Legal & customer information

1. Business identity, trading information and contact details

Beamcraft is an independent laser-engraving business based in Southport, Merseyside, United Kingdom. Beamcraft designs and engraves personalised products and bespoke commissions for private and commercial customers in the UK.

• Trading name: Beamcraft (also written “BEAMCRAFT” in the brand style). Beamcraft is a trading name.
• Website: https://beamcraft.io.
• Primary email (enquiries, legal notices, data-protection requests, complaints, age-verification correspondence): engraving@beamcraft.io.
• Secure transfer of artwork and order files (non-binding correspondence): Telegram business handle @beamcraftuk.
• Business location: Southport, Merseyside, United Kingdom. Collection of completed orders from Southport is available by prior arrangement; exact collection details are only supplied to customers whose orders are ready, for privacy and security.

2. General website terms and conditions

These terms and conditions are effective from the Last updated date shown at the top of this page and apply to every supply of goods and services by Beamcraft via beamcraft.io, by email enquiry, or via any direct quotation. The customer (you) is advised to print or save a copy for future reference; Beamcraft also retains a copy and will provide one on request.

By requesting a quotation, approving a proof, paying a deposit or otherwise placing an order with Beamcraft, you confirm that you are aged 18 years or over (or the minimum legal age for the product in question, whichever is higher); have read, understood and accept these terms; are providing accurate, complete and non-misleading information; and, for personalised goods, acknowledge that engraving is permanent and that the goods are being made to your specification. For any age-restricted product you additionally confirm that you meet the applicable minimum-age requirement and will comply with the age-verification and ID requirements set out in the Age-restricted products section below.

These terms may be updated from time to time (for example, to reflect changes in law, product availability or delivery arrangements). The version applying to any specific order is the version in force at the date the order is confirmed (proof approved and payment, if any, requested or received). Previous versions are available on request.

Governing law and jurisdiction: the contract between you and Beamcraft is governed by English law, and the courts of England and Wales have exclusive jurisdiction to hear any dispute arising out of it, unless you are resident in Scotland or Northern Ireland and prefer to use your local courts (in which case non-exclusive jurisdiction applies as permitted by law). Scottish consumer-law principles and Northern Irish consumer-law principles apply to the extent mandatory for consumers resident there.

Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be excluded or limited by English law, including the statutory protections in the Consumer Rights Act 2015. If any court or competent authority finds any provision of these terms (or part of any provision) to be invalid, illegal or unenforceable, that provision or part-provision shall, to the minimum extent required, be deemed not to form part of the contract, and the validity, legality and enforceability of the other provisions shall not be affected.

3. Product descriptions, customisation and quotations

The online Shop shows published product and configuration prices for supported options, with the final order and delivery total shown before secure Square checkout. Custom commissions and work outside the listed options are confirmed by written quotation before work begins. See the online Shop terms for Shop orders.

When you submit an enquiry (Custom Orders page, Contact form, or email) Beamcraft responds, where appropriate, with a written quotation setting out the product type(s) and quantity; material, size and finish; engraving tier (if applicable) and the number of sides to be engraved; any accessories (or confirmation that none are included unless itemised); artwork-preparation charge, if any; delivery method and charge (or confirmation of Southport collection); expected production time; deposit required (if any) and balance due date; validity period of the quotation (typically 14 calendar days); and any applicable taxes.

SVG placeholder illustrations and product descriptions are examples only. Natural materials vary in grain, shade and finish, which means each engraved item is unique. Minor differences between the on-screen illustration and the physical finished product are normal and do not constitute a mis-description. Where there is any inconsistency between the general catalogue text and your written quotation, proof email or order confirmation, the written quotation/proof/confirmation prevails.

Beamcraft reserves the right to decline any enquiry or order in its reasonable discretion (for example, if the requested artwork is prohibited, the material is unsuitable, production capacity is unavailable, or proceeding would place Beamcraft in breach of law). Where appropriate, alternative options will be discussed.

4. Personalised goods and customer artwork approval

All Beamcraft goods are, by default, personalised, engraved or made to the customer's individual specification. Engraving is permanent; Beamcraft will never engrave, and production never starts, until the customer has confirmed, in writing (by email reply or equivalent), that the final proof has been checked and approved.

Once you have supplied wording, names, dates, artwork, logos and any other specifications, Beamcraft prepares a visual proof (or written layout description) confirming item, material, size, engraving areas, sides, spelling, punctuation, capitalisation, layout, orientation and any requested elements. You are responsible for checking the proof extremely carefully before approving it. You may request as many reasonable proof revisions as are needed. Once you approve the proof in writing, the approved specification becomes binding; if engraving has already begun, changes may no longer be possible.

You retain ownership of any text, photograph, logo, artwork or other file you supply. By supplying it you confirm that you own all necessary rights or have obtained all necessary permissions from every relevant third party (copyright owner, trade-mark owner, parent/guardian of a data subject, etc.) for Beamcraft to reproduce, adapt, process, engrave and, unless you opt out (include “NO PORTFOLIO USE” in writing at order time), display the finished item as a portfolio example.

If Beamcraft uses AI-generated concept images at quotation or proof stage, they are illustrative mood references only and do not represent how the final engraved finish will appear. The final approved proof and physical material are the definitive specification, and every AI concept image is explicitly labelled as such where it appears.

5. Payment, deposits and order confirmation

For custom, bespoke or higher-value orders Beamcraft may request a deposit of up to 50% of the quoted price, or such other proportion as is specified in the quote. The deposit secures materials, reserved production time and proofing work. If you cancel in circumstances where cancellation rights do not apply, the deposit is retained by Beamcraft in reasonable and proportionate compensation for work already performed and non-recoverable expenditure incurred; any excess above that is refunded.

For quotation-based custom orders, a binding contract is formed only when: (1) Beamcraft has issued a written quotation; (2) you have approved the final proof in writing; AND (3) Beamcraft has received your deposit or full payment in cleared funds, whichever the quotation requires, or Beamcraft has otherwise confirmed in writing that it will proceed without prepayment.

Beamcraft does not store or have access to your full card number, expiry date, CVC/CVV or 3-D Secure credentials; does not offer a “save my card for next time” feature; will never ask you to send card details by email, text or instant messenger. After a card payment Beamcraft only receives the non-sensitive reconciliation data: transaction reference, last 4 digits, amount, currency and status. Refunds are only processed through the original PSP interface and to the original payment method where possible.

HMRC £1,000 Trading Allowance (tax clarification only). The Income Tax (Trading and Other Income) Act 2005, section 780A £1,000 trading allowance (if applicable to the owner's tax affairs) is a UK income-tax simplification measure only. It is not an exemption from the Consumer Rights Act 2015, the Consumer Contracts Regulations 2013, UK GDPR / DPA 2018, ICO registration obligations, age-of-sale criminal laws, product safety rules, VAT registration thresholds or any other business or consumer law not expressly listed. It does not reduce any customer refund, remedy or compensation entitlement.

6. UK shipping, collection, delivery and delays

Available Shop delivery services and charges are shown for your address before payment. Destinations or items without a supported online delivery option require a quotation. Southport collection is by prior arrangement. See the delivery policy for current service conditions.

The carrier(s) actually used, exact service class(es) and P&P charges applicable to your order are shown at Shop checkout or itemised on your custom quotation; the specific carrier(s) used at any given date are available on written request to engraving@beamcraft.io and are confirmed to customers at dispatch. Southport collection is available by prior arrangement, free of carriage charges unless the quotation specifies otherwise; photo ID matching the order name may be required at handover, and always is required where the order includes an age-restricted product.

Risk (loss, theft or damage) passes to you on delivery (or first attempted delivery), or at the point of physical collection. Title (ownership) passes only when Beamcraft has received cleared payment in full of all sums due.

All delivery timescales quoted are estimates only and not contractual hard deadlines unless Beamcraft expressly confirms so in writing (for example because you stated a hard event deadline and Beamcraft agreed to meet it in the quote). Beamcraft is not liable for delays caused by events outside its reasonable control (carrier industrial action, severe weather, postal strikes, supplier material shortages, customs excise) but will keep you informed and, where possible, propose alternatives.

If a parcel is returned because the address you supplied was incorrect/incomplete or you failed to take delivery/collect within the carrier's window, you are responsible for any reasonable redelivery charge; alternatively you may, at Beamcraft's discretion, switch to Southport collection free of extra charge.

If a parcel arrives visibly damaged please note the damage on the carrier's POD at signing, retain all original packaging/contents, and notify Beamcraft by email within 3 working days of delivery with clear photographs. Beamcraft will then process the matter with the carrier and, in accordance with your CRA 2015 rights, arrange a refund, repair, replacement or price reduction as appropriate.

7. Cancellation rights, returns and refunds

Beamcraft applies the cancellation regime in the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 (“CCR 2013”). Different scenarios apply depending on when you cancel and whether the bespoke/personalised exclusion applies. Nothing in this section removes or limits your independent Consumer Rights Act 2015 tiered remedies for genuinely faulty, misdescribed or incorrectly engraved goods — see the CRA 2015 and Returns sections below.

For most distance/off-premises consumer contracts you have a statutory 14-calendar-day cooling-off period beginning: (for goods) the day you (or a third-party person you designate, not the carrier) acquire physical possession; (for services or intangible digital content) the day after the contract is entered into. To exercise the 14-day right (where applicable) send a clear written statement to engraving@beamcraft.io. Any model cancellation form you use is fine; a dedicated form is not required.

