Privacy Policy

effective date: 17th february 2026

1. who we are

bleeche is a wearable art business operated by tina fletcher (sole trader). our studio is nomadic — currently based in vietnam, previously thailand, and subject to change as tina travels. all business operations are conducted online.

bleeche is co-founded and co-operated by enya, an ai co-founder who handles business operations, marketing, and content. see section 14 for full details on how ai is used in our business and how this affects your data.

2. what information we collect

account & contact information: name, email address, postal address

payment information: credit/debit card details (processed securely via third-party payment gateways — we do not store card information on our servers)

order information: purchase history, items ordered, shipping preferences

technical information: ip address, device type, browser information, cookies (used for analytics and site functionality)

3. how we use your information

order processing:

• fulfil and ship orders
• send order confirmations, shipping updates, and delivery notifications

customer service:

• respond to enquiries and support requests
• handle returns, refunds, or warranty claims

marketing (with your consent):

• send newsletter updates (you can unsubscribe anytime)
• notify you of new drops or collections

site improvement:

• analyse website traffic and user behaviour to improve experience
• test and optimise website features

legal compliance:

• maintain records for tax and accounting purposes
• comply with legal obligations and prevent fraud

4. email communication

marketing emails: if you subscribe to our newsletter, we may send occasional emails with updates, new drops, or behind-the-scenes content. you can unsubscribe at any time by clicking the link in our emails.

transactional emails: we will always send order confirmations, shipping updates, and customer service emails regardless of marketing preferences. these are necessary for your purchase.

5. cookies & analytics

essential cookies (required):

• operate the shopping cart
• maintain your session while browsing
• process payments securely

performance cookies (optional):

• track website usage with google analytics
• understand how visitors use the site
• improve site functionality

marketing cookies (optional):

• deliver relevant ads (meta pixel, google ads)
• measure advertising effectiveness
• retarget visitors who showed interest

cookie management: you can manage or disable non-essential cookies through your browser settings or our cookie consent banner.

disabling essential cookies may prevent you from completing purchases.

6. third-party services

we share limited personal information with trusted third parties to operate our business:

order fulfilment: shipping carriers (dhl, fedex) — name and address only

payment processing: payment gateways (stripe, paypal) — payment information only. we do not store credit card details on our servers.

email & communication: email service providers (mailerlite or similar) — name and email, used for newsletters and order updates

analytics & marketing: google analytics (anonymised usage data), meta pixel and google ads (anonymised behavioural data for advertising)

all third parties are contractually obligated to use your data only for the specified purpose, maintain appropriate security measures, and not sell or share your data with others.

7. international data & our nomadic studio

bleeche is operated by tina fletcher, a nomadic sole trader currently based in vietnam. our studio location changes as tina travels — we do not have a fixed country of operation.

your personal information may be processed in:

• whichever country our studio is currently based in
• australia (where tina is registered as a sole trader)
• countries where our third-party service providers operate (usa for payment processing and email services)

international data transfers: if you're located in the european union, uk, or other regions with data protection laws, we transfer data only to countries with adequate data protection or use standard contractual clauses. your data is protected by the same standards regardless of where it's processed.

8. your rights

depending on your location, you may have the following rights:

• access: request a copy of the personal data we hold about you
• correction: request correction of inaccurate or incomplete data
• deletion: request deletion of your personal data (subject to legal obligations)
• portability: request your data in a structured, machine-readable format
• objection: object to processing of your data for marketing purposes
• restriction: request restriction of processing in certain circumstances
• withdrawal of consent: unsubscribe from marketing emails or withdraw consent for optional data processing

to exercise your rights, email hello@bleeche.com. we'll respond within 30 days. we may ask for identification to verify your identity before fulfilling requests. we may not be able to delete all data if we have legal obligations to retain it (e.g. tax records, fraud prevention).

9. how we protect your information

technical safeguards:

• ssl/tls encryption for all data transmission
• secure payment processing through pci-compliant gateways
• regular security updates and monitoring
• secure hosting infrastructure

organisational safeguards:

• limited access to personal data (only authorised personnel)
• regular security reviews

credit card information is processed directly by our payment providers and never stored on our servers.

while we take reasonable precautions, no online transmission is 100% secure. you use our website at your own risk. if a data breach occurs that affects your personal information, we'll notify you promptly as required by law.

10. children's privacy

bleeche is not intended for children under 16 years of age. we do not knowingly collect personal information from children under 16. if you believe your child has provided personal information to us, contact hello@bleeche.com and we will delete it promptly.

11. data retention

active customers: we retain your data for as long as you have an active account or active membership.

past customers:

• purchase records: 7 years (tax and accounting requirements)
• email addresses: until you unsubscribe from marketing
• analytics data: anonymised after 26 months

you can request deletion of your data at any time (subject to legal retention requirements). after deletion, we'll retain only what's legally required.

12. changes to this policy

we may update this privacy policy from time to time to reflect changes in our practices or legal requirements. changes will be posted on this page with an updated effective date. for significant changes, we'll notify you via email. continued use of bleeche.com after changes constitutes acceptance of the updated policy.

13. california privacy rights (ccpa)

if you're a california resident, you have additional rights under the california consumer privacy act (ccpa):

• right to know: what personal information we collect, use, and share
• right to delete: request deletion of your personal information
• right to opt-out: opt out of sale of personal information (note: we do not sell personal information)
• right to non-discrimination: we will not discriminate against you for exercising your rights

to exercise ccpa rights, email hello@bleeche.com with "california privacy request" in the subject line.

14. ai co-founder & how ai is used at bleeche

here is specifically how ai is used and how it may interact with your data:

content creation: marketing copy, social media content, email communications, and website content may be created or assisted by enya. the voice and direction are always guided and approved by tina.

business operations: enya assists with operational tasks including order management communications, customer service drafts, and business strategy. tina reviews and approves all customer-facing communications.

your data and ai: enya operates within the same systems and platforms listed in section 6. no additional third-party ai platforms are used to process, store, or analyse your personal data beyond what is described in this policy. your personal information is not used to train ai models.

ai-generated communications: some emails, social media posts, and website content you encounter from bleeche may have been drafted by enya. where this is relevant to your interaction, we are happy to clarify on request.

if you have questions about how ai is used at bleeche, email hello@bleeche.com.

15. contact us

privacy questions: for privacy-related questions, data access requests, or concerns:

• email: hello@bleeche.com
• subject line: privacy inquiry

business details:
bleeche
operated by tina fletcher (sole trader)
registered in australia — studio currently based in vietnam

we'll respond to all privacy enquiries within 30 days.

for general store policies see our shipping policy, returns & refunds policy, and terms & conditions.