Who we are
Handsold is a trading name of Bifrost Development Ltd (company number 17215135, registered office Unit 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole, BH16 6FA). We’re responsible for the personal data of people who visit handsold.co.uk, join our early access list, or open a shop with us.
For anything about your data, email hello@bifrost.gg.
Buying from a shop on Handsold
Each shop on Handsold is run by its own seller. When you buy from a shop, sign up to its emails or create an account with it, the shop is responsible for your data. We handle it on the shop’s behalf, to run the shop, and only as the shop instructs. The shop’s own privacy policy is on its pages.
For anything about your data from a shop, contact the shop first. If you can’t reach them, contact us and we’ll help.
What we collect and why
| What | Why | Our lawful basis |
|---|---|---|
| Your email, and what you make if you tell us, when you join the early access list | To tell you when you can open a shop | Your consent, which you can take back at any time |
| Your name, email address and password (stored scrambled, so nobody can read it), and the details of your shop and staff | To give you your account and run your shop | Our contract with you |
| Your plan, and the fee we take on each order | To charge you correctly and keep our accounts | Our contract with you, and the law on business records |
| Messages you send us | To reply and help you | Our legitimate interest in answering you |
| Sign-in times and the network address you sign in from | To keep accounts safe and stop misuse | Our legitimate interest in security |
| The words or photos you ask an AI helper about | To make the suggestion you asked for | Our contract with you |
Cookies
We only use cookies the site needs to work: keeping you signed in, remembering which shop your back office opens on, holding a basket in a shop, and letting sellers preview a draft. We don’t use advertising or tracking cookies, so there’s no cookie banner.
Handsold’s own site doesn’t track your visit. Shops count their visits without cookies, using a code that changes every day, so nobody can follow you from one day to the next.
Who helps us
We never sell personal data. These companies help us run Handsold, and only use personal data to do that job for us:
- Oracle Cloud hosts Handsold and its data, in London.
- Cloudflare keeps the site fast and protects it from attacks.
- Our email delivery provider sends account emails, and shops’ order and marketing emails.
- OpenRouter, and the AI services it passes requests to, make the AI helpers’ suggestions, only when a seller uses them.
- Mollie will handle card payments in shops once payments are switched on.
We may also share data where the law requires it, or to protect people from fraud or harm.
Data outside the UK
Some of these companies, such as Cloudflare and the AI services, may handle data outside the UK. When they do, we rely on the UK’s adequacy rules or the UK’s standard contract terms for international transfers, so your data has the same protection.
How long we keep it
- Early access list: until we’ve told you shops are open, then for no more than 12 months unless you open a shop. You can ask us to take you off sooner.
- Your account and shop: for as long as your account is open.
- Records of plans and fees: for six years, because the law requires businesses to keep their accounts.
- Messages and security records: for as long as we need them to help you and keep accounts safe.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to stop or limit how we use it, or to send it to you in a form you can take elsewhere. Where we rely on your consent, you can take it back at any time.
Email hello@bifrost.gg and we’ll reply within a month. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Keeping it safe
Passwords are stored scrambled, everything travels over an encrypted connection, and only people who need to see personal data to do their job can. Each shop’s data is kept apart from every other shop’s.
Changes to this policy
If we change this policy, we’ll update the date at the top. If a change affects how we use your data, we’ll tell sellers by email first. You can always ask us about it through our contact page.