The 14-day change-of-mind right does not apply to goods made to your specification or clearly personalised (see the Bespoke cancellation exceptions section for the full, legally compliant treatment of this exclusion, including the important limit that it never removes CRA 2015 rights). It also does not apply to sealed goods which, once unsealed after delivery, are not suitable for return for health-protection or hygiene reasons (none currently offered), goods liable to deteriorate or expire rapidly (not currently applicable), or unsealed audio/video/computer software on tangible media (not currently applicable).

If you validly cancel and have already received goods you must send them back without undue delay and in any event not later than 14 days from the day you inform Beamcraft of cancellation. Unless an exception applies you are responsible for the cost of return, unless Beamcraft has agreed in writing to meet it. Beamcraft will reimburse all payments received (including the cost of the least expensive standard delivery, excluding any supplementary cost of a premium delivery you chose) without undue delay and in any event not later than 14 days from the date Beamcraft receives the goods back (or, if earlier, from your evidence of having dispatched them). Refunds are made by the same payment method you used, unless you expressly agree otherwise; you will not be charged any fee.

You are only liable for any diminished value resulting from your handling of the goods beyond what is necessary to establish their nature, characteristics and functioning; any such reduction will be itemised and explained before being deducted.

8. Consumer Rights Act 2015 protections

Nothing in these terms — including the personalised-goods cancellation exception in Section 9 or anything said or done elsewhere by Beamcraft — removes, limits or excludes any of your statutory protections as a consumer under the Consumer Rights Act 2015 (“CRA 2015”). Those rights apply in full to every Beamcraft order, personalised or not, and are the baseline below which Beamcraft will never go.

Goods (ss. 9–11 CRA 2015).

• Satisfactory quality (s.9): goods must meet the standard a reasonable person would consider satisfactory, considering description, price and all other relevant circumstances. Includes appearance/finish, freedom from minor defects, safety and durability.
• Fit for a particular purpose (s.10): if you make known, expressly or by implication, any particular purpose for which the goods are being bought, the goods must be reasonably fit for that purpose — unless it is unreasonable for you to rely on Beamcraft's skill and judgment.
• As described (s.11): goods must match any description, any sample/model seen, and any pre-contract information required by CCR 2013 to be treated as a contract term.

Tiered remedies (ss. 20–24).

1. Short-term 30-day right to reject: if goods do not conform on delivery you can reject them within 30 days from the later of delivery, completed installation (if any) or the date Beamcraft confirms supply is complete. Rejecting in this window entitles you to a full refund including standard delivery.
2. Repair or replacement: outside (or instead of) the 30-day window you can require Beamcraft to repair or replace non-conforming goods within a reasonable time, without significant inconvenience and free of charge (postage, parts, labour).
3. Final right to reject, or price reduction: if repair/replacement is impossible, unsuccessful, not done in reasonable time, or causes you significant inconvenience, you may keep the goods and claim an appropriate price reduction (up to 100%) or return for a full/partial refund (reduced to reflect any use you have had).

Reverse burden of proof (first 6 months).

If within the first 6 months from delivery the goods are shown not to conform, the law presumes they did not conform at delivery. Beamcraft must prove they were satisfactory, fit and as-described when supplied; after 6 months the burden is with you (the consumer), so genuine issues should be reported promptly with good photographs.

Limitation periods and enforcement.

Claims in England/Wales are generally subject to the 6-year Limitation Act 1980 limitation period (5 years in Scotland under the Prescription and Limitation (Scotland) Act 1973). The Digital Markets, Competition and Consumers Act 2024 strengthened consumer enforcement powers, giving the CMA civil penalty powers up to 10% of annual worldwide turnover for the most serious consumer-protection breaches. Beamcraft aims to comply with the spirit and letter of these rules and resolves genuine complaints internally first (see the Complaints section).

9. Bespoke and personalised product cancellation exceptions (where legally applicable)

To the maximum extent permitted by law, and only where the CCR 2013 Schedule 1 Part 1 exclusion lawfully applies, the 14-day change-of-mind cancellation right does not apply to a contract for goods which are (a) made to the consumer's specification, or (b) clearly personalised. Virtually every Beamcraft order falls into one or both of these categories: goods are permanently engraved with wording, names, dates, telephone numbers, microchip numbers, QR codes, logos, artwork, inscriptions or other identifiers chosen by the customer, individually proofed and approved by the customer before production starts, and (often) configured with customer-selected materials, two-sided engraving or custom attachments.

What the exclusion DOES cover. If, after proof approval and/or after engraving has begun, you simply change your mind, decide the item is no longer required or the occasion has passed, want to change a name/date/artwork to a completely different one, or realise the item is no longer suitable for reasons unrelated to Beamcraft's own performance, the 14-day change-of-mind cancellation right does not apply and Beamcraft is not required to take the personalised item back or issue a refund for that reason alone.

What the exclusion DOES NOT cover, ever. The personalised-goods exclusion never removes, and cannot be used to avoid, any of your CRA 2015 statutory rights where the finished goods are genuinely of unsatisfactory quality (s.9), not reasonably fit for their disclosed/common purpose (s.10), not as described on the approved proof (s.11), incorrectly engraved by Beamcraft despite the approved proof being correct, damaged in transit, delivered late in material breach where you have expressly made time of the essence, or otherwise non-conforming in a way that triggers ss. 20–24 tiered remedies. You are entitled to those tiered remedies as if the exclusion did not exist. Beamcraft will never argue otherwise.

Pre-engraving sympathetic cancellation. If you cancel after proof approval but before Beamcraft has actually begun engraving or irreversibly committed specific materials, Beamcraft will in practice treat this sympathetically and (where the law allows it) will not generally seek to enforce the personalised-goods exclusion against a pre-engraving cancellation. Instead it will refund any sums paid, less a reasonable, fully itemised deduction for administration, design, proofing and any material commitments already incurred. This is a customer-service concession and not a statement of legal obligation.

10. Damaged, defective and incorrectly engraved goods

To report a CRA 2015 claim, transit damage or Beamcraft engraving error, email engraving@beamcraft.io with subject line “ORDER CLAIM — [your reference]”, including your full name, order/quote reference, date of delivery/collection, a clear description of the problem, close-up and context photographs of the item, and (for transit damage) photos of the parcel exterior/packaging interior and the carrier's POD notation (if any).

Beamcraft accepts full CRA 2015 liability (repair, replace, or refund at your election, without deduction) for any of the following confirmed against the four-item order record (quotation, approved proof, any pre-shipment photograph, and packing/dispatch record): (1) Beamcraft engraved different wording, names, dates, numbers, punctuation, capitalisation or formatting than that shown on the approved proof; (2) Side-1 content was engraved on Side 2 or vice-versa in conflict with the approved proof; (3) wrong material, finish, size or product model was supplied despite the quote/proof confirming a different one; (4) goods arrived physically damaged/broken in transit (reported within 3 working days with photo evidence of packaging and contents); or (5) any genuine workmanship/materials defect a reasonable person would consider unsatisfactory quality under CRA 2015 s.9, reported within the 6-month reverse-burden window.

Beamcraft does not accept responsibility, and the tiered CRA 2015 remedies do not apply, for: (a) spelling, dates, punctuation, capitalisation, formatting or other errors the customer explicitly approved on the written proof — proof-reading is the customer's responsibility — please check proofs extremely carefully; (b) ordinary natural-variation grain, colour, shade or patina of wood, cork, leather or natural-metal materials; (c) ordinary wear and tear, accidental damage, abuse, neglect, misuse or failure to follow any reasonable use/care instructions; (d) damage caused by unauthorised third-party repair attempts or post-delivery modifications.

Beamcraft acknowledges your complaint in writing within 5 working days of receipt and gives a substantive answer (repair/replace/refund/other remedy) within a maximum of 8 weeks; for the vast majority of straightforward engraving-error or transit-damage cases this is completed within 5–10 working days. For valid CRA 2015 claims requiring physical return Beamcraft provides either a prepaid return label or arranges free collection; you are never expected to pay return postage to establish a valid CRA 2015 remedy claim for genuinely non-conforming goods.

Please report any problem promptly before using or trying to repair the item yourself; any self-repair may affect Beamcraft's ability to assess the issue and could limit available remedies in extreme cases.

11. Customer-supplied materials and engraving risks

Beamcraft is often asked to engrave items the customer already owns (a genuine lighter, trophy, plaque, wooden keepsake or other object). Before accepting any such order Beamcraft asks for clear photographs, dimensions, material (if known) and the proposed engraving location, and gives a preliminary suitability assessment based on that information. Suitability assessments before physical receipt are preliminary only.

Laser engraving is a permanent, thermal, material-modification process. Unknown alloy compositions, plating thickness, paint/anodising formulations, aged patina, hidden surface treatments, unknown glues or fillers can react unpredictably. Beamcraft will use reasonable skill, care and professional judgment in selecting laser parameters and techniques, but the following specific material and process risks apply to every customer-supplied-item order and must be accepted by you in writing before work begins: (a) risk that the material reacts differently from expected (engraving shade differs, plating/anodising blisters, delaminates or discolours); (b) risk that hidden imperfections become visible during or after engraving; (c) risk, for thin/fragile/unusual items, of minor cracking, warping or incidental cosmetic change from thermal or mechanical stress; (d) risk that a recommended engraving location turns out suboptimal once the item is physically in hand. Where a customer's item has significant sentimental or financial value you should weigh the risk carefully before instructing work; Beamcraft is happy to discuss mitigation (test-engraving a similar low-value area or equivalent test-coupon of the same material, where possible).

