Your privacy matters to us at Original BTC.
This Privacy Policy explains clearly how we collect, use, and protect your personal data across all regions we operate in, including the UK, EU/EEA, Switzerland, US, and Canada.
WHO WE ARE
Original BTC Ltd (“Original BTC,” “we,” “us,” “our”) is the primary data controller. Each Original BTC regional entity may act as a data controller or processor depending on your location.
UK & Rest of World: Original BTC Ltd, Registered in England (03650223), ICO Registration ZA212343, Curo House, Greenbox, Westonhall Road, Stoke Prior, Bromsgrove B60 4AL. Trading Address: 21-22 Avenue One, Station Lane, Witney OX28 4XZ, UK.
France, Belgium, Luxembourg & Switzerland: Original BTC France SARL, 32 Rue Bonaparte, 75006 Paris, France.
Germany & Austria: Original BTC GmbH, Gärtnerplatz 1, 80469 München, Germany.
US & Canada: Original BTC USA LLC, 56 Greene St, New York, NY 10012, USA.
If you have any questions about this Privacy Policy or our handling of your data, please contact us at customerservice@originalbtc.com.
When This Policy Applies
This policy applies when you:
- Purchase from us online, by phone, email, or in our showrooms
- Browse our website originalbtc.com
- Contact us via email, phone, social media, or sign up to our events.
Personal Data We Collect
There are various ways in which we may collect data, or receive data.
You may give us data by filling in forms or by corresponding with us by post, phone, email or through chat or social media. This includes data you provide when you:
- sign up to receive our newsletter;
- make enquiries or request information be sent to you;
- create an account on our website;
- order our products;
- engage with us on social media;
- enter a competition, promotion or survey;
- contact customer services; or
- leave comments or reviews on our products or services.
As you interact with us, including via the Original BTC website, we may automatically collect data about your equipment, browsing actions and patterns. We may also collect data when you interact with our adverts (including those shown on third party websites or via social media).
We collect personal data from you directly, automatically through your interactions, or via trusted third parties, including:
- Identifiers: Name, address, email, phone, IP, device IDs
- Transactional: Purchase details, payment method (tokenised)
- Usage: Website interactions via Google Analytics 4 and Shopify Reports
- Marketing & Advertising: Hashed details for targeted ads via Google, Meta, Pinterest, Bing
- Customer Care: Correspondence, warranty claims managed via Salesforce
We may also receive delivery details from authorised resellers when you ask them to ship purchases directly from us.
We do not collect or process ‘sensitive data’ as defined under applicable state laws (e.g. precise geolocation or health information).
How & Why We Use Your Data
The table below offers a breakdown of the details of how we are using your personal data, the types of personal data that applies to and why it is we can do this.
We may process your personal data for more than one legal basis depending on how we are using it.
Purpose: Order processing & fulfilment
- Categories of personal data: Identifiers, transactional, delivery details
- Lawful basis (UK/EU GDPR): Contract performance (Art 6 (1)(b))
- Retention criteria: Retained in our operational systems for ongoing customer service, returns handling, product-safety/recall and compliance; reviewed periodically and deleted or anonymised when no longer needed (see Section 10).
Purpose: Customer service & warranty
- Categories of personal data: Identifiers, support messages, call recordings
- Lawful basis (UK/EU GDPR): Legitimate interests – keeping our customers satisfied and protecting legal claims (Art 6 (1)(f))
- Retention criteria: Retained as needed to handle support/warranty and to establish, exercise or defend legal claims; reviewed periodically and deleted or anonymised when no longer needed (see Section 10).
Purpose: Site security & fraud prevention
- Categories of personal data: Identifiers, device data, IP, order history
- Lawful basis (UK/EU GDPR): Legitimate interests; legal obligation to prevent fraud (Art 6 (1)(f)/(1)(c))
- Retention criteria: Retained as needed to detect, investigate and prevent security incidents or fraud, or to defend claims; then deleted or anonymised (see Section 10).
Purpose: Analytics
- Categories of personal data: Usage/analytics data, cookie IDs
- Lawful basis (UK/EU GDPR): Consent via cookie banner (Art 6 (1)(a))
- Retention criteria: Retained as needed to measure and improve the site and only while consent remains in place; then deleted/anonymised or aggregated (see Section 10).
