Card handling offloaded to Stripe / Square
Card flows go through Stripe or Square hosted payment fields, so cardholder data does not transit Byte Bridges-built systems. SAQ A scope is the default. See our Controls Map for the full position on payment processing.
Consumer Rights Act 2015
Refund, returns, and digital-content rights baked into order workflows — not patched in after a customer complaint.
UK GDPR & DPA 2018
Lawful basis for loyalty data, marketing consent, and customer profiling handled as architecture decisions — not a checkbox exercise.
Digital Markets, Competition & Consumers Act
Subscription traps, drip pricing, and fake-review prohibitions considered in any customer-facing commerce flow.
Distance Selling Regulations
For online and click-and-collect channels: cancellation rights, pre-contract information, and delivery timelines built into the checkout journey.
Accessibility (WCAG 2.1 AA — working towards 2.2)
Customer-facing storefronts and self-service kiosks built to WCAG 2.1 AA, with the WCAG 2.2 success criteria in flight — because 20% of UK shoppers have a disability.