This Privacy Policy explains how Branding Warehouse ("we", "us", "our") collects, uses and protects information when you visit brandingwarehouseuk.com or interact with us. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Branding Warehouse is the data controller for personal information collected via this site.
Address: 1A Lithos Road, NW3 6DU, London, United Kingdom
Email: sales@brandingwarehouseuk.com
Phone: +44 7365 817 775
Director to confirm Registered company name, company number and ICO registration reference (if applicable) to be added.
2. Information We Collect
Information you provide
When you fill in our contact form, place an order, or email us, we collect: your name, company name, email address, phone number, billing/delivery address, and any message or artwork you send us.
Information collected automatically
When you visit the site we automatically collect log data, including your IP address, browser type and version, the pages you visit, time and date of visit, time spent on pages, referring URL, and basic device information.
When you submit our contact form we also store your IP address alongside the message itself, so we can investigate spam or abuse if it occurs. We do not use this for marketing or share it with third parties.
3. How We Use Your Information
We use the information we collect to:
- respond to enquiries and provide quotations;
- process and deliver orders;
- send order updates and customer service communications;
- improve our website, products and service;
- comply with our legal obligations.
Our lawful bases for processing under UK GDPR are: contract performance (for orders), legitimate interests (for site improvement and customer service), legal obligation (for accounting and compliance), and consent (for marketing communications, where applicable).
4. Cookies & Tracking
Our site uses cookies and similar technologies. Cookies are small files stored on your device that help the site function and let us understand how it is used. We ask for your consent before setting non-essential cookies, via the banner shown on your first visit.
Cookies we use
- Strictly necessary — required for the site to function (e.g. remembering your cookie consent choice). Always on.
- Analytics cookies — we do not currently use any third-party analytics tools that set cookies. Director to update if this changes
- Marketing or advertising cookies — we do not currently run paid advertising campaigns and do not set marketing cookies. Director to update if this changes
- Embedded content — pages with YouTube videos or Google Maps embeds may set cookies from those providers when the embed loads. See those providers' own policies.
You can change your cookie preferences at any time by clearing your browser storage and refreshing the site, or by using your browser's cookie controls.
5. Third-Party Services
We share personal information only with services that help us run our business and only to the extent needed. We do not sell or rent your personal information to third parties.
- Stripe (stripe.com) — our payment processor. When you pay, Stripe collects your card details directly through their secure checkout page. We never see or store your card number, CVV, or full payment details. We only receive a confirmation that the payment was successful, your billing email, the amount, and a transaction reference.
- Supabase (supabase.com) — our authentication and database provider. Stores your account email, password (securely hashed), profile details (name, phone, optional company info), saved shipping addresses and order history.
- Resend (resend.com) — our transactional email provider, used to send account verification, password reset, and order confirmation emails.
- Vercel (vercel.com) — our website hosting platform. Vercel serves the site through a global edge network and stores temporary request logs.
- Google services (Maps and YouTube) — embedded on certain pages (Google Maps on the Contact page; YouTube setup videos on some product pages). When these embeds load they may set cookies governed by Google's own privacy policy. We do not currently use Google Analytics or Google Ads.
- Couriers and delivery partners — only the address and contact details needed to deliver your order are shared.
6. Data Retention
Director to confirm Specific retention periods. As a guideline: enquiry data kept for up to 2 years from last contact; order/invoice data kept for 7 years (HMRC requirement); marketing list entries kept until you unsubscribe.
7. Your Rights
Under UK GDPR you have the right to:
- Access — ask for a copy of the personal information we hold about you;
- Rectification — ask us to correct information that is wrong;
- Erasure — ask us to delete information ("right to be forgotten") in certain circumstances;
- Restriction — ask us to limit how we use your information;
- Data portability — receive your information in a portable format;
- Object — object to processing based on legitimate interests or for direct marketing;
- Withdraw consent — at any time, where we are processing on the basis of consent.
To exercise any of these rights, contact us at sales@brandingwarehouseuk.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Security
We take appropriate technical and organisational measures to protect personal information from loss, misuse, unauthorised access or disclosure. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
9. International Transfers
Some of our processors (Stripe, Supabase, Vercel, Resend) may store or process data on servers located outside the United Kingdom, including in the European Union and United States. Where data is transferred outside the UK, those providers operate under safeguards permitted by UK GDPR — most commonly the UK Addendum to the EU Standard Contractual Clauses, and where applicable, adequacy decisions of the UK Government. Director to confirm if any additional formal cross-border data transfer agreements have been executed with these providers.
10. Children's Privacy
This site is not directed at children under 13 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will remove it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the latest version. Significant changes will be communicated through the site banner.
12. Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us at sales@brandingwarehouseuk.com or write to:
Branding Warehouse
1A Lithos Road
NW3 6DU
London, United Kingdom