Privacy policy

Privacy Policy

Last updated: 26 July 2026

This Privacy Policy explains how Be A Crab LTD collects, uses, stores and shares personal information when you visit beacrab.com, create an account, place an order, purchase, receive or use a gift card, contact us, subscribe to marketing communications or otherwise interact with our website, products and services.

Our online store is powered by Shopify, which provides the ecommerce platform that allows us to offer our products and services to you.

Please read this Privacy Policy carefully. It explains how we handle personal information and the rights available to you under applicable data-protection law.

1. Who we are

Be A Crab LTD is the data controller responsible for the personal information described in this Privacy Policy.

Legal name: Be A Crab LTD
Trading name: Be A Crab – The Shell Club
Company number: 16980992

Registered and trading address:

Be A Crab LTD
Unit 2 Curlew House
Trinity Park
Trinity Way
London
E4 8TD
United Kingdom

Email: sales@beacrab.com

In this Privacy Policy, “Be A Crab”, “we”, “us” and “our” refer to Be A Crab LTD.

2. Personal information we collect

The personal information we collect depends on how you interact with our website and services.

Information you provide directly

We may collect:

Your full name
Billing and delivery addresses
Email address
Telephone number
Account login information
Account preferences and settings
Order and transaction details
Products you purchase, return or enquire about
Customer-service correspondence
Return and refund information
Reviews, survey responses and competition entries
Marketing preferences
Information included in messages, forms or other communications you send to us

Gift-card information

When a gift card is purchased, sent, received, redeemed, refunded or reissued, we may collect and process information including:

The purchaser’s name, email address and order details
The gift-card value and transaction information
The intended recipient’s name and email address, where provided by the purchaser
A personal message entered for the recipient, where that feature is available
The date and time the gift card is issued, delivered, redeemed, refunded or reissued
The gift-card code or other identifier
The available balance and redemption history
Information relating to cancellation, refund, replacement or resend requests
Information concerning suspected misuse, unauthorised access or fraud
Customer-service correspondence relating to the gift card

Where a purchaser provides another person’s contact details, the purchaser should ensure that they are entitled to provide those details and that the recipient would reasonably expect us to use them to deliver and administer the gift card.

Payment information

Payments are processed through Shopify Payments and other payment providers offered at checkout.

Payment providers may collect and process information including:

Payment-card details
Payment method
Billing information
Transaction value
Payment confirmation
Fraud-prevention information

We do not normally receive or store your complete debit or credit card number. Payment information is processed by Shopify and the relevant payment provider in accordance with their own privacy and security practices.

Information collected automatically

When you visit or use our website, we and our technology providers may automatically collect information including:

Your IP address
Browser type and version
Device type
Operating system
Device and advertising identifiers
Approximate location derived from your IP address
Pages and products viewed
Searches performed
Products added to your basket
Checkout activity
Purchases and conversions
Referring website or advertising campaign
Dates and times of visits
Website navigation and interactions
Cookie identifiers and similar online identifiers
Interactions with our emails and advertisements

This information may be collected through cookies, pixels, tags, local storage, software development kits and similar technologies.

3. How we collect personal information

We may collect personal information:

Directly from you
Automatically when you use our website
Through Shopify and Shopify-connected services
From payment providers
From delivery and fulfilment providers
From Google, Meta and other analytics or advertising providers
From email and SMS marketing providers
From fraud-prevention and security providers
From social-media platforms when you interact with us
From other service providers and business partners
From publicly available sources where legally permitted
From a person purchasing a gift card for another recipient
When a gift card is issued, delivered, redeemed, refunded, reissued or used to pay for an order

Where another person gives us your details, such as when sending you a gift card, we may receive your information without collecting it directly from you.

4. How we use personal information

We may use personal information for the following purposes.

