• Privacy policy

    Effective date: 28 May 2026

    Introduction

    This Privacy Policy explains how we collect, use, disclose and protect personal information when you use our website, services and products (collectively, "Services"). By accessing or using the Services you consent to the practices described in this policy.

    Who we are

    We are Bess Sturman, also trading as Unformed. Our contact details for privacy matters are available on our website or by writing to our registered address.

    Information we collect

    • Information you provide directly: name, email address, postal address, telephone number, billing and payment details, account credentials, profile information, correspondence and any other information you submit.

    • Information collected automatically: IP address, device and browser data, operating system, pages visited, referral source, search terms, usage patterns, cookies and similar technologies.

    • Information from third parties: social media profile data if you connect an account, payment processors, analytics providers, and other third-party services as permitted by you or applicable law.

    • Special categories: we do not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs or health data) unless you choose to provide it and we have a lawful basis to process it.

    How we use your information

    We use personal information to:

    • Provide, operate and maintain the Services.

    • Create and manage your account.

    • Process transactions, fulfil orders and manage payments and refunds.

    • Communicate with you, including customer support, updates, notifications and marketing (where you have consented or where otherwise permitted).

    • Personalise content, recommendations and advertising.

    • Improve and develop our Services, carry out analytics and measure performance.

    • Detect, prevent and address fraud, security incidents and other misuse.

    • Comply with legal obligations and enforce our terms and policies.

    Legal grounds for processing (EEA/UK)

    Where applicable, we rely on one or more lawful bases to process your personal information: performance of a contract, legal obligation, legitimate interests, consent, and where necessary, protection of vital interests. For marketing, we will obtain consent where required.

    Cookies and similar technologies

    We use cookies and similar technologies for essential site functions, analytics, personalisation and advertising. You can manage cookie preferences through your browser settings or via any opt‑out controls presented on our site. Blocking certain cookies may affect functionality.

    Sharing and disclosure

    We may share personal information with:

    • Service providers and vendors who perform services on our behalf (payment processors, hosting, analytics, customer support, marketing platforms).

    • Business partners where you have interacted with co‑branded features.

    • Professional advisers, auditors and legal advisors.

    • Law enforcement, regulators or other authorities where required by law or to protect rights, property or safety.

    • Successors in the event of a merger, acquisition or sale of assets; we will seek to ensure continued protection of your personal information.

    International transfers

    Information may be transferred to, stored and processed in countries other than your country of residence. Where transfers occur from the EEA/UK to jurisdictions without an adequacy decision, we will implement appropriate safeguards such as standard contractual clauses or other lawful mechanisms.

    Data retention

    We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes and enforce our agreements. Retention periods depend on the type of data and the purpose for which it was collected.

    Your rights (EEA/UK and where applicable)

    Subject to local law, you may have the right to:

    • Access and obtain a copy of your personal information.

    • Rectify inaccurate or incomplete data.

    • Erase your personal information (right to be forgotten).

    • Restrict or object to processing.

    • Portability: receive your personal information in a structured, commonly used and machine‑readable format.

    • Withdraw consent where processing is based on consent. To exercise your rights, contact us using the details below. We may need to verify your identity before fulfilling requests and may refuse requests where permitted by law.

    Security

    We implement reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. However, no internet transmission or storage system is completely secure; we cannot guarantee absolute security.

    Children

    Our Services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete it.

    Third‑party links

    The Services may contain links to third‑party sites. We are not liable for the actions of third parties in relation to data you share with them.