Last updated: August 21, 2026
Bought and Kept (“we,” “us”) operates boughtandkept.com. This policy explains what information we collect, why, and what you can do about it.
Who is responsible
The data controller for this site is:
Bought and Kept
hello@boughtandkept.com
What we collect
Information you give us. If you contact us by email or through a form, we receive whatever you send — your email address, your name if you include it, and the content of your message. We use it to reply and nothing else.
Information collected automatically. When you visit, our hosting tools may record your IP address, browser type and version, operating system, referring page, pages viewed, time spent, and approximate location derived from your IP address at the city level.
Cookies and similar technologies. See the cookie section below.
We do not knowingly collect information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
Why we process this, and on what legal basis
Under the GDPR, we rely on the following bases:
| Purpose | Legal basis |
|---|---|
| Operating and securing the site | Legitimate interest |
| Replying to your messages | Legitimate interest / performance of a request |
| Analytics and audience measurement | Consent |
| Advertising and affiliate attribution cookies | Consent |
| Complying with legal obligations | Legal obligation |
Where we rely on consent, you may withdraw it at any time through the cookie settings link in our footer, and withdrawing it is as easy as giving it.
Cookies
Essential cookies keep the site working — security, load balancing, and remembering your cookie choices. These run without consent because the site cannot function without them.
Analytics cookies. We do not currently use a third-party analytics tool. If that changes, this policy will be updated before any analytics cookie is set, and it will run only with your consent.
Affiliate and advertising cookies. When you click a link to a retailer or merchant, that company may set a cookie identifying that you arrived from this site, so that a commission can be attributed if you buy. This cookie is set by them, on their terms, and is governed by their privacy policy — not ours. We may also use advertising cookies from Google Ads where you have consented.
You can refuse or withdraw consent for non-essential cookies at any time via the cookie settings link in the footer. You can also block cookies in your browser settings, though parts of the site may stop working.
Who we share information with
We do not sell personal information. We share it with service providers who process it on our behalf:
- Hosting: Hostinger
- Email: Hostinger
- Advertising: Google Ads
Some of these providers may process data outside the EU/UK, including in the United States. Where that happens, we rely on the safeguards each provider has in place for international transfers, such as Standard Contractual Clauses or an equivalent framework.
We may also disclose information if required by law, or to protect our legal rights.
How long we keep it
Contact emails: 24 months from last correspondence. Server logs: 30 days.
Your rights
If you are in the EU, UK, or a jurisdiction with comparable law, you have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent. If you are in California, you have the right to know what is collected, to delete it, to correct it, and to opt out of sale or sharing — we do not sell or share personal information as those terms are defined by the CPRA.
To exercise any of these, email hello@boughtandkept.com. We will respond within 30 days.
If you believe we have handled your data improperly, you may complain to your national data protection authority. In the EU this is the authority in your country of residence; in the UK it is the Information Commissioner’s Office.
Changes
We will update the date at the top when this policy changes. Material changes will be noted on the homepage for 30 days.
Contact
hello@boughtandkept.com