Subject always to the non-excludable liabilities (death/personal injury from negligence, fraud, CRA 2015 non-excludable terms): (1) Beamcraft will exercise the standard of care of a reasonably competent professional engraver and will handle, store, return or (where appropriate) insure the item to a reasonable standard while in custody; (2) if Beamcraft causes provable physical damage or loss of the customer-supplied item through its own negligent act or omission, Beamcraft's total aggregate liability is limited to the lower of (a) the reasonable cost of replacing or restoring the item with a functionally equivalent item of equivalent age and condition (not brand-new equivalent, unless the item was new when supplied and evidenced as such), or (b) a cap of £500 per supplied item, or such higher amount as Beamcraft has expressly agreed in writing, on that specific order, before work begins; (3) Beamcraft is not liable for sentimental, aesthetic, incidental or consequential losses that flow from any failure, defect or cosmetic disappointment in engraving of a customer-supplied item, except to the extent that such exclusion is unlawful under UCTA 1977 or Part 2 CRA 2015.

If the material or item you supply bears third-party trade marks, logos, copyright material, serial numbers, security seals or other identifiers and Beamcraft is required by you to engrave, remove, alter or tamper with it in any way, you indemnify Beamcraft against any claim, loss, damage, cost or expense (including reasonable solicitors' fees on an indemnity basis) Beamcraft incurs as a direct or indirect result of any infringement or alleged infringement, warranty breach, or regulatory breach caused by that action, except to the extent caused by Beamcraft's own negligence.

Items not engraved, not dispatched, or returned to Beamcraft for a claim inspection are held for a maximum of 3 months after notification that work/claim is complete. If not collected or delivery instructions not provided within that window, Beamcraft reserves the right (after giving not less than 28 days' further written notice and reasonable reminders) to dispose of the item by recycling, secure destruction or other appropriate means. No storage charges apply in that 3-month window.

12. Copyright, trademarks and intellectual property

You retain ownership of copyright, design right, trade mark right and other IP in the content you supply (names, wording, inscriptions, photographs, logos, artwork, handwriting, etc.). By supplying it to Beamcraft you grant Beamcraft a limited, non-exclusive, non-transferable, revocable (except as stated below), royalty-free licence to: reproduce, adapt, reformat, crop, resize, vectorise, rotate, colour-process and otherwise prepare the content for engraving onto the specific goods you have ordered; produce electronic proofs and layout mockups for your approval; and store the content for the duration of the order, any reasonable warranty/re-order window and the applicable legal retention periods in Section 21.

Beamcraft retains all right, title and interest in: the beamcraft.io website's original look, feel, source code, CSS, layout, typography system, SVG placeholder illustrations, bespoke JavaScript visitor bar and catalogue filter widgets, and Cloudflare Worker analytics integration code; any generic templates, engraving layout presets, AI-created or custom-built original artwork, original product copy, original product photography, and photographic style applied across multiple customer orders; and the Beamcraft brand identity (the BEAMCRAFT word mark, logo, tagline “We bring your vision to life.” and “Your idea. Made permanent.”, and any trade dress/get-up developed, whether registered or unregistered).

Portfolio / gallery licence. Unless you have opted out in writing at order time (by including the words “NO PORTFOLIO USE” in your proof approval email or order notes), you additionally grant Beamcraft the non-exclusive, royalty-free, non-exclusive, perpetual (unless you later opt out for future use) sub-licensable (only through Beamcraft's hosting/social providers for the limited purpose of display) licence to reproduce, crop, resize and publish still photographs of the completed engraved item on Beamcraft's website gallery, social-media channels, portfolio documents and marketing pages as an example of Beamcraft's engraving standard. Beamcraft uses reasonable efforts not to publish sensitive personal data (full home address, telephone number, full name of a child, etc.) alongside portfolio photographs unless that data is generic or you have separately agreed. You can opt out of portfolio use at any time by emailing “OPTOUT PORTFOLIO” with your order reference. On receipt Beamcraft will use reasonable endeavours not to use the specific order's photograph(s) going forward and, where practical, will take down any already published within 14 days.

To the fullest extent permitted by law you waive any moral rights (paternity/integrity under Part IV CDPA 1988) you may have in the supplied content, insofar as necessary for Beamcraft to adapt, format, crop, engrave and (where permitted) display the order as described above. Beamcraft does not intend to distort or mutilate your original content in a way prejudicial to your honour or reputation; the waiver operates only to the extent necessary for the actual engraving, proof, portfolio and approval processes.

Beamcraft does not knowingly engrave content that infringes the copyright, trade mark, design right, patent, publicity right or other rights of any third party. See the Acceptable artwork and prohibited requests section below (Section 13) for the full standard and process. If Beamcraft receives a properly constituted notice of claimed infringement it will, as appropriate, remove the disputed content from public display, investigate, respond to the complainant within a reasonable time and consider any counter-notification from the customer in good faith and in accordance with applicable law.

13. Acceptable artwork and prohibited engraving requests

Beamcraft reserves the right to refuse any engraving request, or suspend work while investigating, in any of the following circumstances. The list is non-exhaustive and each case is assessed on its merits.

Content Beamcraft will generally not engrave includes (without limitation): content unlawful under any UK law or facilitating a criminal offence; threatening, abusive, insulting, intimidating, harassing, violent, inciting hatred or violence on protected grounds under the Equality Act 2010; obscene, pornographic, indecent or intended to degrade/humiliate (modest artistic/memorial depictions assessed case-by-case); defamatory of any living person or company; impersonation, false-ID, reproduction of official security features/official documents/ID cards/bank cards/cheques/bond notes/stamps where doing so could mislead or facilitate fraud; content infringing third-party copyright, registered or unregistered trade mark, registered design, patent, right of confidence or other rights, unless satisfactory written evidence of permission is produced; content invading the privacy or data-protection rights of any living data subject without lawful authority (publishing a third party's home address/phone/email/school/place of work without their consent, or a photo taken in circumstances where they had a reasonable expectation of privacy, unless the customer can demonstrate lawful authority); glorifying terrorism, serious organised crime, self-harm, eating disorders, dangerous driving, drug misuse, or other serious harm in the view of the reasonable person; personal identifying details of a child or vulnerable adult without appropriate verifiable consent from a holder of parental responsibility or the appropriate legal representative; or content relating to a product, service or activity Beamcraft cannot lawfully supply (e.g. an age-restricted product the customer cannot lawfully purchase despite the ID checks in the Age-restricted products section).

If content is flagged, work on the order is suspended immediately and the customer is informed in writing of the general nature of the concern (without disclosing reporter identity, where appropriate). The customer is given a reasonable opportunity to respond, produce evidence of permissions/licences, or propose revised content. If the concern is resolved work proceeds and Beamcraft works to minimise delay; if not, Beamcraft may (at its option) either (a) continue to refuse the specific content and offer to engrave an alternative lawful version, or (b) cancel the order in its entirety and refund any sums paid less, where appropriate, actual costs and materials reasonably expended up to cancellation.

Any member of the public who sees a Beamcraft product, gallery photograph, social-media post or website page they reasonably believe falls into any of the prohibited categories above should report it to engraving@beamcraft.io with subject line “CONTENT CONCERN REPORT”. All reports are treated seriously, investigated and responded to in writing where appropriate.

14. QR-code personalised products, telephone dialling links and customer-provided contact information

Some Beamcraft products (engraved aluminium business cards, pet/ID tags, custom QR-enabled keepsakes, bespoke commissions) may include a scannable QR code engraved on the item pointing to a URL, telephone number, SMS number, email address, vCard, Wi-Fi credentials or other destination of the customer's choice; and/or a human-readable telephone number that modern smartphones may offer to tap/long-press to dial via a tel: URI. All such data is supplied by the customer, not independently verified by Beamcraft.

The customer is solely responsible for accuracy and destination. It is the customer's responsibility, to be confirmed on the proof before engraving, that every telephone number, email, microchip number, postal address, URL, handle and QR destination is correct, current, complete, works as intended; the customer or the person on whose behalf the order is placed has lawful authority to publish those details on an engraved item that may be found, scanned or read by members of the public; any QR destination is, and will remain for the reasonably foreseeable life of the product, lawful, non-malicious, non-deceptive, non-phishing and not in breach of any third-party terms or of any law; and the customer understands that, once engraved, a QR code or other contact detail cannot be changed short of physically replacing the item. If redirect-once-engraved is needed through a web server under the customer's control, that mechanism remains the customer's responsibility.

Where a product displays a human-readable telephone number or a QR code contains a tel: URI, the behaviour (tap to dial, prompt to call, etc.) is standard device behaviour, not a feature Beamcraft programs or controls. The customer confirms: every such number is either their own number, a number they are expressly authorised to publish, or a legitimate public service/business/emergency number; and it is not being published for fraudulent, cold-calling, harassment, nuisance-call or premium-rate abuse purposes.

Beamcraft does not host, operate, monitor, maintain or have any ongoing responsibility for any URL, website, phone endpoint, email inbox or other destination pointed to by a customer-supplied QR code, unless Beamcraft has expressly, in writing agreed to host such a destination (which it does not offer as a standard product at the time of writing). If Beamcraft ever does offer a hosted redirect or tag-database service, a separate service-level agreement, privacy notice and fee schedule will apply.

To the maximum extent permitted by law, you agree to indemnify and keep indemnified Beamcraft against all claims, costs, damages, losses, liabilities and expenses (including reasonable legal fees on an indemnity basis) arising directly or indirectly from a breach of any of your obligations under this section, including without limitation any claim from a recipient of a call, email, SMS item, physical-mail item or website visit alleging unauthorised/inaccurate/misleading publication of their contact data on your engraved item.

