Privacy policy

This policy explains how Brolly Pup collects and uses your personal data when you visit our website or buy from us, and your rights under the UK GDPR and the Data Protection Act 2018.

Who is responsible for your data

The data controller is Bradlee Williams, trading as Brolly Pup, address available on request from brollypup@gmail.com. Contact: brollypup@gmail.com

What we collect

Order details: your name, delivery and billing address, email address, phone number (if given) and what you bought.
Payment details: payments are processed by our payment providers. We don't see or store your full card details.
Messages: anything you send us by email or contact form.
Device and browsing data: IP address, browser and device type, and how you use our site, collected through cookies and similar technologies.
Marketing preferences: whether you've chosen to hear from us.

How and why we use it

To process, fulfil and deliver your order, and to handle returns and refunds (to perform our contract with you).
To reply to your questions and provide customer service (contract and our legitimate interests).
To keep our site secure, prevent fraud and improve how it works (our legitimate interests).
To send marketing emails, only if you've opted in. You can unsubscribe at any time using the link in any email (consent).
To keep records for tax and accounting purposes (legal obligation).

Who we share it with

We only share what's needed with trusted service providers who help us run the shop, including: Shopify (our e-commerce platform), payment providers, our suppliers and fulfilment partners who pack and send your order, delivery companies, and email service providers. Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the UK International Data Transfer Agreement/Addendum. We never sell your personal data.

Cookies

We use essential cookies to make the site and checkout work, and, where you agree, analytics and marketing cookies. You can manage your choices through our cookie banner and your browser settings.

How long we keep it

We keep order records for up to 6 years after the end of the financial year they relate to, to meet tax and legal requirements. Marketing data is kept until you unsubscribe. Other data is kept only as long as needed for the purposes above.

Your rights

You have the right to access your data, have it corrected or deleted, restrict or object to how we use it, ask for a copy in a portable format, and withdraw consent at any time. To use any of these rights, email brollypup@gmail.com. We'll respond within one month.

If you're unhappy with how we've handled your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.