Providing our products and services

We use personal information to:

Process and fulfil orders
Take and verify payment
Deliver products
Send order and delivery updates
Create and manage customer accounts
Remember basket contents and preferences
Process cancellations, returns and refunds
Provide requested products and services
Carry out our obligations under our contract with you

Gift cards and store credit

We may use personal information to:

Create and issue digital gift cards
Deliver a gift card to the purchaser or intended recipient
Send the gift-card code and associated service communications
Confirm that a gift card has been issued or delivered
Record and display the available balance
Process gift-card redemptions
Apply gift-card value towards an eligible purchase
Return eligible refunds to a gift-card balance
Resend gift-card information after appropriate security checks
Respond to questions about balances, delivery or redemption
Investigate lost, stolen, duplicated, compromised or fraudulently used gift-card codes
Prevent unauthorised use and protect gift-card value
Maintain transaction, accounting, customer-service and fraud-prevention records
Comply with legal and regulatory obligations

We do not use a gift-card recipient’s email address for unrelated marketing merely because someone has sent them a gift card.

A recipient will only receive marketing communications where a separate lawful basis applies, such as where the recipient has independently subscribed or consented.

Customer service

We use personal information to:

Respond to questions and enquiries
Resolve complaints
Provide product and order support
Communicate about returns and refunds
Assist with gift-card delivery, redemption, balances and replacement requests
Maintain records of our communications with you

Operating and improving our business

We may use personal information to:

Operate and maintain our website
Understand how customers use our website
Analyse product and website performance
Improve our products and customer experience
Develop new products and services
Conduct business reporting and forecasting
Test website features
Diagnose technical problems
Manage stock and fulfilment
Protect the security and integrity of our systems

Marketing and advertising

Subject to your choices and applicable law, we may use personal information to:

Send promotional emails
Send promotional SMS messages
Send abandoned-basket reminders
Send back-in-stock notifications
Show advertisements on other websites and platforms
Measure advertising performance
Measure purchases and other conversions
Create advertising audiences
Display advertising based on previous interactions with our website
Limit how often an advertisement is displayed
Understand which advertisements lead customers to our website

We may use advertising and analytics services provided by Google, Meta and other platforms.

Where required, we will obtain your consent before using non-essential cookies or similar technologies for personalised advertising, remarketing or analytics.

Security and fraud prevention

We may use personal information to:

Authenticate customer accounts
Detect and prevent fraud
Identify suspicious or unauthorised transactions
Detect suspicious gift-card activity
Protect our customers, website and business
Investigate security incidents
Prevent misuse of our services
Enforce our terms and policies

Legal and regulatory purposes

We may use personal information to:

Comply with tax and accounting requirements
Meet consumer-protection obligations
Respond to lawful requests from authorities
Comply with court orders
Establish, exercise or defend legal claims
Enforce our agreements
Comply with other applicable legal obligations

5. Lawful bases for processing

Under UK data-protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we rely on the following lawful bases.

Performance of a contract

We process personal information when necessary to:

Process and fulfil your order
Take payment
Deliver products
Issue and administer a gift card
Deliver a gift card to the purchaser or recipient
Process gift-card redemption
Manage your account
Communicate about your order
Process returns and refunds
Provide services you have requested

Where a gift card is sent to another person, some processing may be necessary to provide the service requested by the purchaser and to deliver and administer the gift card for the recipient.

Legitimate interests

We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

These interests may include:

Operating and improving our business
Providing customer support
Understanding website and product performance
Preventing fraud
Protecting our systems
Protecting gift-card balances from unauthorised use
Measuring advertising effectiveness
Promoting our products where legally permitted
Managing business risks
Establishing or defending legal claims

Consent

We rely on consent where required, including for:

Non-essential cookies
Certain analytics technologies
Personalised advertising
Remarketing technologies
Certain email or SMS marketing communications

You may withdraw consent at any time. Withdrawing consent does not affect processing that occurred before it was withdrawn.

