Privacy policy

Privacy Policy — Bespoke Garages

Last updated: October 26, 2026

Bespoke Garages (“Bespoke Garages”, “we”, “us” or “our”) operates this online store and website, including the information, content, features, tools, products and services made available through it (the “Services”). Our store is hosted by Shopify, which provides the e-commerce platform that allows us to offer the Services.

This Privacy Policy explains what personal information we collect, how we use and disclose it, and the choices and rights that may be available to you when you visit our store, use the Services, purchase from us, or communicate with us.

Please read this Policy together with any notices shown when information is collected. If another applicable store policy conflicts with this Policy concerning the processing of personal information, this Policy governs that processing to the extent permitted by law.

1. Personal Information We Collect

“Personal information” means information that identifies you or can reasonably be linked to you. The information we collect depends on how you use the Services, your choices, and applicable law. It may include:

Contact and delivery information: Name, email address, telephone number, delivery address and other details needed to fulfil an order.
Order and request a quote information: Products viewed, order details, returns, exchanges, delivery instructions and information needed to provide customer service.
Account and preference information: Account identifiers, saved preferences, settings and items you are interested in, if you create an account or use relevant features.
Communications: Information you provide when you contact us, submit a query, provide feedback or otherwise communicate with us.
Device and technical information: IP address, browser and device characteristics, network information, identifiers, language settings and approximate location inferred from technical information.
Usage and event information: How you navigate or interact with the store, including pages and products viewed, searches, request a quote activity, checkout activity, referring pages and interactions with marketing.
Marketing and advertising information: Marketing preferences, campaign interactions, and information used to measure advertising or create advertising audiences where permitted.
Information from other sources: Information supplied by Shopify, service providers, advertising and analytics partners, payment or delivery providers, and other third parties where permitted by law.

We do not intend to collect sensitive personal information unless it is necessary, lawful and appropriately handled for a specific purpose.

2. How We Collect Information

We may collect personal information:

Directly from you when you place an order, create an account, fill in a form, contact us or otherwise provide information.
Automatically through the store, cookies, pixels, logs and similar technologies when you browse or use the Services, subject to applicable law and your privacy choices.
From Shopify and service providers that help operate the store, process, fulfil orders, prevent fraud, provide analytics or support customer service.
From marketing, advertising or other third-party partners where permitted by law and consistent with applicable notices and choices.

If you provide information about another person, such as a delivery recipient, you should have authority to provide it and should make that person aware of the relevant information where appropriate.

3. How We Use Personal Information

Depending on how you use the Services, we may use personal information to:

Operate the store and fulfil orders: Confirm orders, arrange payment and delivery, provide customer service, manage returns and exchanges, and administer accounts.
Provide and improve the Services: Remember preferences, troubleshoot problems, understand how customers use the store, improve products and the shopping experience, and develop or evaluate store features.
Communicate with you: Respond to enquiries and send service-related messages about orders, deliveries, accounts, security or changes to our policies.
Marketing and advertising: Send promotional communications where permitted, measure campaign performance, understand which advertisements lead to visits or purchases, show relevant advertisements, and develop or refine advertising audiences where permitted by law and subject to your privacy choices.
Security and fraud prevention: Verify transactions where appropriate, detect and investigate suspected fraud or abuse, protect the store and users, and maintain the security of our Services.
Legal and compliance purposes: Comply with applicable laws and lawful requests, protect legal rights, resolve disputes, and enforce our terms and policies.

We use personal information only for purposes that are lawful and appropriate to the circumstances in which it was collected, and we take reasonable steps to avoid using information that is unnecessary for those purposes.

4. Cookies, Pixels and Similar Technologies

We and our service providers may use cookies, pixels, software development kits, tags, server-side events and similar technologies to operate the store, remember preferences, understand store usage, prevent fraud, measure advertising and, where permitted, personalise advertising.

Some technologies are necessary for core store functions, Others may be used for analytics or advertising.

Where applicable law requires consent for a particular technology or processing activity, we will seek consent before carrying out that activity and will respect choices made through available consent controls.