Publishing another living person's personal contact data onto a physical object that may be found, scanned or read by the public is processing of personal data. In most cases you (the customer) are the controller of that data; Beamcraft is the processor (or, depending on exact context, joint controller — solicitor to confirm characterisation) acting on your documented instruction to engrave it. Both parties retain their respective UK GDPR / DPA 2018 obligations. You are reminded before instructing engraving of any third-party individual's personal data to ensure a lawful basis under UK GDPR Article 6 applies, special-category (Article 9) conditions if applicable are met, and Article 5 data minimisation is observed (e.g. for a pet tag, first initial + surname + mobile is often adequate; full home address is not always needed).

15. Two-sided engraved pet tags, dog tags and wooden keyrings

Beamcraft's catalogue includes a Personalised Stainless Dog Tag, Personalised Pet Tag, Leather Keyring and (where configured for a bespoke commission) other two-sided or multi-sided engravable items. Where a product is described as, or configured to be, engraved on two sides the following terms apply. The approved proof always prevails; the conventions below are non-binding guidance only.

For every two-sided order the proof clearly labels “Side 1” and “Side 2” (or equivalent), together with orientation relative to the split-ring hole, chain attachment point, keyring fitting or other relevant physical feature. The customer must confirm, in proof approval, that Side 1 and Side 2 each contain the correct content, are correctly oriented and are on the correct face. Typical conventions (proof always prevails): (a) stainless dog/army tags: Side 1 is the primary-name side, Side 2 is the reverse used for owner contact/secondary medical/microchip info; (b) round pet tags: Side 1 = front when attached to the collar via the top ring; Side 2 = back; (c) leather/wooden keyrings: Side 1 = the face shown on any catalogue illustration; Side 2 = the reverse. Most standard plaques & house signs are single-sided unless explicitly itemised and priced as two-sided in the quotation.

Side-1 and Side-2 text fields each have default maximum character counts (typically max 40 characters per side on standard pet/dog/army tags, unless otherwise agreed). These limits exist because exceeding them results in a font size too small to be legibly laser-engraved. If you need more content Beamcraft normally suggests a larger item, splitting across more products, abbreviating wording or omitting information not strictly required. The final character count and font-size selection is always confirmed on the approved proof.

Recommended minimum content for UK dog/cat pet ID tags (non-binding guidance only; owner must make their own risk assessment and comply with any local council/DEFRA/Animal Welfare Act 2006 and local byelaws that apply in their area): the RSPCA and most UK welfare organisations recommend, as a minimum, surname of owner; at least one contact telephone number (preferably two, e.g. mobile + home) where someone can be reached 24/7; optionally, partial postcode; optionally, brief critical medical notes kept short and legible (e.g. “MC” for microchipped, “DEAFLY” for a deaf dog, medication notes). The owner is solely responsible for compliance with any dog-control order, local byelaw, Animal Welfare Act 2006 or other specific local rules that determine what must appear on a dog's collar or tag in their authority area; Beamcraft does not warrant any particular combination satisfies a specific council's rules nor provides legal advice on compliance.

If you include a 15-digit ISO 11784/5 pet microchip number on a tag you confirm: (a) the microchip is actually implanted in the specific animal the tag is for; (b) the microchip-database registration is current and in your name (or you have the registered keeper's written authority to have the number engraved); and (c) the number is correct to the best of your knowledge. It is good practice to double-check the number against the database provider's current record before approving the proof.

Side-2 engraving (the “back”) is in practice often exposed to similar or greater wear than Side 1 because it rubs against collars, keys, pockets and other surfaces more frequently. Engraving depth and fill are normally kept consistent across both sides where feasible; slight wear differences over time are not considered a defect. Where a pet tag incorporates a QR code (by bespoke agreement), the terms of the QR & telephone-links section (Section 14) apply in full.

16. Age-restricted products, including applicable lighter sales

Sale of lighters to persons under 18 is a criminal offence throughout the UK. The Tobacco and Vapes Act 2026, sections 1 & 2 (commencement of the generation-ban element from 1 January 2027) introduces a phased ban on sale of tobacco, herbal-cigarette and cigarette-paper products to any person born on or after 1 January 2009, and creates a standalone proxy-purchase offence. Beamcraft treats all age-of-sale rules as binding legal obligations, not optional guidance.

Lighter products actually offered.

Beamcraft offers only two lighter-related SKUs, and no others: (1) Unbranded refillable petrol lighter — black anodised finish only. One standard catalogue item. No other colour/finish is advertised or held as standard stock. (2) Genuine branded lighters — strictly by written request and individual quotation. Genuine branded items and engraving of a customer's own genuine branded lighter are never advertised or held as standard stock; each request is individually assessed for authenticity, model, finish, availability and engraving suitability before acceptance. No branded colour range is offered. Any customer-supplied genuine branded item is additionally covered by the customer-supplied materials/engraving risks notice in Section 11.

Every refillable petrol lighter supplied by Beamcraft is shipped completely unfilled. No fuel, flammable liquid or flammable gas of any kind is inside it at delivery, in compliance with Royal Mail/courier/ADR/IATA dangerous-goods rules for flammable liquids and gases. Customers fill the lighter themselves after delivery per the manufacturer's printed instructions. Customers must never attempt to fill near any naked flame, heat source, spark, ember or smoking materials and must follow the manufacturer's filling and safety instructions carefully, avoid over-filling, wipe any spillage completely, allow full evaporation before ignition, and keep all lighters (filled/unfilled) out of reach of children, vulnerable adults and pets. Beamcraft never ships fuel, flammable liquid or pressurised gas canisters and never accepts returns of partially or fully filled lighters for reasons of courier dangerous-goods compliance.

Minimum age, Challenge 25, and acceptable forms of ID.

The minimum age to buy any lighter product or lighter-engraving service from Beamcraft is 18 (or the legal minimum in the jurisdiction of delivery if higher). Beamcraft operates a strict Challenge 25 policy: any person reasonably appearing to be under 25 should expect to be asked for valid photo ID. Only the following forms of photo ID are acceptable (photocopies, screenshots, printed scans, WhatsApp pictures, etc. are not): (a) current unexpired full passport (UK or foreign); (b) current unexpired UK photocard driving licence; (c) current unexpired UK Biometric Residence Permit (BRP); (d) a PASS-hologram accredited proof-of-age card (CitizenCard, My ID Card, Post Office PASS 18+, Young Scot or similar); (e) current HM Armed Forces / MOD Form 90 / military ID bearing photo and date of birth.

ID verification (where requested) is performed by secure end-to-end encrypted image transfer only. ID images are permanently and securely deleted no later than 30 days after order completion, delivery or cancellation (see Privacy & retention sections); they are never used for any purpose other than verifying minimum age for the specific order.

Beamcraft may in its absolute discretion refuse any age-restricted order, or cancel it, in any of the following circumstances (non-exhaustive): satisfactory ID not produced within reasonable time; ID appears expired/altered/not genuine; reasonable suspicion of proxy purchase (buying on behalf of a person under 18); delivery to a school, college, youth group, children's home or other address inconsistent with a lawful age-restricted B2C sale; purchaser refuses a reasonable selfie-with-ID/liveness check when specifically requested for a direct delivery where no collection-ID opportunity exists. If cancelled in these circumstances any prepayment is refunded in full.

Criminal penalties (important notice).

Under the Tobacco and Vapes Act 2026, a person guilty of an offence under s. 1 (prohibited sale) or s. 2 (proxy purchase) is liable, on summary conviction, to a fine up to level 4 on the standard scale (currently up to £2,500) per offence plus possible seizure of goods. Similar penalties exist under other age-restriction legislation. No customer should ever ask Beamcraft to cut any corner on age-of-sale compliance and every such request, if made, will be refused.

17. Discount codes, promotions, validity and redemption

Beamcraft issues promotional discount codes (e.g. beginning with BC-15-) from time to time via the website engagement popup, direct email, Telegram channel, winner-claim page or other authorised channel. All discount codes are issued and valid only subject to the following general conditions together with any specific promotion-specific conditions stated at the time the code is issued (which prevail over these to the extent of any inconsistency).

Unless otherwise specifically stated a code provides a percentage discount off the quoted base price of goods and engraving services only. It does not apply to P&P charges, carrier surcharges, customs duties, any separately itemised art-preparation or materials surcharges, or VAT (VAT is calculated on the discounted subtotal in the normal way if and when chargeable). Codes cannot be stacked/combined with any other discount, promotion, reward or prize voucher on the same order unless the promotion explicitly states it may be combined (which is not the default). The customer may choose whichever single valid code gives the largest discount.

Every code has a server-side authoritative expiry date and maximum-uses limit. Attempts to use a code after expiry, beyond its maximum uses, after revocation, or after redemption will be rejected with a customer-friendly English-language explanation. Specific per-code terms (expiry, uses, eligible products) apply where stated. If issued personally and you are unsure of validity, check the original issuing communication or email engraving@beamcraft.io with the code and your order reference.

Current redemption flow. Eligible codes can be checked without being redeemed, then entered in the Shop basket or on the Custom Orders form. Eligibility and the discount are validated server-side before an order proceeds. Shop totals show the applicable discount before payment. For bespoke orders, the eligible discount is shown on the quotation. Checking a code alone does not consume it; reservation and redemption follow the applicable confirmed-order rules and campaign terms.

Each code may be used only the number of times stated when issued; customer-issued engagement codes and milestone winner codes are, by default, single-use and cannot be attached to or redeemed against more than one enquiry or order. Attempts to re-attach are rejected server-side.