Legal obligations

We process personal information where necessary to comply with legal obligations, including obligations relating to:

Tax
Accounting
Company records
Consumer protection
Fraud prevention
Court or regulatory requirements

6. Email and SMS marketing

Where permitted by law, we may send you marketing communications about products, offers, promotions and news.

We may send marketing where:

You have provided your consent
You purchased from us and the law permits us to market similar products to you
Another applicable lawful basis allows it

Receiving a gift card does not automatically subscribe the recipient to marketing.

We will not add a gift-card recipient to our marketing list merely because the purchaser supplied their email address for delivery of the gift card.

You can unsubscribe at any time by:

Selecting the unsubscribe link in a marketing email
Following the opt-out instructions in an SMS
Updating your marketing preferences
Contacting sales@beacrab.com

Opting out of marketing will not prevent us from sending essential communications concerning an order, payment, account, gift card, return, refund or legal matter.

We may keep limited suppression information after you unsubscribe so that we can respect your request and avoid sending further marketing.

7. Cookies and similar technologies

Our website uses cookies, pixels, tags and similar technologies.

Essential cookies

Essential cookies are required for functions such as:

Keeping products in your basket
Operating the checkout
Remembering account sessions
Processing payments
Maintaining website security
Preventing fraud
Remembering privacy choices

These cookies cannot always be disabled through our website because they are required for the website to function.

Analytics cookies

Subject to your consent where required, analytics cookies help us understand:

How visitors use our website
Which pages and products are popular
How visitors reached our website
Whether website features work correctly
How we can improve the customer experience

Advertising cookies

Subject to your consent where required, advertising cookies and pixels may be used to:

Measure advertising performance
Measure purchases and conversions
Create advertising audiences
Show advertisements based on website activity
Support remarketing
Limit the frequency of advertisements

You can accept, reject or manage non-essential cookies using the cookie banner or privacy settings displayed on our website.

You can also control cookies through your browser settings. Blocking certain cookies may affect how parts of the website operate.

More information is available in our separate Cookie Policy.

8. Google services

We may use Google services including:

Google Analytics
Google Ads
Google Tag Manager
Google Merchant Center
Google conversion tracking
Google remarketing
Google audience and advertising services

Depending on your consent choices and how our services are configured, Google may receive information including:

IP address
Cookie identifiers
Device and browser information
Pages and products viewed
Basket activity
Purchases
Order value
Advertising interactions
Conversion events

We use these services to understand website use, measure advertising performance, identify successful campaigns and, where permitted, display more relevant advertisements.

Where required, your consent choices are communicated to Google through consent signals. Advertising or analytics storage may be limited where consent has not been provided.

Google may process information in accordance with its own privacy terms and may combine information received from our website with information from other Google services where legally permitted.

You can manage advertising personalisation through your Google account and Google advertising settings.

9. Meta services

We may use Meta technologies including:

Meta Pixel
Facebook advertising tools
Instagram advertising tools
Meta conversion tracking
Meta audience and remarketing services

Depending on your consent choices, Meta may receive information including:

Website visits
Products viewed
Basket activity
Checkout activity
Purchases
Device and browser information
IP address
Cookie identifiers
Advertising identifiers

We use these technologies to:

Measure advertising performance
Understand customer journeys
Create advertising audiences
Support remarketing
Display relevant advertisements
Find audiences who may have interests similar to existing customers

Meta may combine information received from our website with information connected to Facebook, Instagram and other Meta services, subject to Meta’s terms and privacy policies.

You can manage advertising preferences through your Meta account settings.

10. Shopify

Our website and online store are hosted and operated through Shopify.

Shopify provides services including:

Website hosting
Ecommerce functionality
Customer accounts
Shopping baskets and checkout
Order management
Gift-card and store-credit functionality
Payment-related services
Fraud prevention
Security
Analytics
Connected commerce services

Information submitted through our website is transmitted to and processed by Shopify and relevant Shopify service providers.

