Privacy policy

Last updated: 7 September 2026

This policy describes how Brindlew LTD collects, uses, stores and discloses your personal information when you visit our website, make a purchase, contact us or otherwise interact with our services.

We process personal information under the UK General Data Protection Regulation and the Data Protection Act 2018.

Brindlew is a UK-only online store. We sell and provide our services exclusively to customers in the United Kingdom.

We don't sell your personal information.

1. Who's responsible

Brindlew LTD is the data controller for everything described here.

Saturday, Sunday and bank holidays: closed.

2. Where the information comes from

Directly from you — when you place an order, create an account, contact us or subscribe to our emails.

Automatically — through your device when you use the website, and through cookies, pixels, web beacons and similar technologies.

From service providers — our e-commerce platform, payment processors, delivery and fulfilment partners, customer service tools, analytics providers and marketing providers.

3. What we collect

Contact details — name, email address, telephone number and address.

Order information — billing address, delivery address, payment confirmation, and details of the products you purchase.

Payment information — card details are entered directly into our payment provider's secure form and never reach our systems. We receive a payment confirmation, the last four digits and the card type.

Account information — username, encrypted password and associated settings, where you create one.

Shopping information — products you view, add to your basket, purchase or save to a wishlist.

Customer support information — the contents of your messages and anything you choose to include.

Technical and usage information — IP address, browser type and version, device type, operating system, network information, pages visited, products viewed, referring websites, and how you interact with the site.

You may choose not to provide certain information, though some is necessary to process orders or respond to your enquiries.

4. Why we hold it, and what allows us to

Where we rely on legitimate interests, we've considered whether our interest is outweighed by your rights, and you can object at any time.

Where we rely on consent, you can withdraw it whenever you like. That doesn't affect anything processed beforehand.

Buying from us is never conditional on agreeing to marketing.

5. Marketing

Order-related messages — confirmations, dispatch notices, delivery updates — are sent because we need them to complete your purchase. They aren't marketing, and unsubscribing doesn't stop them.

Marketing messages go only to people who have actively opted in. Providing your email address at checkout doesn't sign you up.

Unsubscribe at any time using the link in any marketing email, or by emailing support@brindlew.com.

6. Cookies

Non-essential cookies are set only after you've given consent through our cookie banner, as the Privacy and Electronic Communications Regulations require. You can change or withdraw that consent at any time through the banner or your browser settings.

Blocking a cookie doesn't delete one already stored, and disabling strictly necessary cookies will prevent checkout from working.

Do Not Track: browsers send DNT signals inconsistently and there's no agreed standard, so we don't act on them. We do honour Global Privacy Control signals where transmitted.

7. Who else sees it

• Our e-commerce and hosting platform
• Payment processors — payment and fraud screening
• Delivery and fulfilment partners
• Customer service and communications providers
• IT, cloud storage and analytics providers
• Marketing and advertising providers — subject to your consent
• Professional advisers, including accountants and legal advisers
• Regulators, authorities and law enforcement — where legally required

Each receives only what its function requires and processes it under our instructions. We have data processing agreements in place with our processors.

We may also disclose where necessary to comply with a legal obligation, protect our business or customers, investigate suspected fraud, or establish or defend legal claims.

If the business is sold, merged or restructured, customer records may transfer as part of that transaction.

8. Information leaving the UK

Some of our providers process personal information outside the United Kingdom.

Where a transfer is a restricted transfer under UK data protection law, we rely on UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

9. How long we keep it

Where a dispute or legal claim is live, the relevant records stay as long as they're needed. Otherwise they're deleted, anonymised or securely destroyed.

10. Your rights

Under UK data protection law you have the right to:

• Access the personal information we hold about you
• Have it corrected where it's inaccurate or incomplete
• Have it erased, where we're not required to keep it
• Restrict how we process it
• Receive a copy in a common electronic format
• Object to processing based on legitimate interests, and always to direct marketing
• Withdraw consent at any time, where consent is the basis
• Avoid decisions made purely by automated processing that carry legal effects

Some of these carry conditions and exemptions.

To exercise a right, email support@brindlew.com. We may ask you to confirm your identity, usually by checking details of a recent order.

We respond within one month. Complex requests may take a further two months, and we'll tell you inside the first month if that applies. There's no charge, and using these rights won't change how we treat you.

11. Security

We use appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration and disclosure — including SSL/TLS encryption across the site, access limited to staff who need it, and a PCI-DSS compliant payment provider.

No method of electronic transmission or storage can be guaranteed completely secure. Please don't use insecure channels to send us sensitive or confidential information.

If you have an account, keeping your login details secure is your responsibility.

Where a breach is likely to pose a high risk to your rights, we'll tell you without undue delay and report it to the Information Commissioner's Office, as the law requires.

12. Children

Our website isn't intended for children under 13, and we don't knowingly collect their personal information.

If you're a parent or guardian and believe a child has given us their details, email us and we'll remove them.

13. Other websites

Our website may link to sites operated by others. We aren't responsible for their content, security or privacy practices. Review theirs before providing any personal information.

14. Complaints

Raise it with us first — support@brindlew.com. We acknowledge complaints within five working days and investigate without undue delay.

If our response doesn't satisfy you, you have the right to complain to:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
0303 123 1113 · ico.org.uk

15. Changes to this policy

We may update this policy to reflect changes to our business practices, services, technology or legal requirements.

The current version always sits on this page with the date above. Where a change materially affects how we handle your information, we'll take whatever additional steps the law requires.

16. Contact

Brindlew LTD
Address: West Thurrock Way, Grays, Essex RM20 2ZP, United Kingdom
Email: support@brindlew.com 
Phone: +44 1708 869933
Business hours: Monday to Friday, 9:00 am–9:00 pm UK time