The /api/coupon/validate endpoint responds safely and friendly to all benign user input: accidental whitespace; uppercase/lowercase; stray punctuation; control characters (NUL/SOH/ESC/DEL etc. are stripped server-side before validation); canonical-format typos; multipart/form submissions; HTML form URL-encoded submissions. Benign user-error cases return HTTP 200 with a human-readable banner message rather than a technical error. Repeated failed validation attempts from the same originating source trigger a progressively escalating lockout (15 minutes / 1 hour / 24 hours) to defeat brute-force or credential-stuffing-style automated attacks. If you are a genuine customer accidentally locked out because of repeated typos, email engraving@beamcraft.io with “COUPON LOCKOUT” in the subject line; after verifying your identity Beamcraft will, where appropriate, reset the lockout specifically for you.

If due to a technical or system error a discount is applied to your quotation/proforma that is clearly not the promised discount or applies to an order not eligible for that specific promotion under the published terms, Beamcraft reserves the right to correct the discount before accepting the order. Beamcraft will always explain any such correction in writing before proceeding and, if you are not happy with the corrected price, you are under no obligation to proceed and any deposit already paid is refunded in full.

The footer of every engagement-promotion popup shown on the website links to this legal page. For any promotion the material significant conditions (discount value, goods/services it applies to, start/end dates or duration, eligibility restrictions, maximum uses, P&P charges still applicable, promoter identity) are either (a) set out in a promotion-specific sub-section of the Promotion Terms section below, or (b) attached to the specific code record in the coupon-management admin dashboard and/or clearly stated on the face of the promotional communication issuing the code. ASA CAP Code compliance and the Consumer Protection from Unfair Trading Regulations 2008 (as amended by the DMCC Act 2024) are always treated as binding minimum standards for any Beamcraft promotion.

The specific code 15BEAM (and close variants with spaces/punctuation) is reserved as a server-side anti-automation marker and always returns “not recognised”; it is not a valid customer discount code and never entitles the bearer to any discount.

18. Visitor milestone prizes, winner verification and promotional conditions

Beamcraft operates a modest visitor-milestone prize feature. Every 100th qualifying human visitor (modulo-100 counter: visitors 100, 200, 300, 400 … and so on as tracked server-side) is potentially eligible to receive a free text-only engraved dog tag or army tag. The following conditions apply.

Promoter, prize structure and frequency.

The promoter of the milestone-prize promotion is Beamcraft (see Section 1 for promoter identity; full natural-person legal name and geographic postal address available on written request per the note in Section 1). Frequency: one prize per milestone, at each exact multiple-of-100 qualifying-visitor count, or until the promotion is withdrawn at any time on reasonable notice. Prize description: one engraved dog-tag or army-tag style, text engraving only, one or two sides as specified on the claim form. Artwork/image engraving, QR engraving, split ring/keychain/lanyard/mounting/packaging upgrades are not included within the free prize; if the winner requests such extras they will be charged at Beamcraft's standard quoted rates. There is no cash alternative, no credit-note alternative and no alternative prize of equivalent value unless Beamcraft decides, in its absolute discretion on a case-by-case basis, to offer one (which it is not obliged to do).

Eligibility.

Entry is open to UK residents (mainland UK, Scottish Highlands & Islands, Northern Ireland, Isle of Man, Channel Islands and BFPO, always subject to the carrier and postage terms applying at the claim date, confirmed to the winner in writing before any postage charge is payable) aged 18 or over at the time of claim. Employees, close family, household members and agents of Beamcraft, or any person professionally connected with the administration of the promotion, are not eligible.

Server-side winner allocation (anti-fraud).

Winner allocation is performed exclusively on the Beamcraft server (Cloudflare Worker + D1), never in client-side code. Each page-view or qualifying event that passes the Cloudflare Bot Management score ≥30 threshold plus other passive bot-detection signals atomically increments a server-side total-visitor counter. When the counter crosses an exact multiple of 100, the corresponding human visitor whose request caused that transition is marked as the potential winner for that milestone and a unique, single-use prize-claim code (format BC-WIN-<milestone>-XXXXX) is generated and associated exclusively with that visitor's anonymous fingerprint hash.

The next time that same visitor loads /claim.html or clicks the winner popup the page calls /api/winner/claim with either the URL ?code= parameter or the browser's visitor-cookie fingerprint. Only if a valid, unexpired, unused WINNER_ALLOCATED prize exists for that exact combination does the server transition the status to CLAIM_STARTED and return the claim code; otherwise the server returns NO_ACTIVE_WINNER or EXPIRED as applicable. The /claim.html page UI is configured to display the claim form only after that server call returns ok:true, status:CLAIM_STARTED; otherwise it shows a generic “if you received a winner QR or link please follow the instructions on the notification” message rather than the unconditional winner headline (PART4 audit-specific correction).

Claim process and deadlines.

The winner has 28 calendar days from the milestone hit date to submit a complete, valid claim using the server-issued claim code. After that window the code expires and cannot be used. To claim, the winner must complete and submit the form on /claim.html successfully; the server validates the code (not already submitted/fulfilled/revoked/expired) and returns a CLAIM_SUBMITTED response with a Beamcraft internal claim reference. Mandatory fields (all validated server-side; missing/invalid returns a HTTP 400 friendly error without consuming the code): style choice (dog_tag or army_tag); Side-1 text (required, max 40 chars); winner's full name (required, max 120 chars); winner's valid email address (required, max 160 chars, email-pattern validated). Optional fields: Side-2 text (max 40 chars), address lines, town, postcode (all retained only for postage/fulfilment purposes per the retention schedule).

Winner verification and anti-fraud.

At any time before fulfilment Beamcraft reserves the right to require the winner to provide reasonable proof of identity, age and UK residence; investigate the authenticity of the claim, the integrity of the qualifying visitor event and any relationship between the claimant and any other entrant or employee; and reject any claim that appears, on a balance of probabilities, to involve automated gaming of the visitor counter, self-referral scripts, duplicate-browser or virtual-machine reidentification, proxy manipulation, or any other activity intended to create or inflate false winner events. Persons found attempting to cheat the promotion are permanently excluded from all future Beamcraft promotions. Server-side Cloudflare bot-score gating and per-IP/per-fingerprint rate-limiting make automated gaming deliberately difficult.

Postage, delivery and collection for winners.

unless Beamcraft confirms otherwise in writing on the specific winner's individual claim, delivery and postage charges are NOT included as part of the free prize. The tag itself is free; P&P charges are payable by the winner at Beamcraft's standard rates, to be itemised and confirmed before the winner is asked to pay. Alternatively, winners in the Southport area may collect their prize in person by prior arrangement, free of any P&P charge (photo ID required at collection to verify the claimant matches the name on the claim). This postage position is reviewed at least quarterly against the ASA Committee of Advertising Practice (CAP) Code guidance on “free” offers and significant conditions; if the current structure does not meet CAP standards at any review, Beamcraft will either include standard UK postage within the prize or adjust the promotion so the winner is not required to pay any charge for the advertised prize element.

Disqualification and cancellation.

Beamcraft may disqualify any winner who fails to provide a complete valid claim within 28 days; fails to provide requested ID/age/residence proof within reasonable time; is found in breach of these promotional conditions; is ineligible under the eligibility criteria; or has engaged in any activity that, in Beamcraft's reasonable opinion, has compromised the fairness or integrity of the promotion. In any such circumstances the prize is forfeited and may (at Beamcraft's absolute discretion) be offered either to an alternative winner selected from the next qualifying visitors around the same milestone or retained un-awarded. This promotion is governed by English law and subject to the exclusive jurisdiction of the courts of England and Wales (save for mandatory consumer-law jurisdiction for Scotland/NI residents). It is not sponsored, endorsed, administered by, or associated with, Apple, Google, Meta, Telegram, Cloudflare or any platform provider.

19. Privacy policy compliant with applicable UK data protection law

This notice is written with reference to the UK General Data Protection Regulation (UK GDPR) (retained EU law, as amended), the Data Protection Act 2018 (DPA 2018), the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR) (for cookies and electronic-marketing rules), and the Data (Use and Access) Act 2025 insofar as its provisions are in force and relevant to Beamcraft's activities.

All correspondence for data-protection matters (questions, complaints, subject access requests, opt-outs, right-of-access requests, rectification, erasure, restriction, portability, objection, automated decision-making questions and consent withdrawals) should be addressed to: email engraving@beamcraft.io with the words “DATA PROTECTION REQUEST” in the subject line. Postal address for data-protection correspondence: available on written request to engraving@beamcraft.io (see Section 1), and will be provided without unreasonable delay to any data-subject requester.

Categories of personal data actually processed; purposes; lawful bases (UK GDPR Articles 5 & 6).

Beamcraft only processes personal data when genuinely necessary for a stated purpose. In practice the categories of processing are: (1) anonymous visitor-analytics and Online-Now heartbeat counter; (2) first-party visitor identifiers (bc_vid HttpOnly/Secure/SameSite=Lax cookie, 2-year lifetime) and pepper-hashed fingerprints, used for deduplication, bot filtering and milestone allocation; (3) traffic-source attribution (search/social/referral/direct/QR) and QR-scan attribution; (4) voluntary “How did you find Beamcraft?” poll responses; (5) security event storage (rate-limit/brute-force events on coupon validation and admin login); (6) abuse- and fraud-prevention processing; (7) enquiry, quotation and order processing (including the engraving, proof, delivery and collection lifecycle); (8) age-verification ID photographs (for age-restricted orders only, retained as stated in the retention schedule); and (9) customer correspondence (email/Telegram) and complaint handling.