Shopify may process some information as a service provider acting on our behalf. Shopify may also process certain information for its own purposes, as explained in Shopify’s privacy documentation.

Shopify gift-card services

Shopify provides software that supports the issuance, administration, redemption and balance management of gift cards and store credit.

Gift-card information may therefore be processed through Shopify’s systems when a gift card is purchased, issued, delivered, redeemed, refunded or reissued.

We remain responsible for operating our gift-card programme, deciding how gift cards are issued and used, and ensuring that our processing of personal information complies with applicable law.

Shopify enhanced services and Network Intelligence

We may use Shopify features that improve personalisation, analytics, advertising, fraud prevention and commerce services.

These features may use information about your interactions with our store together with information from interactions with Shopify or other participating Shopify merchants.

Where Shopify processes information for its own enhanced services or Network Intelligence purposes, Shopify may be independently responsible for that processing and for responding to relevant privacy-rights requests.

Further information is available in Shopify’s Consumer Privacy Policy and Shopify Privacy Portal.

11. Payment providers

Payment services may be provided by:

Shopify Payments
Card networks
Banks and financial institutions
Digital-wallet providers
Other payment methods offered at checkout

Payment providers process information necessary to:

Authorise payments
Complete transactions
Prevent fraud
Process refunds
Meet financial and regulatory obligations

Their processing is also governed by their own privacy policies.

12. Delivery and fulfilment providers

We may share necessary information with delivery, courier, warehouse and fulfilment providers.

This information may include:

Your name
Delivery address
Telephone number
Email address
Order contents
Delivery instructions
Tracking information

This sharing is necessary to fulfil and deliver your order and provide delivery updates.

Digital gift cards are normally delivered electronically and do not require a physical courier or shipping provider.

13. Other parties with whom we share information

We may share personal information with trusted third parties where necessary to operate our business.

These may include:

Shopify and Shopify-connected services
Payment processors
Delivery and fulfilment providers
Gift-card delivery and administration providers
Email-delivery providers used to send digital gift cards
Website hosting and maintenance providers
Security and fraud-prevention providers
Customer-service platforms
Email and SMS marketing providers
Google, Meta and other analytics or advertising providers
Review and survey platforms
Accountants
Auditors
Insurers
Legal and professional advisers
Regulators
Courts
Law-enforcement authorities
Tax authorities
Parties involved in a business sale, restructuring, merger or acquisition

We require service providers to process personal information securely and only for authorised purposes where applicable.

We do not sell customer names, contact details or order information directly in exchange for money.

Some laws define certain advertising-related disclosures as “sharing” or “selling”, even where no money is exchanged. Where applicable, we provide cookie choices and other opt-out mechanisms.

14. International transfers

Some providers we use, including Shopify, Google, Meta and other technology or marketing providers, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take steps intended to ensure it remains appropriately protected.

Depending on the circumstances, these safeguards may include:

A UK adequacy regulation
The UK International Data Transfer Agreement
The UK Addendum to the European Commission Standard Contractual Clauses
Standard contractual clauses
Contractual, technical and organisational safeguards
Another legally recognised transfer mechanism

You may contact us for further information about the safeguards used for relevant international transfers.

15. How long we retain personal information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

The relevant period may depend on:

The type of information
Why it was collected
Whether your account remains active
Whether an order or customer-service matter is ongoing
Tax and accounting requirements
Fraud-prevention requirements
Security requirements
Limitation periods for legal claims
Whether the information is required for a dispute

Order, transaction, payment and accounting records may be retained for the period required by tax, accounting and company law.

Customer-service records may be retained for a reasonable period after an enquiry or complaint is resolved.

Marketing information may be retained until you unsubscribe, withdraw consent or we determine that it is no longer needed.

We may retain limited suppression information after an opt-out to ensure that your marketing preference continues to be respected.

Gift-card records

Gift-card issuance, delivery, balance, redemption, refund and transaction records may be retained for as long as the gift card remains active.

