Privacy policy

Customer data is part of the trust layer.

BBA only asks for the details needed to answer guidance requests, process checkout orders, support customers, send useful email updates and arrange delivery.

What BBA may collect

Data used for guidance, orders and support.

Email

Guide request

Name, email, tank details and notes are used to reply with guide and product guidance.

Orders

Checkout order data

Name, email, delivery address, selected products and notes are used to process and fulfil orders.

Payments

Payment provider

When payment is enabled, card details are handled by the secure payment provider, not stored as raw card data by BBA.

Support

Customer messages

Support emails may include order references, photos, delivery details and aquarium-care questions.

Delivery

Dispatch details

Delivery name, address and service details are used to pack and send parcels.

Email

Transactional emails

Guide requests, checkout orders and support replies may generate owner and customer email records.

Email updates

Optional marketing email

If you explicitly request BBA email updates, your email address, consent wording and version, consent time, signup page and subscription status are kept in BBA's subscriber record. Your subscription begins when you submit that clear request. You can unsubscribe at any time; suppression records may be retained to ensure no further marketing email is sent.

Cookies

Site preferences and measurement

Essential browser storage supports basket and order-request continuity. With separate permission, Meta Pixel, TikTok Pixel and the Google Ads tag may record page visits for advertising measurement. See the cookie policy for controls and details.

Contact

Customer control

Customers can email BBA to ask about the information linked to their request, order or support case.

How data is used

Only for the customer task in front of BBA.

Customer details are used for guide replies, checkout orders, delivery, support, transactional emails and legally required order records. BBA does not need raw card details because card payments belong with the secure payment provider.

Basket continuity Guest checkout Written support No raw card storage
Basket details

Browser basket details help you prepare checkout and can be cleared from the basket page.

Transactional email

Order and support messages are used to provide the service requested by the customer.

Customer control

Customers can contact BBA to ask about the information linked to their request or order.

Provider data

Card details remain with the payment provider when payment is enabled. BBA stores order references, not raw card data.

Website reviews

Private contact details, owner moderation and customer control.

BBA collects website reviews to understand customer experiences and, where permission is given and the review is approved, to publish useful customer feedback on this website.

Collected

Review submission data

A submission may include the review text, email address, display name and display preference, feedback category, optional product or variant context, consent choices and moderation records.

Private

Email is never displayed

Email is required privately to manage the submission, contact the customer where necessary and handle withdrawal or deletion requests. It is never included in the public review.

Choice

Public display name

The customer chooses whether an approved review uses a full name, first name, initials or Anonymous. BBA does not publish the private email address.

Moderated

No automatic publication

Every submission enters a private moderation queue. BBA may approve, reject or archive it, and publication is not guaranteed. Obvious spelling or formatting may be corrected only without changing the meaning.

Retention

Kept only as needed

Pending submissions are reviewed promptly and normally kept for no more than 90 days. Rejected or withdrawn submissions are normally removed within 30 days. Approved reviews are kept while published and useful, then removed or anonymised when no longer needed.

Control

Withdrawal and deletion

Customers can use the Contact page or email BBA from the address used for submission to request withdrawal or deletion. A published review is unpublished promptly, and the private submission is deleted or anonymised within 30 days after identity is checked.

Protection

Spam and abuse controls

BBA uses a hidden anti-spam field, request-size and rate limits, and short-lived hashed identifiers to detect rapid or duplicate submissions. The current controls do not persist raw IP addresses; the in-memory hashes expire after 15 minutes.

Separate

Website and marketplace history

Website-native reviews are separate from Facebook, eBay and Etsy feedback. Marketplace feedback is not copied into website reviews, and BBA does not create fake reviews, ratings or verified-buyer labels.