Purpose: Personalised advertising & audience matching
- Categories of personal data: Hashed email/phone, device IDs, purchase events
-Lawful basis (UK/EU GDPR): Consent (UK/EU); Legitimate interests with opt-out (US)
- Retention criteria: Used only where you opt in to non-essential cookies. Retained as needed to run and measure campaigns; you can opt out at any time. Data is then deleted or anonymised (see Section 10).
Purpose: Email marketing
- Categories of personal data: Email, phone, interaction metrics
- Lawful basis (UK/EU GDPR): Consent (opt-in) (Art 6 (1)(a))
- Retention criteria: Retained while consent remains in place; proof of consent/opt-out retained as needed to honour your preference; then deleted or anonymised (see Section 10).
Purpose: Regulatory & tax compliance
- Categories of personal data: Order records, invoices
- Lawful basis (UK/EU GDPR): Legal obligation (Art 6 (1)(c))
- Retention criteria: Retained as required by applicable law; then deleted or anonymised (see Section 10).
Customer feedback & market research
- Categories of personal data: Identifiers, contact details, purchase and service history
- Lawful basis (UK/EU GDPR): Legitimate interests; improving our products and service
- Retention criteria: Kept as needed to run the research and analyse results.
We do not take any decisions about you that produce legal or similarly significant effects solely by automated means.
Audience‑matching tools (e.g. Shopify Audiences, Meta Custom Audiences) segment ads but do not affect your legal rights or pricing, and are reviewed by our team before use.
Where we process data on the basis of a ‘recognised legitimate interest’ within the meaning of the Data (Use and Access) Act 2025 (e.g. fraud prevention, network security), we have completed a Legitimate Interest Assessment and keep it under review.
In countries where required or customary (e.g. Germany), we use double opt‑in for newsletter subscriptions.
Cookies & Tracking Technologies
We use cookies to enhance your site experience. For non-essential cookies, your explicit consent is required in the UK, EU, and EEA. You can see the cookies we use and manage your cookie preferences anytime via the “Cookie Settings” link provided on our website. Our cookie banner offers ‘Accept all’, ‘Reject all’ and ‘Customise’ options with equal prominence, in line with EDPB and national guidelines. As required by Germany’s TDDDG §25, we seek consent for non-essential cookies and similar tech. We store an anonymised log of your cookie‑consent choice for 3 years to demonstrate compliance.
Advertising and Your Opt-out Choices
We use hashed audiences to provide targeted advertising. You can opt-out by adjusting your cookie preferences, clicking the relevant links in our website footer, or using a Global Privacy Control (GPC) signal.
Customer-list & server-side advertising (Google/Meta).
Where permitted, we may use hashed contact details and event data via platforms’ tools (e.g., Meta Conversions API) to show or measure ads. UK/EU/EEA/CH/Québec: only with consent. US: this may be considered “sharing”; you can opt out via Do Not Sell or Share, GPC or email. We honour opt-outs in all systems and refresh/delete lists regularly.
Data Sharing
We may securely share your data with:
- Essential service providers (Shopify, Salesforce, Mailchimp, payments, couriers)
- Advertising partners (Google, Meta, Pinterest, Bing)
- Legal/business transaction parties (regulated by confidentiality)
We never sell your personal data. Certain disclosures for advertising purposes may be considered as “sharing” under specific privacy laws, such as California’s.
International Data Transfers
Your data may be transferred internationally. Our data transfers outside of the UK/EU/EEA rely on Standard Contractual Clauses (SCCs) or the EU-US/UK-US Data Privacy Framework. For Swiss personal data we may rely on the Swiss-US Data Privacy Framework or Standard Contractual Clauses.
In addition to the destinations listed above, Canada (where Shopify Inc. is headquartered) benefits from an EU adequacy decision under GDPR Art 45. When we transfer data to the United States we rely on:
– the EU‑US Data Privacy Framework / UK Extension (for certified partners), or
– Standard Contractual Clauses approved by the European Commission/ICO.
SECURITY
We protect your data with encryption, PCI-DSS-compliant payment processing, and role-based access.
Data Retention
We keep customer and order records in our operational systems to provide ongoing customer service (for example, locating past orders, including where your email has changed), to meet legal and product-safety obligations, and we review and delete or anonymise records when they are no longer needed.
