Privacy Policy

Last updated: 3 September 2025

This Privacy Policy explains how [Bravion Clothing Ltd] (“we”, “us”, “our”) collects, uses, and shares your personal information when you visit or make a purchase from our Shopify-powered store [store URL] and related services. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1) Who we are (Data Controller)

For most processing on our store, [Bravion Clothing Ltd] is the data controller. Shopify provides our ecommerce platform and generally acts as our data processor for “Customer Personal Data” under Shopify’s Data Processing Addendum.

Contact:
Email: [privacy@bravion.co.uk

UK/EU representative (if you are not established in the UK/EEA): If we do not have a UK/EU establishment but offer goods to people in the UK/EEA, we are required to appoint a UK and/or EU representative. Details (if applicable): [Representative Name, Address, Email].

2) What we collect

  • Identity & contact data (name, email, billing/delivery address, phone)

  • Order & payment details (items, amounts, transaction info; card data is processed by our payment providers)

  • Account and support data (passwords, preferences, messages)

  • Device, usage & analytics data (IP, browser, pages viewed, interactions)

  • Marketing preferences

  • Cookies and similar technologies (see “Cookies” below)

3) Why we use your data (lawful bases)

We only process personal data when a lawful basis applies:

  • Contract – to provide our services and fulfil your orders (checkout, payments, delivery, returns).

  • Legitimate interests – to operate, secure, and improve our store; prevent fraud; basic analytics; limited direct marketing (you can opt out).

  • Consent – for email/SMS marketing to new subscribers and for non-essential cookies.

  • Legal obligation – to meet tax, accounting, and compliance duties.
    Individuals have an absolute right to object to direct marketing at any time.

4) Direct marketing (PECR)

We only send electronic marketing (email/SMS) with your consent, or under the “soft opt-in” for our existing customers where the law allows—and always with a clear opt-out in every message. We do not use bought-in lists for soft opt-in.

5) Cookies & similar technologies

We use essential cookies to run the site and non-essential cookies (e.g., analytics/ads) with your prior consent. We do not use pre-ticked boxes and make it as easy to reject as to accept non-essential cookies. You can change your choices any time via our cookie banner or browser settings.

6) How we share information

We share data with trusted providers to operate our store, including:

  • Shopify (store hosting, checkout, fraud prevention)

  • Payment processors (e.g., Shopify Payments, PayPal)

  • Fulfilment & delivery partners (warehouses, couriers)

  • IT, analytics, and marketing tools (only with appropriate safeguards)

Shopify may process Customer Personal Data on our behalf and describes its roles and safeguards in its Privacy Policy and Data Processing Addendum.

7) International transfers

Your data may be transferred outside the UK (for example, to Canada and the United States) to operate our store. We rely on lawful mechanisms such as UK adequacy decisions (e.g., for Canada), the UK-US Data Bridge for transfers to certified US organisations, and/or the ICO’s International Data Transfer Agreement (IDTA) / UK Addendum to the EU SCCs, plus transfer risk assessments where required.

8) Retention

We keep personal data only as long as necessary for the purposes above. Order and tax records are typically retained up to 6 years to meet UK accounting/VAT requirements.

9) Your rights (UK GDPR)

You have the right to: access, rectify, erase, restrict, object (including to direct marketing), data portability, and rights related to automated decision-making. To exercise, contact us at [privacy@bravion.co.uk