Privacy notice

Last updated: 6 Nov 2026

Who is responsible

YOUR FULL NAME, trading as Beam, is the controller of your personal data. Contact: hello@beam.li.

What we collect and why

• Order details (name, email, delivery address, payment reference) to make and post your card and keep business records. Payments are handled by Stripe; we never see your card number. Legal basis: contract and legal obligation.
• Account details (email, password stored as a secure hash, the link you choose) to run your account. Legal basis: contract.
• Tap counts: we count how many times each card is tapped per day. We do not record who taps the card, their device or their location.
• Security logs: IP addresses of failed log-in and activation attempts, kept for 24 hours to stop abuse. Legal basis: legitimate interests.
• Link safety: the link your card points to is sent to Google Web Risk to check it is not a known scam or malware site. If you report a card, we keep the report, your IP address and, if you give it, your email, to investigate. Legal basis: legitimate interests (keeping people safe).

Who we share it with

Stripe (payments), Hostinger (hosting and email), Royal Mail (delivery) and Google (link safety checks; only the link is sent). We do not sell your data.

How long we keep it

Account details while your account is open. Order and payment records for as long as UK tax law requires (normally about 6 years). Security logs for 24 hours.

Cookies

We only use one essential cookie to keep you logged in. We do not use tracking or advertising cookies.

Your rights

You can ask to see, correct or delete your data, or object to how we use it. Email us and we will reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).