Privacy Policy

---

At Brookley Designs, we are committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you visit our website, make a purchase, or contact us.

 1. Who We Are

Brookley Designs
Website: www.brookleydesigns.com
Email: brookleydesigns@hotmail.com

We are the data controller for any personal data collected via this website.

2. What Information We Collect

We may collect and process the following information:

• Identity Data: your name
   
• Contact Data: your email address, phone number, delivery address
   
• Transaction Data: details about payments and purchases
   
• Technical Data: IP address, browser type, time zone settings, and device information
   
• Usage Data: how you use our website
   
• Marketing Data: your preferences in receiving marketing communications
   

3. How We Collect Your Data

We collect data through:

• Direct interactions (e.g., when you make a purchase or contact us)
   
• Automated technologies (e.g., cookies, server logs)
   
• Third parties (e.g., payment providers such as Stripe or PayPal)
   

4. How We Use Your Data

We use your personal data to:

• Fulfil your orders and deliver products
   
• Manage customer service enquiries
   
• Process payments and prevent fraud
   
• Send order updates and (with your consent) marketing messages
   
• Analyse website performance and improve user experience
   

5. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Contractual necessity – to process and deliver your order
   
• Legitimate interests – to improve our service and manage our business
   
• Consent – for sending marketing communications
   
• Legal obligation – to comply with applicable law
   

6. Data Sharing

We may share your data with trusted third parties such as:

• Payment processors (e.g., Stripe, PayPal)
   
• Delivery services (e.g., Royal Mail, DPD)
   
• Website and IT support providers
   

These parties are required to respect the security of your data and comply with UK data protection laws.

7. International Data Transfers

If we transfer your personal data outside the UK, we ensure a similar level of protection by ensuring that appropriate safeguards are in place (e.g., standard contractual clauses).

8. Data Retention

We only retain your personal data for as long as necessary for the purposes we collected it for, including legal, accounting, or reporting obligations. Typically, this is:

• 6 years for transactional data (for tax and accounting)
   
• Until consent is withdrawn for marketing communications
   

9. Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
   
• Request correction of inaccurate data
   
• Request erasure of your data (right to be forgotten)
   
• Object to processing
   
• Request restriction of processing
   
• Request transfer of your data (data portability)
   
• Withdraw consent at any time (where applicable)
   

To exercise any of these rights, please contact us at [Insert email].

10. Cookies

Our website uses cookies to improve user experience. Please see our [Cookie Policy] for more details about the types of cookies we use and how you can manage your preferences.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and, where appropriate, notified to you by email.

12. Complaints

If you have any concerns about our use of your personal data, you can contact us directly. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): Website: www.ico.org.uk