customer reviews
Klarna, payment providers	Payment processing

We do not share your data with other parties unless we are legally obliged to do so.

4. Transfers outside the UK and EEA

Some of our processors (including Shopify and Klaviyo) may process personal data outside the United Kingdom (UK) and the European Economic Area (EEA), in particular in the United States and Canada. In such cases, the transfer is safeguarded by:

• Standard Contractual Clauses (SCCs) approved by the relevant supervisory authority;
• Additional technical and organisational measures where necessary.

Further information about the specific safeguards can be requested via the contact form on bono.co.uk.

5. Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. These include:

• Encrypted connections (TLS/SSL) across the entire website;
• Access control with username and password for internal systems;
• Storage of personal data in secured systems;
• Logging of access to personal data;
• Physical security of systems and storage media.

6. Cookies

Our website uses cookies and similar technologies. On your first visit, your consent is requested via Cookiebot. We distinguish the following categories:

• Necessary cookies – required for the operation of the webshop (shopping basket, session). No consent required.
• Analytical cookies – Google Analytics (GA4) for website statistics. Only with your consent.
• Marketing cookies – Meta Pixel and Google Ads for personalised advertising and remarketing. Only with your consent.

You can change your cookie preferences at any time via the cookie banner or your browser settings.

7. Profiling and targeted advertising

We use tools such as Google Ads, Meta Pixel and Klaviyo that carry out profiling. This means that a profile may be built based on your browsing and purchasing behaviour on bono.co.uk in order to show you relevant adverts and offers, both on our website and on third-party platforms (such as Facebook, Instagram and Google). This is done exclusively with your consent via the cookie banner.

No automated decision-making takes place that has legal or similarly significant consequences for you. You have the right at all times to object to profiling for direct marketing purposes. You can do so by adjusting your cookie preferences, unsubscribing from the newsletter, or contacting us via the contact form.

8. Your rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

• Access – request details of the personal data we process about you.
• Rectification – correction of inaccurate or incomplete data.
• Erasure – request deletion of your data ("right to be forgotten").
• Restriction – temporary restriction of the processing of your data.
• Data portability – receive your data in a structured, commonly used and machine-readable format.
• Objection – object to processing based on legitimate interest or direct marketing.
• Withdrawal of consent – where processing is based on consent, you may withdraw it at any time.

You can submit your request via the contact form on bono.co.uk. We will respond within 30 days. To verify your identity, we may request additional information.

9. Right to complain

Do you believe that we are not handling your data with due care? You have the right to lodge a complaint with the relevant supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO): www.ico.org.uk.

10. Changes

We may update this privacy policy from time to time. The most current version is always available at bono.co.uk/pages/privacy-policy. In the event of significant changes, we will notify you proactively, for example by email or via a notification on the website.