Privacy Policy
Last updated: 13 September 2026
Brodbay ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when you visit or shop at our store, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Brodbay, contact: brodbayltd@gmail.com. We are the data controller for the personal data we collect from you.
2. Information we collect
- Contact details: name, email, delivery/billing address, phone number
- Order details: items purchased, payment confirmation (we do not store full card numbers — these are processed by our payment provider)
- Account details, if you create one
- Technical data: IP address, browser type, device information, collected via cookies and similar technologies (see our Cookie Policy)
- Marketing preferences, if you opt in to our newsletter
3. How we use your information
- To process and deliver your orders
- To manage your account and respond to enquiries
- To send order updates and, where you've opted in, marketing communications
- To improve our website and prevent fraud
- To comply with legal obligations (e.g. tax and accounting records)
4. Legal basis for processing
We rely on: performance of a contract (processing your order), legitimate interests (site security, improving our service), consent (marketing emails, non-essential cookies), and legal obligation (tax records).
5. Sharing your information
We share data with trusted third parties only as needed to run our business: payment processors, delivery couriers, IT and hosting providers (including Shopify Inc., our e-commerce platform), and, where required, law enforcement or regulators. We do not sell your personal data.
6. International transfers
Some of our service providers (including Shopify) may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
7. Data retention
We keep personal data only as long as necessary for the purposes it was collected, including to satisfy legal, accounting, or reporting requirements.
8. Your rights
Under UK GDPR you have the right to: access your data, request correction or deletion, restrict or object to processing, request data portability, and withdraw consent at any time. To exercise these rights, contact us at brodbayltd@gmail.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
9. Cookies
Our site uses cookies. Please see our separate Cookie Policy for full details and how to manage your preferences.
10. Contact us
Questions about this policy or your data can be sent to customerservice@brodbay.co.uk