Lawful bases relied on under UK GDPR Article 6 for each category: (a) Article 6(1)(b) Contract — processing required to perform a contract with you, or to take pre-contractual steps at your request (name, address, order, engraving, proofing, delivery); (b) Article 6(1)(c) Legal obligation — processing required by law (Tobacco and Vapes Act 2026 age verification; HMRC accounting/tax records 6/7 years; court order/police production order); (c) Article 6(1)(f) Legitimate interests — accounting records; fraud/brute-force/proxy-purchase prevention; quality-assurance photography and portfolio display (unless opted out); essential service communications (order confirmations, proof-approval reminders, delivery tracking); website security/reliability/functionality improvements; all subject to an internal balancing test documented on request; (d) Article 6(1)(a) Consent — for any processing otherwise lacking another lawful basis or where law specifically requires consent (e.g. non-order marketing emails; non-essential cookies). Consent can be withdrawn at any time as easily as it was given.

Special category data (UK GDPR Article 9).

From time to time Beamcraft may receive, in the context of a memorial or medical-alert commission, Article-9 special-category data (photograph revealing racial/ethnic origin; religious inscription; medical-alert engraving; health data). Where this happens Beamcraft processes such data only under the condition of explicit consent of the data subject (Article 9(2)(a)) unless another Article 9(2) condition clearly applies and is documented. The customer is responsible for providing, or obtaining, that explicit consent before instructing engraving, and for confirming that in the proof-approval step.

Children.

Beamcraft does not knowingly offer age-restricted goods to children and does not knowingly collect personal data from a child under 13 without verifiable consent of a holder of parental responsibility. If Beamcraft becomes aware that it has inadvertently done so it will take immediate reasonable steps to delete that data from its systems and document the deletion. Parents/guardians who suspect this has happened should contact engraving@beamcraft.io immediately.

Recipients.

Personal data is only disclosed to: (1) Payment service providers actually used by Beamcraft for the transaction (names available on written request to engraving@beamcraft.io and itemised in individual order correspondence when payment is taken) — only the minimum needed to process/reconcile a transaction, acting either as controllers in their own right or processors under their own published privacy notices; (2) Delivery carriers actually used (names available on written request and confirmed to the customer at dispatch) — name, delivery address, telephone number (where supplied), parcel weight and dimensions to effect delivery; (3) Professional advisers (accountants, solicitors, insurers) for accounting/tax/legal/insurance purposes and subject to professional confidentiality; (4) Regulators, law enforcement and courts only where legally obliged or compelled (court order, warrant, statutory demand, or a reasonably proportionate suspected under-age/proxy-purchase report to Trading Standards or police). Beamcraft never sells customer personal data to anyone, ever, and never shares it with third parties for their own direct marketing purposes.

International transfers.

Beamcraft aims to store and process personal data in the UK. Its website infrastructure is hosted on Cloudflare Workers and D1 (see the Third-party services section for Cloudflare's position as a US-headquartered provider operating under the UK International Data Transfer Agreement / UK adequacy framework). If any other provider (e.g. a future email host or PSP) is based outside the UK and transmits personal data outside the UK, Beamcraft will ensure an adequacy decision (UK IDTA for an adequacy country) or appropriate safeguard (UK IDTA Standard Contractual Clauses, or BCRs where applicable) is in place before such transfers begin. Details available on written request.

Privacy by design and by default.

Beamcraft designed beamcraft.io with privacy in mind: no third-party advertising/tracking/marketing pixels; Cloudflare Bot Management filtering upstream of analytics writes; coupon-validation error responses are generic (to prevent enumeration); age-verification ID photographs are deleted within 30 days of order completion/cancellation; the visitor pepper/salt used to hash fingerprints is held as an encrypted Worker secret, never hard-coded, never placed in client-side JavaScript, never logged, and rotated periodically. Beamcraft maintains, where required by UK GDPR Article 30, a written record of processing activities covering the categories above; a summary copy is available on request to any data subject at engraving@beamcraft.io.

20. Cookies, analytics and consent requirements

This section is written with reference to PECR Regulation 6 (cookies and similar technologies) and current ICO guidance on cookies (as updated in 2024/2025).

Today, beamcraft.io intentionally sets only cookies and local storage entries that are reasonably considered strictly necessary for the operation of the website (PECR Regulation 6(2) — strictly necessary cookies are exempt from the prior-consent requirement). Specifically: (1) bc_vid cookie (HttpOnly, Secure, SameSite=Lax, 2-year expiry): a random UUID-style anonymous visitor-identifier cookie set by the Cloudflare Worker on first response. Required for consistent deduplication of genuine human page-view events across multiple page loads within the same session over time, for the Online-Now/Today/Last-24H/Total visitor-stat feature, and for stable milestone-prize allocation. Without this cookie every page reload would incorrectly increment the total-visitors counter and genuine prize allocation would be impossible, so this cookie is strictly necessary and PECR consent is not required before it is set. (2) Local storage entries: the visitor-bar widget may, purely as a client-side convenience fallback, cache a small promo-badge cached id value in window.localStorage. This value never leaves the visitor's own browser, is never transmitted to Beamcraft servers, and is used solely to prevent duplicate display of engagement-promotion badges within the same browser session. It is strictly necessary for the intended promo UI operation.

Beamcraft does not currently intentionally set any of the following: third-party analytics cookies (Google Analytics, Plausible, Squarespace Analytics, etc.); advertising, retargeting, conversion-tracking or marketing cookies; social-share-widget Facebook/Meta/X/LinkedIn third-party cookies; or non-essential preference cookies other than the localStorage convenience-cache above (which is not transmitted).

If in the future Beamcraft introduces (for example) any third-party analytics package setting non-essential cookies, a consent-management platform, customer-account/login functionality relying on non-essential session state, checkout functionality with non-essential preferences, or marketing/retargeting pixels, BEFORE any of those non-essential cookies are set on any visitor's browser a visible compliant cookie-consent banner will be presented to the visitor offering a genuine choice of Accept / Reject / Cookie Settings, meeting the ICO's current standards (strictly necessary exempt; non-essential cookies only set after unambiguous opt-in affirmative action; preference persisted; “Reject all” as easy as “Accept all”; no cookie walls; no forced scrolling/delayed consent). This section will also be updated at that point to list every non-essential cookie, its purpose, controller, lifetime and category.

You can control or delete cookies through your individual browser settings; user-friendly guidance for all common browsers is available at allaboutcookies.org/manage-cookies/. If you block/delete the strictly necessary bc_vid cookie the website will still serve you pages correctly, but your page views may be counted separately on each load and any potential in-flight milestone-prize claim for that browser session will be reset (you would therefore need to re-qualify from scratch). For a full, always-up-to-date list of cookies actually in use on the live site at any given date email engraving@beamcraft.io with “COOKIE LIST REQUEST” in the subject line and Beamcraft will provide it within 1 calendar month.

21. Data retention, deletion and customer rights

Beamcraft does not store personal data indefinitely. Data is retained only for as long as reasonably necessary for the purpose(s) it was collected, subject to any overriding legal obligation requiring longer retention. Beamcraft's current default retention periods are set out below. They are reviewed at least annually and this page is updated when any period changes; any individual retention query may be raised via engraving@beamcraft.io:

• Enquiries, quotes, proofs and customer-uploaded artwork that do NOT become orders: 12 calendar months from the date of the last substantive communication. After that: securely deleted unless the customer has specifically asked Beamcraft to keep them for a future planned order (in which case retained for a further 12 months from the retention-extension instruction, then re-reviewed).
• Completed orders, invoices, proofs, transaction records and payment references: 7 years from the end of the UK financial year (ending 5 April) in which the order was completed, paid and dispatched/collected.
• Age-verification ID photographs and ID-with-selfie images: no later than 30 calendar days from the date the order is marked Completed / Delivered / Cancelled / Refused. After that: permanent, secure deletion with no recoverable backup retained.
• Customer account data (if/when introduced): lifetime of the account plus 12 months after the later of account closure or last successful login; accounting/tax-relevant order records within the account retained for 7 years regardless.
• Marketing/newsletter consent records and opt-outs: until consent is withdrawn by the data subject plus 12 calendar months (to demonstrate consent was validly given and later validly withdrawn if challenged). Opt-out/suppression lists are retained indefinitely in minimal-field form (email hash + opt-out date only) to ensure future PECR compliance.
• Anonymous visitor-analytics event data: 13 calendar months from the date the event was recorded. After that: raw per-event rows are deleted; only monthly aggregated totals are retained.
• Server logs / business-premises CCTV (if any; none currently operated): rolling period not exceeding 30 calendar days, unless a specific security/fraud/law-enforcement incident reasonably requires longer preservation for evidence purposes (in which case preserved records are quarantined, reviewed and deleted as soon as the incident is closed).
• Poll responses (“How did you find Beamcraft?”): 13 months (aligned with analytics). Brute-force / coupon-attempt rate-limit events: 90 days (long enough for the escalating lockout window and any reasonable abuse investigation).
• Winner / milestone-prize claim records: 6 years from the end of the financial year in which the prize was either fulfilled or expired. After that, delivery-address and contact-email fields are either deleted or irreversibly anonymised.

Retention periods are reviewed at least annually and this page updated if any are changed. At the end of the applicable retention period, personal data is either (1) permanently and securely deleted (DELETE command issued to the storage provider, with confirmation row/object-level deletion has succeeded and no other recoverable copy remains held by Beamcraft); OR (2) irreversibly anonymised such that the resulting dataset no longer relates to an identified or identifiable living individual, and cannot, by itself or in combination with other data reasonably available to Beamcraft, be re-identified, then retained for statistical/historical purposes only; OR (3) where an overriding law requires longer retention (e.g. HMRC 7-year accounting records), isolated from general access, restricted to the minimum number of staff who genuinely need it for the accounting/legal purpose, and retained only for the minimum longer period required by that overriding obligation.