You can manage your preferences using the privacy or cookie controls provided on our store, where available. You may also be able to manage cookies through your browser settings. Browser controls do not necessarily stop all forms of data sharing, including server-to-server transmissions.

Disabling certain technologies may affect store functionality. We will take reasonable steps to ensure that our tracking technologies operate consistently with applicable privacy requirements and the choices visitors make.

5. Meta Pixel, Facebook and Instagram Advertising

Bespoke Garages may use advertising and measurement tools provided by Meta Platforms, Inc. and its affiliates (“Meta”), including the Meta Pixel and Meta Conversions API, through Shopify’s Facebook and Instagram by Meta integration or other properly configured tools.

We intend to use Meta's advertising tools to improve our advertising campaigns, measure advertising effectiveness, understand how visitors interact with our store, attribute sales to advertising, and show relevant advertisements to people who may be interested in our products.

Information that may be shared with Meta

Depending on our selected data-sharing settings, the events we configure, applicable law and your privacy choices, information shared with Meta may include:

Browsing and event activity, such as page views, product views, searches, items and request a quote.
Technical information, such as browser and device information, IP address and online identifiers.
Customer information, such as name, email address, telephone number or location, when enabled by the integration and permitted by law. Such information may be transformed or hashed before transmission to help match events to Meta accounts.

The exact information shared depends on our actual Shopify and Meta configuration. Not every category listed above will necessarily be shared in every event.

Maximum data-sharing configuration

We may select the Maximum data-sharing setting in Shopify's Facebook and Instagram by Meta sales channel to support advertising measurement, event matching and campaign optimisation.

Under this configuration, Meta may receive information through browser-based technologies, such as the Pixel, and server-to-server technologies, such as the Conversions API. Depending on the integration and events configured, this may include browsing activity, request a quote activity, technical identifiers and additional customer information used for matching.

The Conversions API may transmit events directly from a server to Meta. As a result, browser ad blockers or cookie restrictions alone may not prevent all server-side data sharing.

We will configure and use these technologies in accordance with applicable privacy and data-protection laws. Where consent is legally required, we will seek it before the relevant tracking or data sharing takes place. We will take reasonable steps to ensure that applicable privacy choices are respected by our tracking and data-sharing systems.

How Meta may use the information

We may use Meta tools to:

Measure advertising performance and conversions.
Understand whether visitors purchase after viewing or clicking an advertisement.
Improve the delivery and relevance of our advertising.
Create or refine advertising audiences where permitted.
Exclude certain audiences from advertising where appropriate.
Improve our understanding of customer interest in our products.

Meta may process information under its own terms and privacy policy and may combine it with information received from other sources. We do not control all processing carried out independently by Meta.

You can review Meta's Privacy Policy and Shopify's Meta data-sharing settings.

Your choices regarding advertising tracking

Where applicable law requires consent, we will seek consent before enabling the relevant advertising tracking or data sharing. Where applicable, you may withdraw consent or exercise an objection or opt-out right using the privacy controls made available by our store or by contacting us.

Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal. Some information may still be processed when necessary to fulfil an order, protect the store, prevent fraud or comply with legal obligations.

We will review our Shopify data-sharing level, Meta integration and privacy controls periodically. This Policy does not mean that every category of information described above is always shared; it describes categories that may be processed depending on our actual configuration.

6. How We Disclose Personal Information

We may disclose personal information, where lawful and appropriate, to:

Shopify: To host and operate our online store, provide commerce features, and support store analytics and related services.
Service providers: Including delivery and fulfilment providers, hosting and cloud providers, IT and security providers, customer-support tools, analytics providers and other vendors acting on our behalf.
Advertising and analytics partners: Including Meta, to measure advertising, understand store activity, deliver or measure relevant advertising, and support audiences or campaign optimisation, subject to applicable law and privacy choices.
People you ask us to share with: For example, delivery recipients or third parties you choose to involve in a transaction or service.
Our professional advisers and corporate group: Where needed for business administration, professional advice or lawful internal purposes.
Authorities and other parties where required or permitted by law: To comply with legal obligations or lawful requests, protect rights and safety, investigate suspected fraud, enforce agreements, or handle actual or proposed business transactions such as a merger, restructuring or sale of assets.

