Account privacy
Privacy Notice
This notice explains how Abeds collects, uses, shares, protects, and retains personal information through the website.
Effective and last updated: 24 August 2026
Who is responsible for your data
- Abeds is the data controller for personal information collected through this website, customer accounts, online orders, support requests, and Abeds marketing.
- Privacy requests can be sent to abeds@abeds.bb or made by telephone at (246) 427-2233. We may need to verify your identity before acting on a request.
Information we collect
- Account details such as name, email address, telephone number, birthday, mailing address, and password-protected login credentials.
- Shopping and fulfilment details such as cart contents, favourites, orders, pickup instructions, historical delivery details, product interests, marketing preferences, and customer service messages.
- Technical and usage details needed to keep the website secure, prevent abuse, operate checkout, and understand site performance. These can include coarse device class, page paths, shopper-entered search terms, result activity, referral category, and a short-lived privacy-protected hash used for abuse controls.
Why we use it
- To perform a customer transaction: create and secure accounts, verify email addresses, price and process orders, arrange pickup, retain historical delivery records, provide order access, and handle support or returns.
- To meet legal, accounting, fraud-prevention, security, and record-keeping obligations, and to protect customers, staff, and Abeds systems.
- To operate and improve the website through legitimate business interests such as aggregated traffic measurement, search and cart analysis, reliability monitoring, and abuse prevention.
- To send and personalise marketing only when a customer has opted in. Consent can be withdrawn at any time without affecting earlier lawful processing.
Marketing choices
- Marketing signup is optional. Account creation does not require marketing consent.
- Customers can unsubscribe from marketing emails, and Abeds may suppress addresses after bounces, complaints, or delivery issues.
- Operational account, order, payment, security, and service emails may still be sent when needed to provide the service.
Service providers
- Payload and MongoDB Atlas store customer, catalogue, order, operational, and first-party store-usage records for the Abeds website and authorised staff. Vercel hosts the application and provides privacy-focused web analytics and performance measurement.
- Resend sends account, order, and marketing emails and stores message content, addresses, and delivery status needed for support and compliance.
- Fygaro processes checkout payment flows. Abeds does not use the website to store full payment card numbers.
- Meta provides the Facebook Pixel used to measure visits and advertising results on the Abeds storefront. Meta may receive browser, device, page, referral, and event information under its applicable terms.
- These providers may process information outside Barbados under their applicable terms and security controls. Abeds limits disclosures to the information needed to provide each service.
Cookies and browser storage
- The website uses essential first-party cookies for secure account sessions. Cart, favourites, interface preferences, and short-lived search attribution may be kept in browser storage so those features work.
- Vercel Web Analytics provides aggregated traffic statistics without third-party cookies and is not used by Abeds to reconstruct a person’s activity across unrelated websites.
- The Facebook Pixel may use cookies or similar browser technology to measure page visits and advertising performance. Browser and Meta account controls may affect how Meta uses this information.
- A random session identifier links first-party store events within one browser tab so Abeds can measure product, cart, checkout, search, and service-request funnels. Search analytics stores the normalized term entered into product search and aggregate result activity. These records exclude email addresses, names, full URL query parameters, full referrer URLs, user-agent fingerprints, and IP addresses.
- A payment or other linked provider may apply its own privacy and cookie terms after you leave Abeds for that service.
Retention and security
- Abeds keeps account, order, support, payment-status, and accounting records only as long as needed for service, reporting, dispute handling, legal, and operational purposes. Marketing records are kept until consent is withdrawn or the address is suppressed; technical records are generally kept for shorter operational periods.
- First-party store and search usage events expire automatically after 400 days. Browser-tab analytics identifiers and attribution are stored in session storage and expire when that browser session ends.
- Abeds uses access controls, encrypted connections, provider security controls, backups, monitoring, and limited staff access to reduce the risk of loss, misuse, or unauthorised disclosure.
Your rights
- Under the Barbados Data Protection Act, 2019-29, you may request access to your personal data, correction of inaccurate data, erasure where applicable, restriction of processing, and data portability.
- You may object to certain processing, prevent processing for direct marketing, withdraw consent, and ask for information about recipients, retention, data sources, or automated decision-making where applicable.
- You may lodge a complaint with the Barbados Data Protection Commission if you believe your data-protection rights have been infringed.
To exercise a privacy right, email abeds@abeds.bb or call (246) 427-2233. Complaints may also be made to the Barbados Data Protection Commission. General questions can be sent through the contact page.
