Privacy Policy

Data Privacy Policy

Identity and Contact Details of the Data Controller

Bob and Lush

Unit 1, Paramount House Gelderd Road, Birstall, Batley, England, WF17 9QD.


Phone: 020 8089 3865

Purpose of and Legal Basis for Processing

When you interact or place an order with Bob and Lush, we may collect certain information from you. This information is necessary to fulfill our contractual obligations, provide customer support, and comply with legal requirements. The legal basis for processing your personal data is either your consent, the necessity for the performance of a contract, or our legitimate interests.

Types of Personal Data Collected

We collect the following types of personal data when you create an account or place an order on Bob and Lush:

  • Email address
  • First name
  • Last name
  • House address
  • Phone number
  • Consent preference for email marketing
  • Order history

Additionally, if you have created a pet profile, we may store the following pet information:

  • Pet's weight
  • Pet's age
  • Pet's name

Data Collection Methods

Personal data is collected on Bob and Lush through the following methods:

  • Account creation form: When you create an account on our website, we collect your email address, first name, last name, house address, phone number, and pet information (if provided).
  • Order placement: When you place an order, we collect the necessary information to process and deliver your order.
  • Mailing list subscription: If you choose to subscribe to our mailing list, we collect your email address through a sign-up form on our website.
  • Cookies and tracking technologies: We use cookies and tracking technologies on our website to enhance your browsing experience and gather statistical information.

Data Storage and Retention

We store and retain your personal data in secure databases. Your data is stored for as long as necessary to fulfill the purposes outlined in this policy or as required by law. We regularly review and assess the need to retain personal data.

Data Security Measures

Bob and Lush takes the security of your personal data seriously. We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or disclosure. These measures include encryption, secure socket layer (SSL) technology, restricted access controls, and regular security assessments.

Third-Party Sharing

We may share your personal data with third parties for the following purposes:

  • Product fulfillment: We may share your name and address with couriers and postal operators to deliver your goods.
  • Marketing: We may share your data with trusted third parties to conduct marketing activities on our behalf.
  • Legal requests: We may disclose your data to government bodies or authorities when required by law or in response to a legal request.

We ensure that any third parties with whom we share your data are compliant with data protection regulations and maintain appropriate safeguards.

International Data Transfers

Personal data collected by Bob and Lush may be transferred to countries outside the European Economic Area (EEA). If such transfers occur, we will take appropriate measures to ensure that your data receives an adequate level of protection, as required by data protection laws.

Data Subject Rights

As an individual whose personal data is processed by Bob and Lush, you have the following rights:

  • Right of access: You can request information about the personal data we hold about you.
  • Right to rectification: You can request to update or correct any inaccurate or incomplete personal data.
  • Right to erasure: You can request the deletion of your personal data, subject to certain legal obligations.
  • Right to restrict processing: You can request the restriction of processing your personal data in certain circumstances.
  • Right to object to processing: You can object to the processing of your personal data based on legitimate interests or direct marketing purposes.
  • Right to data portability: You can request to receive a copy of your personal data in a commonly used and machine-readable format.
  • Right to withdraw consent: If we rely on your consent for processing, you can withdraw it at any time.

To exercise any of these rights or if you have any privacy-related inquiries, please contact us at

Updates to the Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal obligations. Any updates will be communicated to you by posting the revised policy on our website or through other appropriate means.

Complaints and Supervisory Authority

If you have any concerns about how we process your personal information, please contact us in the first instance. You also have the right to lodge a complaint with your supervisory authority if you believe that your rights have been infringed.

Terms and Conditions

Please refer to our separate Terms and Conditions page for detailed information on the terms of use of our website.


We use cookies and similar tracking technologies on our website to provide you with a personalized browsing experience. By using our website, you consent to the use of cookies as described in our Cookie Policy.