Who we are
Badger Commerce is run by Badger Commerce Limited, a subsidiary of Kedos Consulting Limited. We're registered in England and Wales (company number 11865866) and our registered office is 20-22 Wenlock Road, London, N1 7GU.
Badger Commerce subscriptions are sold and billed by Kedos Consulting Limited (company number 07005106) as our authorised reseller, through badgercommerce.co.
For anything about privacy, email [email protected] or write to Data Protection, Badger Commerce Limited, 20-22 Wenlock Road, London, N1 7GU.
Two roles: our data and our customers' data
Badger Commerce is a platform that businesses and charities use to run their online shops. That means we handle personal data in two different ways.
- We decide how it's used (we're the controller) for people who visit www.bdgr.co.uk, people who contact us, and the people who have accounts to run a shop on Badger Commerce: owners, staff and agencies.
- A shop decides how it's used (the shop is the controller, we're its processor) for that shop's own customers, supporters and contacts: the people who buy, donate, book or sign up on a shop that runs on Badger Commerce. We store and process that data on the shop's behalf, only to run the shop for it and only as it instructs us.
Bought something from a shop that uses Badger Commerce? That shop is responsible for your data. Its own privacy policy explains how it uses it, and it's the right place to ask for a copy of your data or for it to be deleted. Shops on Badger Commerce have tools to answer those requests, and we help them when they need it. If you contact us instead, we'll pass your request to the shop.
Visiting this website
When you visit www.bdgr.co.uk we receive the technical details every website receives: the pages you ask for, your IP address, your browser and device, and the page that sent you here. Our network provider (Cloudflare) and our servers use them to deliver the site, keep it secure and fix problems.
We use Google Analytics to count visits and see which pages are useful. Our cookie policy lists every cookie we use and how to turn analytics off.
If you fill in our contact form we receive your name, your email address, anything else you choose to tell us, and your message. We use them to reply to you. The form is protected by Google reCAPTCHA, which checks that it was filled in by a person rather than a bot.
Running a shop on Badger Commerce
If you have an account to run a shop, we handle:
- Account details: your name, email address, the shops you have access to and your role in each.
- Sign-in details: how you sign in (an emailed code, a passkey, a password, or Google or Apple sign-in if you choose them), used to keep your account secure.
- Support: the emails and messages you send us, and our replies.
- Billing: your subscription, invoices and payments, held by Kedos Consulting Limited and its payment provider Stripe. We never see or store your full card number.
- Service emails: messages about your account, security and the platform. We don't use your account to send you marketing without your permission.
Data we handle for shops
To run a shop, Badger Commerce stores the data the shop's customers give it, for example names, email addresses, phone numbers, delivery addresses, orders, returns, bookings, event tickets, subscriptions, donations, Gift Aid declarations, marketing preferences and messages sent to the shop. Card payments are taken by Stripe, into the shop's own Stripe account: card numbers never reach our servers.
We use this data only to provide the platform to the shop: to show it in the shop's admin, send the emails the shop has set up, take payments, fulfil orders and keep the service running. We don't use it for our own marketing and we don't sell it. When a shop connects another service, such as a carrier for parcel labels or a marketplace, the shop decides what is sent to it.
Using Badger Commerce with Claude and other AI assistants
If you connect an AI assistant such as Claude to your shop, it signs in through Badger Commerce and can use only the shop and permissions you choose when you connect, limited to what your own account can do. We send the assistant only the data it asks for to answer your request, for example the products it lists or the order it looks up, which can include customer names and addresses on orders. We store the sign-in tokens for the connection, the shop and permissions you chose and when you approved them; we don't store your conversations. Tokens end when the period you chose runs out, when you disconnect, or when your AI access is removed. The assistant's provider handles your conversations under its own terms (for Claude, Anthropic's privacy policy).
AI features inside Badger Commerce. Some optional features, such as having AI write a draft page from an update a shop owner sends in, send the text and photos involved to an AI provider (Anthropic or OpenAI) to produce the draft. They run only when the shop has switched them on, using the shop's own key with that provider or ours.
Why we use personal data (our legal bases)
| What we do | Legal basis |
|---|---|
| Provide shop accounts, sign-in and the platform | Contract |
| Host and process shop data for the shops that use us | Contract with the shop (we act on its instructions) |
| Reply to enquiries and support requests | Legitimate interests (answering people who contact us), or steps before a contract |
| Keep the platform secure, prevent fraud and abuse, fix problems | Legitimate interests |
| Website analytics | Consent, through our cookie banner |
| Billing, tax and accounting records | Contract and legal obligation |
Where we rely on legitimate interests, we've weighed them against your rights, and you can object at any time.
Who helps us
We use a small number of service providers. Each only gets the data it needs for its job and is bound by a contract to protect it.
| Provider | What it does |
|---|---|
| Hetzner Online GmbH | Hosts our servers, databases and search in data centres in Germany |
| Cloudflare, Inc. | Delivers our websites and shops, and protects them from attacks |
| Amazon Web Services | Stores images and files uploaded to shops, in Ireland (EU) |
| Stripe | Takes card payments for shops (into each shop's own Stripe account) and for our subscriptions |
| Mailtrap (Railsware) | Sends the platform's emails, such as order confirmations and sign-in codes |
| GitLab | Error reports when something on the platform fails: what went wrong and the address of the request |
| Analytics and reCAPTCHA on this website; Google sign-in if you choose it | |
| Apple | Sign in with Apple, if you choose it |
| Anthropic and OpenAI | Optional AI features, only when a shop switches them on |
We may also share data when the law requires it, to protect our rights or users' safety, or with a buyer if our business is sold, in which case we'll tell you first. We don't sell personal data.
Data outside the UK
Our servers are in Germany and our file storage is in Ireland, both in the EU. Some of our providers are based in the United States or work worldwide. When data goes outside the UK, we rely on UK adequacy regulations (including the UK-US data bridge) or on the UK's International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
How long we keep it
- Account details: for as long as your account is open. When it closes we delete or anonymise them, except what we must keep by law.
- Billing records: six years, as tax law requires.
- Enquiries: as long as we need to deal with them and any follow-up.
- Shop data: for as long as the shop uses Badger Commerce, under the shop's control. Shops can delete or erase customers' data themselves. When a shop leaves, we delete its data as agreed with the shop.
- Error reports and server logs: a limited, rolling period.
- AI assistant connections: until the period you chose runs out, you disconnect, or your AI access is removed.
Keeping it safe
All traffic to the platform is encrypted (HTTPS). Access to shop data is limited by role, staff sign in with modern methods such as passkeys, and sensitive admin actions ask you to confirm again. Card details are handled by Stripe and never touch our servers. If a breach puts your data at risk, we'll tell the shops affected and, where the law requires it, the Information Commissioner's Office within 72 hours.
Your rights
Under UK data protection law you can ask us to:
- tell you what data we hold about you and give you a copy;
- correct it if it's wrong;
- delete it, or limit how we use it;
- give it to you in a format you can take elsewhere;
- stop using it where we rely on legitimate interests, or for marketing.
Where we rely on consent, you can withdraw it at any time. We don't make decisions with legal or similarly significant effects about you by automated means alone.
Email [email protected]. We'll reply within a month and won't normally charge. We may need to check who you are first. For data a shop holds about you, ask the shop (see above).
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk.
Children
Badger Commerce accounts are for businesses and organisations, and this website isn't aimed at children. Shops that run on Badger Commerce set their own rules for their customers.
Changes to this policy
We'll update this page when what we do changes, and change the date at the top. If a change matters to account holders, we'll also tell them by email or in the admin.
See also our cookie policy.