Privacy Policy

Last updated September 29, 2025

This Privacy Notice for Bas 1 Embroidery & Printing Limited (doing business as Bas1group) ('we', 'us', or 'our') describes how and why we might access, collect, store, use, and/or share ('process') your personal information when you use our services ('Services'), including when you:

• Visit our website at https://bas1group.com or any website of ours that links to this Privacy Notice
• Use Branded Workwear, Personal Protection Equipment (PPE) and industrial supplies
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@bas1group.com.

1. What Information Do We Collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

The personal information we collect may include the following: names, phone numbers, email addresses, mailing addresses, job titles, usernames, passwords, contact preferences, contact or authentication data, billing addresses, and debit/credit card numbers.

Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information: financial data and credit worthiness data.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases. All payment data is handled and stored by Stripe. You may find their privacy notice here: https://stripe.com/gb/privacy.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and other technical information.

The information we collect includes:

• Log and Usage Data — service-related, diagnostic, usage, and performance information our servers automatically collect.
• Device Data — information about your computer, phone, tablet, or other device used to access the Services.
• Location Data — information about your device's location, which can be either precise or imprecise.

Google API: Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

2. How Do We Process Your Information?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts
• To deliver and facilitate delivery of services to the user
• To respond to user enquiries and offer support to users
• To send administrative information to you
• To fulfil and manage your orders, payments, returns, and exchanges
• To enable user-to-user communications
• To request feedback
• To send you marketing and promotional communications (with your consent)
• To deliver targeted advertising tailored to your interests
• To protect our Services through fraud monitoring and prevention
• To identify usage trends and improve our Services
• To save or protect an individual's vital interest

3. What Legal Bases Do We Rely On?

We only process your personal information when we have a valid legal reason to do so under applicable law. We may rely on the following legal bases:

• Consent — where you have given us permission for a specific purpose. You can withdraw your consent at any time.
• Performance of a Contract — where processing is necessary to fulfil our contractual obligations to you.
• Legitimate Interests — where processing is reasonably necessary to achieve our legitimate business interests.
• Legal Obligations — where processing is necessary for compliance with our legal obligations.
• Vital Interests — where processing is necessary to protect your vital interests or those of a third party.

4. When and With Whom Do We Share Your Personal Information?

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf. We have contracts in place with our third parties designed to safeguard your personal information.

Categories of third parties we may share personal information with include: Communication & Collaboration Tools, Data Analytics Services, Data Storage Service Providers, Finance & Accounting Tools, Payment Processors, Sales & Marketing Tools, Social Networks, Website Hosting Service Providers, Cloud Computing Services, and AI Platforms.

We may also share your personal information in the following situations:

• Business Transfers — in connection with any merger, sale of company assets, or acquisition.
• Google Maps Platform APIs — when using location-based features.
• Business Partners — to offer you certain products, services, or promotions.

5. Do We Use Cookies and Other Tracking Technologies?

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising purposes.

Google Analytics: We may share your information with Google Analytics to track and analyse use of the Services. To opt out, visit https://tools.google.com/dlpage/gaoptout.

6. Is Your Information Transferred Internationally?

Our servers are located in the United Kingdom. Your information may be transferred to, stored by, and processed by us in our facilities and in the facilities of third parties in other countries.

We have implemented the European Commission's Standard Contractual Clauses for transfers of personal information, requiring all recipients to protect personal information originating from the EEA or UK in accordance with European data protection laws.

We also comply with the EU-US Data Privacy Framework as set forth by the US Department of Commerce. EU individuals with Data Privacy Framework enquiries or complaints should contact us at privacy@bas1group.com.

We are subject to the investigatory and enforcement powers of the UK Information Commissioner's Office.

7. How Long Do We Keep Your Information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or securely store and isolate it from any further processing until deletion is possible.

8. How Do We Keep Your Information Safe?

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.

9. Do We Collect Information From Minors?

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years of age. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. Please contact us at privacy@bas1group.com if you become aware of any such data.

10. What Are Your Privacy Rights?

In some regions (like the EEA, UK, and Switzerland), you have certain rights under applicable data protection laws. These may include the right to:

• Request access and obtain a copy of your personal information
• Request rectification or erasure
• Restrict the processing of your personal information
• Data portability (where applicable)
• Object to the processing of your personal information
• Not be subject to automated decision-making

If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to complain to your Member State data protection authority or the UK Information Commissioner's Office.

Withdrawing consent: You can withdraw your consent at any time by contacting us using the details in Section 13 below. This will not affect the lawfulness of processing before its withdrawal.

Opting out of marketing: You can unsubscribe from our marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

If you would like to review or change your account information, or terminate your account, please contact us using the information provided below.

11. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ('DNT') feature. As no uniform technology standard for recognising DNT signals has been finalised, we do not currently respond to DNT browser signals. If a standard is adopted that we must follow in the future, we will inform you in a revised version of this Privacy Notice.

12. Do We Make Updates to This Notice?

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated date at the top of this Privacy Notice. If we make material changes, we may notify you by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently.

13. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO):

14. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information.

To request to review, update, or delete your personal information, please contact us at privacy@bas1group.com or submit a data subject access request.