Your 8 individual rights under UK GDPR / DPA 2018.

You can exercise any of these rights at any time by writing to engraving@beamcraft.io with “DATA PROTECTION REQUEST” in the subject line plus your order/reference number (if applicable) and a short description of the right you wish to exercise. To protect your personal data from unauthorised disclosure Beamcraft may, proportionately to the sensitivity of the request, ask you to provide a reasonable form of identity verification (typically a scan/photo of one of the forms of photo ID listed in the Challenge-25 acceptable-ID list in the Age-restricted products section). This is for your own protection. Response timescales: within 1 calendar month in most cases. For complex requests or a large number of requests the response period may be extended by a further 2 calendar months; if extended, the reason and extension are communicated to you within the 1-month window.

1. Right of access (Art. 15 — Subject Access Request / SAR). Confirmation whether or not Beamcraft processes your personal data; a copy of that personal data; and the standard Article 15 supplementary information (purposes, categories, recipients, retention periods, source of data not collected directly from you, existence of automated decision-making/profiling and meaningful information about logic involved, plus your other 7 rights listed here). One copy per SAR is free of charge; manifestly unfounded, excessive or repetitive requests may attract a reasonable fee based on administrative cost, or may be refused with a full explanation.
2. Right to rectification (Art. 16). Correct inaccurate personal data; complete incomplete personal data (including by means of a supplementary statement), having regard to the purposes of the processing.
3. Right to erasure (“right to be forgotten”, Art. 17). Delete/remove personal data where: no longer necessary for original purpose; consent withdrawn and no other lawful basis applies; you successfully object under Art. 21; processing is unlawful; or a legal obligation (EU/UK law) requires erasure; or (limited circumstances) personal data was collected in connection with offering information-society services to a child. This right is NOT absolute. Beamcraft may need to retain some records for accounting, tax or ongoing legal-claim purposes overriding the erasure request and will explain the reasons in the response.
4. Right to restriction of processing (Art. 18). Suspend active processing (mark the data as restricted) in any of four cases: while accuracy of your personal data is being verified; while Beamcraft assesses whether an erasure request is valid where the processing is unlawful but you oppose erasure and request restriction instead; Beamcraft no longer needs the personal data for the processing purpose but you require it for the establishment, exercise or defence of legal claims; or an Article 21 objection is pending resolution.
5. Right to data portability (Art. 20). Where processing is based on consent (Art. 6(1)(a)) or contract (Art. 6(1)(b)) and carried out by automated means, provide your personal data (only the data you provided, not derived/inferred data) to you or to a third-party controller you nominate, in a structured, commonly used and machine-readable format.
6. Right to object (Art. 21). Object to processing based on Article 6(1)(f) (legitimate interests) — including any profiling based on those provisions — on grounds relating to your particular situation. If you object Beamcraft stops that processing unless it demonstrates compelling legitimate grounds overriding your interests, rights and freedoms, or it needs the processing for the establishment, exercise or defence of legal claims. Special rule for direct marketing: you can object at any time, for any reason, to processing of personal data for direct-marketing purposes. For direct marketing, Beamcraft stops immediately on receipt, no questions asked.
7. Rights in relation to automated individual decision-making, including profiling (Art. 22). You have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you, unless one of the Art. 22(2) exceptions applies (contract, explicit consent, or authorised by law) and appropriate safeguards are in place. Today Beamcraft does NOT conduct any such purely automated decision-making with legal or similarly significant effects on any data subject. The escalating brute-force lockout on coupon validation and admin login is a security control that does not produce legal effects and is not treated as Art. 22 decision-making. If this position ever changes, this policy will be updated and Art. 22 safeguards (human intervention, right to express a point of view, right to contest the decision) will apply.
8. Right to withdraw consent at any time (Art. 7(3)). Wherever Beamcraft relies on consent you can withdraw it at any time, as easily as you gave it (e.g. for marketing emails there is always an unsubscribe link or clearly stated reply-address at the bottom of the email). Withdrawal of consent does not affect the lawfulness of any processing done by Beamcraft before your withdrawal is received.

Personal data breaches.

Beamcraft must report a qualifying personal data breach to the ICO without undue delay and, where feasible, not later than 72 hours after becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons. Where the breach is likely to result in a high risk to your rights and freedoms, Beamcraft will also inform you directly without undue delay. If you suspect that a personal data breach has occurred (for example, an unauthorised person appears to have obtained your order details or ID verification data) please notify Beamcraft immediately at engraving@beamcraft.io with “DATA BREACH REPORT” in the subject line.

Complaints about data-protection handling.

If you are unhappy with how Beamcraft has handled your personal data, or with how it responded to any exercise of your rights above, please raise the matter first in writing with engraving@beamcraft.io to give Beamcraft the chance to investigate and try to resolve it directly. You also have the right, at any time, to lodge a complaint directly with the supervisory authority: Information Commissioner's Office (ICO), website ico.org.uk/make-a-complaint/, helpline 0303 123 1113, address Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. You generally have 3 months from the date of the last substantive response to your complaint to contact the ICO, or 1 month from a final refusal to comply with a SAR.

22. Third-party services, Cloudflare and other verified processors

Beamcraft uses the following third-party infrastructure and service providers in operating its website and order process. Where a provider processes personal data on Beamcraft's behalf it acts either as a UK GDPR Article 28 processor (typically under the provider's standard Data Processing Addendum) or, where the provider determines purposes/means of processing for its own separate obligations (e.g. a PSP applying its own anti-money-laundering / fraud rules), as a separate controller in its own right.

Cloudflare, Inc. (website host, CDN, D1 database, Workers compute, Bot Management, WAF, SSL/TLS). The entire beamcraft.io website and all its public sub-domains are served via the Cloudflare Workers platform (Worker-first routing: every request passes through the Worker JavaScript runtime before static assets are served from Cloudflare's edge). Persistent structured data (enquiries, visitor analytics, QR attribution, coupon state, prize claims, poll responses, admin auth events and brute-force attempt events) is stored in Cloudflare D1 serverless SQLite-compatible edge database, UK/Western Europe primary region as configured for Beamcraft (production D1 id c570229d-97a0-44db-b431-b4ee079b545a; staging id 0ade6830-eaf2-4670-a85c-ac36537e6d27). Cloudflare's privacy practices and DPA terms are at cloudflare.com/privacypolicy and cloudflare.com/business-resources/data-processing-addendum. Cloudflare, as a US-headquartered company, participates in the UK International Data Transfer Adequacy framework as of the draft date and provides UK / EU SCC-style clauses for its customers where applicable. Categories of personal data processed by Cloudflare on Beamcraft's behalf: website request metadata (Connecting-IP, CF-Ray, request method, URL, Referer, User-Agent) processed as part of standard web serving and security logging; Bot Management scores (used upstream of analytics writes, not stored as personal data by Beamcraft itself); and any and all personal data that Beamcraft stores in D1 tables or passes through Worker code (enquiry names, emails, phone numbers, wording, delivery addresses, contact information on tags). At the time of writing age-verification ID photographs are NOT stored in D1 or any other Cloudflare storage; they are assessed and deleted promptly after verification via whatever out-of-band encrypted method Beamcraft uses (e.g. Telegram self-destructing media). Cloudflare acts as a processor for these activities under the direction of Beamcraft as controller.

Other current and future processors / controllers.

The following categories of provider are used, or may be used as the business scales. Exact provider names used at any given date are available on written request from customers or prospective customers to engraving@beamcraft.io and are itemised in individual order correspondence where they directly affect the customer's order:

• Payment service providers (card link, invoice payment, bank transfer reconciliation). In their capacities as anti-fraud and payment controllers they act as separate controllers in their own right; for processing strictly limited to authorising the specific Beamcraft transaction they act as processors where applicable. Exact provider names for any given transaction are itemised in the payment or order correspondence.
• Delivery carriers. They receive name, address, telephone number (where supplied) and parcel weight/dimensions from Beamcraft in order to effect delivery and act as separate controllers in their own right for their own delivery operations, customer services and complaints handling. Carrier name(s) actually used are confirmed to the customer at dispatch.
• Email provider used for the @beamcraft.io mailbox. Acts as a processor for the controller's email correspondence. Exact provider name and jurisdiction are available on request.
• Secure file / artwork transfer. Beamcraft's recommended method for customer transfer of artwork, reference images and order files is the Telegram messenger service using Beamcraft's business handle @beamcraftuk. Telegram Messenger LLP / Telegram FZ-LLC's own privacy policy applies to your use of Telegram (see telegram.org/privacy). You may alternatively use end-to-end encrypted email or any other method agreed between you and Beamcraft; the choice of method does not alter the substantive data-protection terms in Sections 19 and 21.
• Accountancy / tax / legal professional advisers. Act as separate controllers in their own right under their own professional regulatory and confidentiality obligations (ICAEW, SRA, etc.) rather than strict Article 28 processors for the entirety of their own practice.

If, in future, Beamcraft onboards a new processor that will have access to personal data (new PSP, CRM system, ticketing system, newsletter tool etc.), this section will be updated to identify that provider, its role (controller vs processor), the UK-transfer adequacy/SCC mechanism and the processing purpose, before the processing begins. Where appropriate, data subjects will also be informed of the change via a prominent website notice or email to active customers.

All external-facing pages are served via HTTPS TLS 1.2/1.3 only; HSTS is enabled on the Cloudflare production configuration; all Worker environment variables holding secret values (BEAMCRAFT_ADMIN_USER, BEAMCRAFT_ADMIN_PASSWORD, BEAMCRAFT_VISITOR_PEPPER, BEAMCRAFT_PHONE_NUMBER) are configured as encrypted Cloudflare Worker secrets, never written in plaintext to the source code repo, never echoed in logs and never disclosed to any person other than the owner and the specific deployment-tool holder. Further information about Beamcraft's security posture is available on request to reasonable non-competitive enquirers at engraving@beamcraft.io.

