This Privacy Policy explains how Branding Warehouse ("we", "us", "our") collects, uses and protects information when you visit brandingwarehouseuk.com or interact with us. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Branding Warehouse is the data controller for personal information collected via this site.
Address: C/o Swift Accounting, Ground Floor, The Custom House, The Strand, Barnstaple, EX31 1EU, United Kingdom
Email: sales@brandingwarehouseuk.com
Phone: +44 7365 817 775 or +44 7387 006 513
VAT Registration Number: 513453711
2. Information We Collect
Information you provide
When you fill in our contact form, place an order, register an account, or email us, we collect: your name, company name, email address, phone number, billing and delivery address, and any message or artwork file you send us.
Information collected automatically
When you visit the site we automatically collect log data, including your IP address, browser type and version, the pages you visit, time and date of visit, time spent on pages, referring URL, and basic device information.
When you submit our contact form we also store your IP address alongside the message itself, so we can investigate spam or abuse if it occurs. We do not use this for marketing or share it with third parties.
3. How We Use Your Information
We use the information we collect to:
- respond to enquiries and provide quotations;
- process and deliver orders;
- send order updates and customer service communications;
- improve our website, products and service;
- comply with our legal obligations.
Our lawful bases for processing under UK GDPR are: contract performance (for orders), legitimate interests (for site improvement and customer service), legal obligation (for accounting and compliance), and consent (for marketing communications, where applicable).
4. Cookies & Tracking
Our site uses cookies and similar technologies. Cookies are small files stored on your device that help the site function and let us understand how it is used. We ask for your consent before setting non-essential cookies, via the banner shown on your first visit.
Cookies we use
- Strictly necessary — required for the site to function (e.g. remembering your cookie consent choice). Always on.
- Analytics cookies — we do not currently use any third-party analytics tools that set cookies.
- Marketing or advertising cookies — we do not currently run paid advertising campaigns and do not set marketing cookies.
- Embedded content — pages with YouTube videos or Google Maps embeds may set cookies from those providers when the embed loads. See those providers' own policies.
You can change your cookie preferences at any time by clearing your browser storage and refreshing the site, or by using your browser's cookie controls.
5. Third-Party Services
We share personal information only with services that help us run our business and only to the extent needed. We do not sell or rent your personal information to third parties.
- Stripe (stripe.com) — our payment processor. When you pay, Stripe collects your card details directly through their secure checkout page. We never see or store your card number, CVV, or full payment details. We only receive a confirmation that the payment was successful, your billing email, the amount, and a transaction reference.
- Supabase (supabase.com) — our authentication, database and file storage provider. Stores your account email, password (securely hashed), profile details (name, phone, optional company info), saved shipping addresses, order history, and any artwork files you upload through your account.
- Resend (resend.com) — our transactional email provider, used to send account verification, password reset, order confirmation and artwork acknowledgement emails.
- Vercel (vercel.com) — our website hosting platform. Vercel serves the site through a global edge network and stores temporary request logs.
- Google services (Maps and YouTube) — embedded on certain pages (Google Maps on the Contact page; YouTube setup videos on some product pages). When these embeds load they may set cookies governed by Google's own privacy policy. We do not currently use Google Analytics or Google Ads.
- Couriers and delivery partners — only the address and contact details needed to deliver your order are shared.
6. Data Retention
We keep personal information only as long as we need it for the purpose it was collected, or to meet our legal obligations:
- Enquiry data (contact form messages, quote requests not converted to orders): up to 2 years from the date of your last contact, then deleted.
- Order and invoice data: 7 years from the order date. This is the minimum retention period required by HMRC for VAT and accounting records and is not negotiable.
- Customer account data (profile, saved addresses): kept while your account is active. If you close your account, profile data is deleted within 30 days. Order records linked to the account remain on file for the 7-year HMRC period above.
- Uploaded artwork files: up to 12 months from the date of upload so we can reprint or reorder quickly. Files tied to inactive accounts are deleted after 12 months.
- Marketing list entries: until you unsubscribe.
- Website access logs: typically 30 days, retained by our hosting provider for security and abuse detection.
7. Your Rights
Under UK GDPR you have the right to:
- Access — ask for a copy of the personal information we hold about you;
- Rectification — ask us to correct information that is wrong;
- Erasure — ask us to delete information ("right to be forgotten") in certain circumstances;
- Restriction — ask us to limit how we use your information;
- Data portability — receive your information in a portable format;
- Object — object to processing based on legitimate interests or for direct marketing;
- Withdraw consent — at any time, where we are processing on the basis of consent.
To exercise any of these rights, contact us at sales@brandingwarehouseuk.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Security
We take appropriate technical and organisational measures to protect personal information from loss, misuse, unauthorised access or disclosure. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
9. International Transfers
Some of our processors (Stripe, Supabase, Vercel, Resend) may store or process data on servers located outside the United Kingdom, including in the European Union and United States. Where data is transferred outside the UK, those providers operate under the safeguards permitted by UK GDPR, including the UK Addendum to the EU Standard Contractual Clauses and, where applicable, adequacy decisions of the UK Government. We rely on the standard data-processing terms each provider publishes; we have not negotiated separate cross-border data transfer agreements beyond those defaults.
10. Children's Privacy
This site is not directed at children under 13 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will remove it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the latest version. Significant changes will be communicated through the site banner.
12. Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us at sales@brandingwarehouseuk.com or write to:
Branding Warehouse
C/o Swift Accounting
Ground Floor, The Custom House
The Strand
Barnstaple
EX31 1EU
United Kingdom