B.HUMBLE / INFORMATION

Privacy policy

Last updated: 16 October 2026

This Privacy Policy explains how Malachi Mafo, a sole trader trading as B.HUMBLE, collects, uses, shares and protects personal information when you visit b-humble.com, place an order, contact us, request a return or choose to receive marketing.

1. WHO IS RESPONSIBLE FOR YOUR INFORMATION

The data controller is Malachi Mafo, an individual sole trader trading as B.HUMBLE.

Address: 13 Stanhope Way Riverhead Sevenoaks TN13 2DZ United Kingdom

Email: b.humblehelp@gmail.com

2. INFORMATION WE COLLECT

Depending on how you use the store, we may collect:

• identity and contact information, including your name, billing address, delivery address and email address; • order and transaction information, including products ordered, order value, payment status, delivery details, returns and refunds; • payment-related information processed through Whop Payments and its payment partners; • communications, customer-service requests, complaints and information you provide when contacting us; • marketing preferences and consent records; • technical and usage information, including IP address, device and browser information, cookie identifiers, security events and interactions with store pages; and • information reasonably required to prevent fraud, secure the store and comply with law.

We receive information directly from you, automatically from your device and store technology, and from service providers involved in payments, fraud prevention, delivery and customer support.

3. WHY WE USE INFORMATION AND OUR LAWFUL BASES

We use personal information:

• to process payment, accept and fulfil orders, arrange delivery, communicate about orders, and handle cancellations, returns and refunds because this is necessary to enter into or perform a contract with you; • to keep legally required records, respond to statutory rights, handle lawful requests and comply with tax, accounting, consumer-protection and other legal obligations; • to secure the store, prevent and investigate fraud, provide customer service, manage complaints and improve business operations where necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights; • to send electronic marketing where you have consented or where the law permits an existing-customer opt-in, always with a simple way to unsubscribe; and • to use non-essential storage or access technologies where required consent has been obtained; and • to understand aggregate website visits and pageviews through privacy-conscious, first-party site measurements on a legitimate-interests basis, subject to applicable privacy choices.

Where information is needed to process an order or meet a legal requirement, failure to provide it may mean we cannot accept or fulfil the order.

4. HOW WE SHARE INFORMATION

We share personal information only where reasonably necessary, including with:

• Vercel, which hosts the storefront, and Supabase, which provides database, authentication and image storage services; • Resend, which delivers transactional emails; • Whop Payments, payment networks, banks and payment or fraud-prevention partners used to process and protect transactions; • delivery and fulfilment providers used for your order; • providers supporting hosting, security, communications and customer service; • professional advisers, such as accountants, insurers or legal advisers, where necessary; and • regulators, courts, law-enforcement bodies or other parties where disclosure is required by law or necessary to establish, exercise or defend legal rights.

These parties may act as our processors or as separate controllers, depending on their role. Payment information is also processed under Whop’s privacy policy: https://whop.com/privacy/

5. INTERNATIONAL TRANSFERS

Some service providers may process personal information outside the United Kingdom. Where UK data-protection law requires safeguards, we use providers and arrangements that rely on an applicable UK adequacy regulation or an approved transfer safeguard, such as the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses, or another lawful mechanism.

Contact us for further information about safeguards relevant to your information.

6. RETENTION

We keep personal information only for as long as reasonably necessary for the purposes described here, including order fulfilment, customer service, fraud prevention, accounting, tax, dispute resolution and legal compliance.

Retention periods depend on the type of information, why it was collected, legal record-keeping periods, the existence of a dispute or claim, and whether the information remains necessary and proportionate. We securely delete or anonymise information when it is no longer required. For B.HUMBLE’s first-party audience dashboard, raw anonymous session IDs are removed by the daily cleanup job when they have been inactive for at least 12 hours. Unlinked event deduplication keys are removed after they are at least one day old. Cleanup runs daily, so the maximum retention may be approximately 36 and 48 hours respectively. Daily aggregate visit, pageview, country and page-count totals can be retained for long-term business reporting without individual session IDs.

7. COOKIES AND SIMILAR TECHNOLOGIES

The store uses cookies and similar technologies. Technologies strictly necessary for functions you request, such as the basket, checkout, security and fraud prevention, may operate without consent. Other technologies are used only with consent unless a specific legal exception applies. Technologies used for advertising, cross-site tracking or profiling require consent.

B.HUMBLE’s first-party audience counter uses no analytics cookie, persistent visitor identifier, or browser storage for analytics. You can object through the “Audience choices” link in the footer; only if you ask us to remember your opt-out, that preference (not an analytics ID) is saved in this browser’s localStorage. While a public page is open, the browser creates a random session ID in working memory that is lost on a full page reload. The store counts approved public pageviews and approximate visible sessions through occasional heartbeats. Vercel provides a country-level location estimate from the connection for aggregation; the B.HUMBLE audience tracker does not store the visitor’s IP address, street location, name or email, and does not record search queries or private account and checkout pages. Browser Do Not Track and Global Privacy Control signals are respected. Visits are sessions, not verified unique human beings; traffic blockers, bots and network issues may affect totals. Tracking starts when this system is first enabled, without backfilling past visitors.

You can opt out without charge through Audience choices in the store footer and on this privacy page, as well as using browser privacy settings. Blocking essential technologies may prevent parts of the store from working.

8. MARKETING

If you choose to receive marketing, we may send information about B.HUMBLE products and offers. Where an existing-customer rule is used, marketing is limited to similar products and you are given an opportunity to opt out when details are collected and in every message.

You can unsubscribe at any time using the link in a marketing message or by emailing b.humblehelp@gmail.com. Unsubscribing does not stop service messages about an order.

9. AUTOMATED CHECKS

Whop Payments and fraud-prevention providers may use automated checks to authorise payments, identify fraud and protect transactions. If an order or payment is declined and you want us to review information available to us, contact b.humblehelp@gmail.com. A payment provider may also process information under its own privacy terms.

10. YOUR RIGHTS

Subject to applicable conditions and exemptions, you may have the right to:

• ask for access to your personal information; • ask us to correct inaccurate or incomplete information; • ask us to erase information; • ask us to restrict its use; • object to processing, including an absolute right to object to direct marketing; • receive certain information in a portable format; • withdraw consent at any time, without affecting processing carried out before withdrawal; and • complain to us and to the Information Commissioner's Office.

To exercise a right, email b.humblehelp@gmail.com or write to the address above. We may ask for information reasonably necessary to verify identity and locate the relevant records.

11. DATA-PROTECTION COMPLAINTS

You may complain using the email or postal address above. We will acknowledge a data-protection complaint within 30 days, take appropriate steps to investigate and respond without undue delay, keep you informed where appropriate, and communicate the outcome.

You may also complain to the Information Commissioner's Office: https://ico.org.uk/make-a-complaint/data-protection-complaints/

Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF United Kingdom

12. SECURITY

We use reasonable technical and organisational measures designed to protect personal information. No internet transmission or storage system can be guaranteed completely secure. Do not send payment-card details by email.

13. CHANGES TO THIS POLICY

We may update this policy to reflect changes to the store, service providers or legal requirements. The current version and revision date will be published here. Material new uses of personal information will be brought to your attention where required.