Home / Privacy Policy

Privacy Policy

Last updated: 4 October 2026 · Questions? Email [email protected]

Short version: we collect only what we need to send your bracelet, we do not set advertising or tracking cookies, we never buy or sell email lists, and one click unsubscribes you for good.

Who we are

BEADORO is a small studio that makes hand-strung 20 mm resin beaded bracelets in our studio in China and ships them worldwide. We are the data controller for the information described below. For any privacy question or request, email [email protected].

What we collect

• Order and delivery details - your name, shipping address and email address, plus what you ordered. This is what we need to pack and deliver your parcel and to email your tracking number.
• Payment information - payments are handled entirely by PayPal on their own secure checkout. We never see or store your card or bank details.
• Messages you send us - if you email us, we keep the message and your address so we can reply and handle any return, refund or warranty claim.
• Marketing email address - only if you actively opt in. See the email marketing section below.
• Basic analytics - we use Cloudflare Web Analytics, which is cookieless: it counts visits and page views without cookies, without cross-site tracking and without building a profile of you. We see totals, never your identity.

How we use your information

• To pack, ship and track your order, and to email you delivery updates.
• To handle returns, refunds and our 1-year craftsmanship promise.
• To answer your messages.
• To send marketing emails - only where you have opted in, and always with a one-click unsubscribe.
• To keep the order records that tax and consumer law require us to keep.

Cookies and tracking

This website sets no advertising or tracking cookies. Our analytics (Cloudflare Web Analytics) works without cookies. We do not run retargeting pixels, we do not build advertising profiles, and we do not sell behavioural data. If you reach us from a social platform such as Pinterest, that platform may set its own cookies on its own pages - that happens on their side, under their privacy policy, not ours.

Email marketing

We send marketing emails only to people who actively opted in - by checking the subscribe box at checkout or on our website, or by requesting updates directly.

• Consent is recorded. Every signup stores the email address, the exact form and page it came from, the timestamp, and the IP address, as proof of consent.
• Every email has an unsubscribe link. One click, effective immediately, no questions asked. We never send marketing email after an unsubscribe is processed (legal maximum: 10 business days; ours is same-day).
• No buying or selling lists. We never purchase email lists, and we never sell, rent or trade your email address to third parties.
• What we send: new collection announcements, restock notices and occasional gift guides. Roughly 1-4 emails per month.
• Your rights. You may request a copy, correction or deletion of your personal data at any time by writing to [email protected]. We respond within 30 days.

Who we share it with

We share only what each service needs, and never for anyone else's marketing:

• PayPal - to process your payment, under their own privacy policy.
• Shipping carriers - your name and delivery address, so the parcel can reach you.
• Cloudflare - our hosting and analytics provider, which serves this website.

We never sell, rent or trade your personal information. We do not share your email address with advertisers.

How long we keep it

• Order and tax records: kept as long as tax and consumer law requires (up to 6 years).
• Marketing email address: kept until you unsubscribe, then removed.
• Support messages: kept for up to 24 months so we can honour warranties.

Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, port or restrict the processing of your personal data, and to object to direct marketing at any time. Residents of the EU and UK (GDPR / UK GDPR and PECR) and of California (CCPA / CPRA) have additional statutory rights, including the right to opt out of the sale or sharing of personal information - and we simply do not sell or share it. To exercise any right, email [email protected]; we reply within 30 days. You also have the right to complain to your local data protection authority.

Children

Our products are not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in the EU and UK). If you believe a child has sent us personal information, contact us and we will delete it.

Changes to this policy

If we change how we handle data, we will update this page and the date at the top. Material changes will be noted on this page.

Contact

All privacy questions and requests: [email protected]. We reply within one business day.