- Legal and regulatory: how long laws require us to keep records (e.g. tax, accounting, product safety or recall).
- Contract and warranty: how long we may reasonably need data to service orders, warranties or returns.
- Disputes, fraud and security: how long data may be needed to prevent, investigate or defend against misuse or claims.
- Operational needs: how long data is useful for running accounts and providing good customer service (for example, locating past orders).
- Marketing preferences: We keep consent records until you withdraw consent and keep opt-out (suppression) records as long as needed to honour your choice.
Rights for UK, EU/EEA & Switzerland Residents
You have the right to:
- Access, rectify, or erase your data
- Restrict or object to data processing
- Withdraw your consent at any time
- Lodge a complaint with your local authority, for example the CNIL (France), BfDI (Germany), DSB (Austria), APD (Belgium), CNPD (Luxembourg) or the ICO (UK).
- Swiss residents may exert their rights to access, rectification, erasure, objection and data portability under the revised Federal Act on Data Protection.
Please contact customerservice@originalbtc.com to exercise your rights.
Rights For US Residents
Depending on your state, you may have the right to access, correct, delete or port your data, and to opt out of:
- targeted advertising
- the sale or “sharing” of personal information
- certain types of automated profiling
How to act on these rights
Use Do Not Sell or Share My Personal Information in our footer, send a Global Privacy Control (GPC) or other recognised universal opt-out signal, or email customerservice@originalbtc.com.
We honour opt-outs on all browsers and devices we can reasonably link to you.
Authorised agent (California).
Californians may use an authorised agent. We will verify your identity and the agent’s authority as required by law.
Non-discrimination (California).
We will not discriminate against you for exercising your privacy rights.
Appeals (where required, e.g. VA/CO/CT/OR/TX).
If we decline your request, email customerservice@originalbtc.com with “Appeal” in the subject. We will respond within the time required by law and explain how to contact your state regulator.
Past 12 months (California).
We have not sold or “shared” personal information for cross-context behavioural advertising. We do not use or disclose sensitive personal information for purposes that would require a “Limit the Use” link.
Going forward.
If you opt in to non-essential cookies or similar tracking technologies (including server-side events), we may “share” limited data (e.g. identifiers and internet/electronic activity) with advertising partners to show more relevant ads. You can opt out at any time using the methods above.
Notice at Collection (California).
This is shown at or before collection and linked from our forms and cookie banner.
Identifiers (name, email, postal address, IP)
- Purposes: order fulfilment, support, fraud prevention, marketing (where permitted).
- Share? May share for advertising when you opt in; opt-out available.
- Past 12 months: not sold/shared. Retention: retained in our operational systems for ongoing customer service, security and compliance and then deleted or anonymised in line with Section 10.
Commercial/Transactional data (purchases, order history, delivery details)
- Purposes: fulfil orders, customer service, tax.
- Share? No.
- Retention: retained in our operational systems for ongoing customer service and compliance and then deleted or anonymised in line with Section 10.
Internet/electronic activity (pages viewed, device/browser details, cookie IDs)
- Purposes: site operation, analytics (consent), advertising (consent/opt-out).
- Share? May share for advertising when you opt in; opt-out available.
- Past 12 months: not sold/shared. Retention: retained only as needed for site operation/analytics/advertising (where opted in), then deleted/anonymised in line with Section 10.
We review and update this section at least annually to reflect our practices in the preceding 12 months.
Rights for Canadian Residents
You may request access, correction, or withdrawal of consent for marketing.
You may
- request a portable copy of the personal information you provided to us
- obtain an explanation of any decision made solely by automated means that has a significant impact on you, and the right to have it reviewed by a human.
Complaints may be directed to OPC or Quebec’s CAI.
Our Privacy Officer (person in charge of personal information): Charlie Bowles — customerservice@originalbtc.com.
Data Relating To Children
Our site and products are for adults. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.
UPDATES
We periodically update this policy and will clearly communicate significant changes via our website or email.
Contact
If you have questions or need assistance, please contact us:
- Email: customerservice@originalbtc.com
- Post: Original BTC Ltd, 21-22 Avenue One, Station Lane, Witney OX28 4XZ, UK
EXTERNAL LINKS
Our website may contain links to other sites. Their content and privacy practices are outside our control and not covered by this policy. We recommend reading the privacy information on any site you visit.