We may retain relevant gift-card records afterwards for the period reasonably required for:

Accounting and tax purposes
Fraud prevention
Customer support
Resolving balance or redemption disputes
Investigating unauthorised use
Establishing, exercising or defending legal claims
Complying with legal and regulatory obligations

Where a gift card has no stated expiry date, this may mean that some gift-card records need to be retained for an extended period while the gift card remains redeemable.

When personal information is no longer required, we will delete, anonymise or securely dispose of it, subject to legal and technical limitations.

16. Security

We use reasonable technical and organisational safeguards designed to protect personal information against:

Unauthorised access
Accidental loss
Misuse
Alteration
Disclosure
Destruction

Measures may include:

Secure Shopify infrastructure
Access restrictions
Password protection
Payment-provider security
Encryption where appropriate
Fraud monitoring
Account and system controls
Limiting access to authorised personnel and providers

No online transmission or storage system can be guaranteed to be completely secure.

You are responsible for keeping your account password confidential.

Gift-card codes should also be kept secure. Anyone with access to a valid gift-card code may be able to redeem the available balance.

Your account has been accessed without permission
A gift-card code has been lost or disclosed
A gift-card balance has been used without authorisation

17. Your data-protection rights

Depending on the circumstances, you may have the right to:

Request access to your personal information
Request correction of inaccurate information
Request completion of incomplete information
Request deletion of your personal information
Request restriction of processing
Object to certain processing
Object to direct marketing
Receive certain information in a portable format
Withdraw consent
Ask about international-transfer safeguards
Raise concerns about significant automated decisions

These rights are not absolute. Legal exemptions may apply in some circumstances.

To exercise a right, contact:

sales@beacrab.com

We may need to verify your identity before completing a request.

We will normally respond within one month. In certain cases, the law permits additional time where a request is complex or multiple requests have been made.

You will not normally be charged for exercising your rights. We may charge a reasonable fee or refuse a request where legally permitted, including where a request is manifestly unfounded or excessive.

Where we received your details from another person, such as the purchaser of a gift card, you may still exercise the rights available to you in relation to that information.

18. Automated processing and fraud prevention

Shopify, payment providers and fraud-prevention services may use automated systems to assess transactions and identify potentially fraudulent activity.

These systems may consider information including:

Order value
Gift-card value or redemption activity
Payment information
IP address
Device information
Billing and delivery addresses
Previous transaction patterns
Account activity
Indicators of unusual behaviour

An order, payment or gift-card transaction may be delayed, declined, cancelled or referred for manual review where fraud or security concerns are identified.

19. Children’s privacy

Our website is not intended specifically for use by children, and we do not knowingly collect personal information directly from children for marketing purposes.

Orders and gift-card purchases should be placed by an adult or with the involvement and permission of a parent or guardian.

A parent or guardian who believes that a child has provided personal information without appropriate permission should contact us at sales@beacrab.com.

20. Third-party websites and links

Our website may contain links to websites, social-media services or platforms operated by third parties.

We do not control and are not responsible for the privacy, content or security practices of third-party services.

You should review the relevant privacy policy before providing personal information to a third-party website or service.

The inclusion of a link does not necessarily mean that we endorse the third party or its practices.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

Changes to our website or services
Changes to our gift-card programme
Changes to the providers we use
Changes to our data-handling practices
Legal or regulatory developments
Operational or security requirements

The revised policy will be published on this page with an updated “Last updated” date.

Where appropriate, we may also notify you by email, through your account or by displaying a notice on our website.

22. Complaints

Please contact us first if you have a question or complaint about how we handle personal information.

You also have the right to complain to the UK Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

23. Contact us

For privacy questions, requests or complaints, contact:

Be A Crab LTD
Company number: 16980992

Unit 2 Curlew House
Trinity Park
Trinity Way
London
E4 8TD
United Kingdom

Email: sales@beacrab.com