Privacy Policy
What We Collect, Why, and What You Can Ask Us to Do About It.
This Privacy Policy explains how Brix + Bailey collects, uses, stores and protects your personal information when you use brixbailey.com.
Who We Are
Brix + Bailey is operated by Brix And Bailey Limited, a company registered in England and Wales under number 08737866, with its registered office at 24-25 Barnack Business Centre, Blakey Road, Salisbury, Wiltshire, SP1 2LP.
We are the data controller for the personal information described in this policy. You can contact us at mail@brixbailey.com.
What We Collect
We collect personal information when you create an account, place an order, sign up to our newsletter, contact us, or browse the site.
- Name, email address, delivery and billing address
- Phone number
- Payment information, processed by Shopify Payments. We do not store card details
- Order history and browsing behaviour on our site
- Communications you send us
What We Use It For
- Processing and fulfilling your orders
- Communicating with you about your orders and account
- Sending marketing emails, where you have opted in
- Improving the website and our services
- Meeting our legal obligations
We do not sell your personal data. We share your delivery address and order details with the relevant Brand Partner so they can send you what you ordered, and nothing beyond that.
Our Legal Bases
- Contract, to fulfil your order and provide our services
- Legitimate interests, to improve the site and provide customer support
- Consent, for marketing emails and for non-essential cookies
- Legal obligation, where the law requires it
Who We Share It With
Our Brand Partners, limited to what they need to fulfil your order. Shopify, which hosts our store and processes payments. Our email and analytics providers. Professional advisers where required for legal, tax or accounting purposes.
Everyone we share data with is bound to use it only for the purpose we have given it to them for.
Where Your Data Is Held
Some of our service providers are based outside the UK. Where personal data is transferred outside the UK, we rely on an adequacy decision or on the International Data Transfer Agreement or Addendum approved by the ICO, so your data has equivalent protection.
How Long We Keep It
Only as long as we need it. Order records are typically kept for seven years, in line with HMRC requirements. You can ask us to delete your account and associated data at any time, subject to any records we are legally required to retain.
Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data deleted
- Object to, or restrict, how we process your data
- Receive a portable copy of your data
- Withdraw consent for marketing or cookies at any time
Email mail@brixbailey.com to exercise any of these. We respond within one month, and will tell you if we need longer because a request is complex.
Cookies and Analytics
We use Google Analytics to understand how people use the site. Analytics and marketing cookies are only set where you have given consent, and you can change or withdraw that at any time. Full detail is in our Cookies Policy.
Our site runs on Shopify, so Shopify's own privacy terms also apply to your use of it.
Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or misuse. Payment processing is handled by Shopify Payments, which is PCI-DSS compliant.
Children
Our site is not intended for children. You must be at least 18 to place an order. We do not knowingly collect personal data from anyone under 18, and if we learn that we have, we will delete it.
Changes to This Policy
We may update this policy from time to time. Where a change is significant, we will tell registered customers by email. The date below shows when it was last updated.
Complaints
If you are unhappy with how we have handled your data, please tell us first at mail@brixbailey.com and we will try to put it right.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or by telephone on 0303 123 1113.