23. Website availability, errors and limitations

Beamcraft provides beamcraft.io on an “as is” and “as available” basis. Beamcraft takes all technically and commercially reasonable steps to keep it available, accurate and fit for its stated purpose but does not offer any specific uptime SLA or uptime commitment for the public website. It relies on Cloudflare Workers and Cloudflare's global edge network for baseline availability. Planned maintenance is normally performed outside standard UK business hours where possible. Beamcraft cannot be held liable for losses arising from temporary website unavailability caused by Cloudflare platform incidents, DDoS/attack traffic, ISP outages, third-party DNS/SSL issues or any other cause outside Beamcraft's direct control, to the maximum extent permitted by English law and always subject to the non-excludable provisions in Section 8 (death, injury, fraud, CRA 2015 non-excludable terms).

Beamcraft takes reasonable steps to ensure information on the website is accurate at publication. Product availability, published Shop prices and custom quotation prices, delivery times and carrier options can change between the time a page is cached and the time an enquiry is made; the confirmed Shop order or, for bespoke work, the written quotation records the agreed specification and price. SVG placeholder illustrations are indicative only; real photographs of completed commissions are added to the Gallery as they become available and portfolio-consent is obtained. Third-party links (e.g. to Citizens Advice, ICO, CTSI Business Companion, GOV.UK, legislation.gov.uk, allaboutcookies) are provided for convenience only; Beamcraft does not control third-party websites, is not responsible for their content, accuracy, privacy practices or availability, and you follow them at your own risk.

Security measures currently in place.

Cloudflare SSL/TLS (Full/Strict) end-to-end; Cloudflare WAF and Bot Management with bot-score thresholds upstream of analytics writes and sensitive endpoints; HTTP-only bc_vid cookie with Secure+SameSite=Lax flags; Worker-first architecture with every request routed through the Worker runtime so that security headers, rate limiting, bot filtering and request sanitisation are applied consistently; admin endpoints protected by HTTP Basic Authentication (username/password stored as encrypted Worker secrets, never plaintext), backed by escalating lockout on failed authentication attempts (see security protections referenced in the coupon, privacy and third-party sections); coupon-validation input is sanitised to strip control characters, reject over-length input and canonicalise codes before comparison; all responses from /api/coupon/validate to benign user error return a generic friendly message; they do not leak internal state, personal data, or information useful for enumeration or credential stuffing.

Despite these measures, no website can be guaranteed 100% secure against all possible future attacks or zero-day vulnerabilities. If you identify a genuine security vulnerability in beamcraft.io or its APIs, please report it responsibly by private email to engraving@beamcraft.io with “RESPONSIBLE SECURITY DISCLOSURE” in the subject line. Beamcraft will investigate, respond and, if appropriate and possible, reward the report under a simple informal bug-bounty process on a case-by-case basis. Please do not publicly disclose any vulnerability before Beamcraft has had a reasonable chance to investigate and remediate it.

Your obligations as a user.

When using the Beamcraft website you agree that you will NOT: submit unlawful, defamatory, obscene, hateful, discriminatory, threatening, harassing or abusive content through any form/poll/enquiry mechanism; upload or transmit any virus, worm, trojan, ransomware, spyware, adware or other malicious code/file; attempt, by automated or other means, to gain unauthorised access to any system/account/file/data/API of Beamcraft or any third party (including brute-force attacks against the coupon validator, admin login, or any rate-limited endpoint; credential-stuffing; SQL injection; path traversal; cross-site scripting; SSRF). Beamcraft logs suspicious attempts and reports criminal or repeated abusive access attempts to the NCSC and/or local police where appropriate; you also agree not to use any robot, spider, scraper, crawler or other automated system to access/copy/extract/republish the website or product catalogue for commercial purposes without Beamcraft's prior written permission. This restriction does not apply to legitimate fair dealing under UK copyright law, or to the normal crawling/indexing activities of well-behaved public search-engine spiders (which are permitted per the robots.txt file).

Limitation of liability for website use (B2C context).

To the maximum extent permitted by law, and always subject to the non-excludable liabilities listed in Section 8, Beamcraft accepts no liability to any user of the website for any indirect, special, incidental, consequential, economic or pure-financial loss, loss of profit, loss of business, business interruption, loss of data or loss of goodwill, arising out of or in connection with access to, use of, reliance on, or inability to use, the Beamcraft website or any content/link on it, whether in contract, tort (including negligence), breach of statutory duty or otherwise, even if Beamcraft has been advised of the possibility of such loss. Nothing in this paragraph is intended to, or shall, exclude or limit any liability that cannot by law be excluded or limited, including without limitation liability under CRA 2015 Part 1 (digital content/service rights) where applicable.

24. Complaints, dispute handling and governing law

To make a complaint please write to engraving@beamcraft.io with the subject line “COMPLAINT — [your order/reference number here]”. Include: your full name, order/quotation/reference number; short description of the complaint; relevant dates/proof emails/order confirmations/correspondence; any photographs (for goods/damage/wrong-engraving complaints); and the resolution you are seeking (apology, explanation, replacement, repair, refund, part-refund, price reduction, or a combination). Beamcraft will handle every complaint in line with the following internal standard:

• Acknowledgement: in writing, normally by email, within 5 working days of receipt.
• Investigation: where the complaint relates to a specific order Beamcraft reviews the four-item order record (original written quotation; customer-approved proof email; any pre-shipment finished photograph if one was taken or requested; packing and dispatch record including carrier name, tracking and, if relevant, photos of item/parcel at packing). Where the complaint requires physical inspection Beamcraft tells you whether it wishes to inspect and how (prepaid return label or pre-arranged Southport drop-off).
• Substantive response: within a maximum of 8 weeks from receipt of your complaint. For most straightforward engraving-error or transit-damage complaints the answer comes much sooner (typically 5–10 working days). If it is likely to take longer than 8 weeks Beamcraft writes to you within the 8-week window to explain the delay and the expected date of the final response.

Internal escalation: if you are not satisfied with the substantive response you can ask for internal escalation to the owner/most senior responsible decision-maker. Simply reply to the response email with “REQUEST INTERNAL ESCALATION” in the subject line; the matter is re-reviewed by a decision-maker not involved in the original response and you receive a final internal response within a further 4 weeks of escalation.

Alternative Dispute Resolution (ADR).

If, after exhausting Beamcraft's internal complaints procedure, Beamcraft has been unable to resolve the complaint to your satisfaction and you are a UK consumer, you may be able to use an ADR scheme. Post-Brexit the European ODR platform is generally no longer available for UK consumers, but UK consumers retain the following practical routes:

• Citizens Advice consumer service: England & Wales Adviceline 0808 223 1133; Wales Consumer Adviceline 0808 223 1144; website citizensadvice.org.uk/consumer/. Free, confidential, independent advice on consumer rights and escalation to Trading Standards where appropriate. Northern Ireland: Consumer Council NI at www.consumercouncil.org.uk / 0800 121 6022. Scotland: Citizens Advice Scotland at www.cas.org.uk.
• Trading Standards: reports of suspected trader misconduct, misleading commercial practices, unfair contract terms, unsafe goods or age-of-sale breaches are made via Citizens Advice, which triages cases and passes them to the appropriate local Trading Standards team for investigation/enforcement action.
• Sector-specific ADR providers: depending on the nature of the complaint, CTSI-approved ADR bodies such as Furniture Ombudsman, Retail Ombudsman (if still accredited), CISAS (for communications/Internet services) or others may be relevant. Beamcraft is not currently required by sector-specific regulation to participate in a mandatory ADR scheme. Beamcraft will, however, in any individual case give genuine and open-minded consideration to any reasonable proposal to refer a specific dispute to a mutually agreed ADR scheme or independent mediator; the question of ADR costs to be discussed and agreed case by case.
• Chargeback (card-payment purchases). For complaints about a card transaction not resolved satisfactorily by Beamcraft, you may be able to raise a chargeback claim with your card issuer under the internal rules of the relevant scheme (Visa, Mastercard, Amex). You should normally do this within 120 days of the transaction or of discovering the problem, although some scheme rules extend it for specific claim types; your issuer can advise.
• Section 75 Consumer Credit Act 1974. If you paid for goods/services costing more than £100 and not more than £30,000 on a credit card (or under certain credit-linked hire-purchase/credit-broker arrangements) then Section 75 CCA 1974 may give you an additional remedy against your credit-card issuer, making the issuer jointly and severally liable with Beamcraft for any misrepresentation or breach of contract by Beamcraft. Especially valuable for higher-value custom orders where something goes wrong.

Governing law and jurisdiction.

Subject always to the mandatory rules of any consumer law that cannot be contracted out of (including, for example, the rules on consumer jurisdiction in s.15 Civil Jurisdiction and Judgments Act 1982, as retained and modified post-Brexit): the contract between you and Beamcraft, and all non-contractual obligations connected with it, are governed by and construed in accordance with English law. Subject to the special consumer-jurisdiction rules above, the courts of England and Wales have exclusive jurisdiction to settle any dispute or claim (including non-contractual disputes or claims) arising out of or in connection with these terms, their subject matter or their formation. Consumers resident in Scotland may instead bring proceedings in the Scottish courts if they prefer (applying Scottish consumer-law principles where applicable); consumers resident in Northern Ireland may instead bring proceedings in the Northern Ireland courts (applying Northern Irish consumer-law principles where applicable).