Last updated 10 November 2026. Details in [square brackets] are still to be completed by Brush Brush.
This policy explains how [Legal business name] (“Brush Brush”, “we”, “us”) collects and uses your personal data when you visit this website or pre-order from us. We are the data controller. Our address is [Registered address] and you can contact us at [contact email].
What we collect
- Order details: your name, email address, phone number, billing and delivery address, the items you order and your order history.
- Payment details: payments are processed by our payment provider, [Stripe / PayPal]. We never see or store your full card number.
- Messages you send us, for example by email.
- Technical data: your IP address, browser type and the pages you view, collected automatically by our web server and the services listed below.
Why we use it
- To take, process and deliver your pre-order (to perform our contract with you).
- To keep accounting and tax records (to meet our legal obligations).
- To prevent fraud and keep this website secure (our legitimate interests).
- To send you marketing emails, only if you have opted in (your consent, which you can withdraw at any time).
Who we share it with
- Our payment provider, [Stripe / PayPal], to take payment.
- Our delivery partner, [Carrier], to deliver your order.
- Our website host, Hostinger, which stores this website and its data.
- Google Fonts and cdnjs (Cloudflare), which deliver the fonts and code this website uses. Your browser connects to them directly, so they receive your IP address.
- Professional advisers and authorities, where the law requires it.
Some of these providers may process data outside the UK. Where they do, they protect it with safeguards approved under UK data protection law, such as the International Data Transfer Agreement.
How long we keep it
We keep order records for six years after the end of the tax year they relate to, as HMRC requires. We delete other data when we no longer need it.
Cookies
This website only uses cookies that are needed for it to work: WooCommerce cookies that remember your basket and checkout session (such as woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_*). We do not use advertising or analytics cookies.
Your rights
Under UK data protection law you can ask to access, correct or delete your personal data, to restrict or object to how we use it, and to receive a copy of it in a portable format. Email [contact email] to make a request. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
We will post any changes on this page and update the date at the top.