We do not disclose personal information to third parties for their own purposes except as described in this Policy, as otherwise notified to you, or as permitted or required by law. Third parties may process information under their own privacy notices and terms.

7. Relationship with Shopify

Our store is hosted by Shopify. Information you submit through the Services is processed by Shopify and may be transmitted to Shopify and its service providers to provide, maintain and improve the Services.

Shopify may also process information in connection with its own services and features, including enhanced features involving interactions with our store, other merchants and Shopify.

For information about Shopify's processing and any rights that may apply to that processing, review the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Some requests relating to processing carried out by Shopify may need to be directed to Shopify.

8. International Transfers

We and our service providers may process, store or access personal information in countries other than the country where you live, including countries where Shopify, Meta or other service providers operate. Privacy laws in those countries may differ from those in your country.

Where applicable law requires safeguards for international transfers, we will take the steps required by that law. These may include relying on an adequacy decision, contractual safeguards or another lawful transfer mechanism.

This section describes the possibility of international processing and is not a representation that a particular transfer mechanism applies to every transfer.

9. Retention and Security

We retain personal information for no longer than reasonably necessary for the purposes described in this Policy, including to fulfil orders, provide Services, maintain appropriate business and resolve disputes, enforce agreements and comply with legal obligations.

The retention period depends on the type of information and the relevant purpose.

We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No website, transmission method or storage system can be guaranteed completely secure.

You should avoid sending sensitive information through unsecured communication channels.

10. Your Privacy Rights and Choices

Depending on where you live and the law that applies, you may have the right to:

Request access to personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of personal information, subject to lawful retention requirements and exceptions.
Request a copy of certain information or, where applicable, its transfer to another provider.
Object to or request restriction of certain processing, including certain direct marketing or advertising-related processing.
Withdraw consent where processing is based on consent.
Complain to the relevant data-protection authority.

These rights are not absolute and may be subject to identity verification, legal exceptions and other requirements. We will respond within the period required by applicable law.

To make a request, email bespokegarages1@gmail.com. Please describe your request and provide enough information for us to understand it. Do not send passwords or unnecessary sensitive information. We may need to verify your identity before acting.

You may unsubscribe from promotional emails using the unsubscribe link in the message. Even if you opt out of promotional communications, we may still send non-promotional messages about orders, transactions, accounts, security or other service matters.

Where applicable, you may also use the privacy choices, cookie controls or data-sharing opt-out tools provided on our store. You may contact us if you need assistance.

Opting out of targeted advertising does not necessarily stop all advertising or all processing needed to operate the store.

11. South African Privacy Information

Where South Africa's Protection of Personal Information Act, 2013 (“POPIA”) applies, we aim to process personal information in accordance with its requirements, including applicable requirements concerning lawful processing, transparency, security safeguards, data-subject rights, direct marketing and cross-border transfers.

Electronic direct marketing is subject to specific requirements under POPIA, including section 69. We will only send such marketing where a lawful basis and applicable requirements are satisfied, and will provide a way to stop marketing communications.

This Policy does not replace any consent or notice required at the point of collection.

If you have a privacy complaint or wish to exercise a right under POPIA, contact us using the details in the Contact section below. You may also have the right to complain to the Information Regulator of South Africa. More information is available from the Information Regulator.

12. Children's Privacy

The Services are not intended for children who are not legally able to use them independently under applicable law. We do not knowingly collect personal information from children in circumstances where doing so is unlawful.

If you believe a child has provided personal information to us unlawfully, contact us using the details below so that we can review the matter and take appropriate steps.

13. Third-Party Websites and Services

Our Services may contain links to third-party websites, apps or services that we do not control. Their privacy practices are governed by their own policies, and we encourage you to review those policies before providing information.

We are not responsible for the privacy, security, content or practices of third-party services, except to the extent required by applicable law.

14. Changes to This Policy

We may update this Policy to reflect changes to our business, store technology, data-sharing practices, service providers or legal requirements.

We will post the revised version on this page and update the “Last updated” date. Where required by law, we will provide additional notice or seek consent for material changes.