Our Commitment to Your Privacy

At ShoppyBrit, your privacy is not simply a legal obligation we fulfil out of necessity. It is a genuine commitment we make to every single person who visits our website, creates an account, or places an order with us. We believe that you have every right to know exactly what information we collect about you, why we collect it, how we use it, and how we protect it.

We are a UK based online store and we are fully committed to operating in accordance with the UK General Data Protection Regulation, commonly referred to as the UK GDPR, and the Data Protection Act 2018. These are the laws that govern how businesses like ours must handle personal data, and we take our responsibilities under them with the utmost seriousness.

This Privacy Policy has been written in plain, straightforward English because we want you to actually read and understand it, not feel overwhelmed by dense legal language. We encourage you to take a few minutes to go through it carefully. If you have any questions at all after reading it, our team is always happy to help.

By using our website at shoppybrit.com, you acknowledge that you have read and understood this Privacy Policy and that you agree to the collection and use of your information as described within it.

Who We Are

ShoppyBrit is the data controller in respect of the personal information we collect through our website. Being the data controller means that we are the organisation responsible for deciding how and why your personal data is processed. We are accountable for ensuring that all processing of your data complies with applicable UK data protection law.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which we handle your personal data, you are welcome to contact us at any time using the details at the bottom of this page. We will always respond to you promptly and honestly.

What Personal Information We Collect

The personal information we collect depends on how you interact with our website. We collect information in three main ways: information you provide to us directly, information collected automatically when you use our website, and information we receive from third parties.

Information You Provide to Us Directly

When you create an account with ShoppyBrit, we collect your full name, email address, a password of your choosing, and any preferences you save within your account settings.

When you place an order, we collect your full name, email address, delivery address, billing address, telephone number, and payment details necessary to complete the transaction.

When you contact our customer support team, whether by email, WhatsApp, or social media, we collect the content of your messages, your name, your contact details, and any order related information you share with us in the course of the conversation.

When you subscribe to our newsletter or marketing communications, we collect your email address and your stated preferences regarding the types of content you wish to receive.

When you leave a product review on our website, we collect the content of your review, your display name, and any rating you provide.

When you enter a competition, prize draw, or promotional offer run by ShoppyBrit, we collect the personal details required to administer that promotion, including your name and contact information.

Information Collected Automatically

When you browse our website, certain technical information is collected automatically through cookies and similar tracking technologies. This includes your IP address, the type of browser and device you are using, the operating system on your device, the pages you visit on our website and the order in which you visit them, the date and time of your visit, how long you spend on each page, the website that referred you to us, and any search terms you used to find our site.

This information is collected in order to help us understand how visitors use ShoppyBrit, to improve the performance and functionality of our website, and to ensure that the content we show you is as relevant as possible.

Information We Receive From Third Parties

On occasion, we may receive information about you from trusted third party sources. This may include information from payment processors who confirm the status of your transactions, information from our delivery partners relating to the status of your orders, and information from social media platforms if you choose to connect your social media account to ShoppyBrit or interact with our social media presence.

We handle all third party information with the same level of care and respect as information you provide to us directly.

How We Use Your Personal Information

We use the personal information we collect about you for a number of clearly defined and legitimate purposes. We will never use your information in ways that are not described in this Privacy Policy without first informing you and, where required by law, obtaining your consent.

Processing and Fulfilling Your Orders

The primary reason we collect your personal details is to process and fulfil the orders you place with us. This includes verifying your payment, arranging the dispatch and delivery of your goods, sending you order confirmation and tracking notifications by email, and handling any returns, exchanges, or refund requests you may have.

Managing Your Account

If you have registered a ShoppyBrit account, we use your information to maintain that account, provide you with secure access to your order history and saved preferences, and ensure your personal details are kept accurate and up to date.

Providing Customer Support

When you contact our customer support team, we use your information to respond to your query, resolve complaints, process refund or return requests, and follow up with you if we need any additional information to resolve your issue. We retain records of customer support communications in order to provide consistent and informed assistance.

Sending Marketing Communications

If you have given us your explicit consent to receive marketing emails, we will use your email address and stated preferences to send you information about new arrivals, special offers, seasonal promotions, exclusive discounts, style guides, and other updates that we believe may be of genuine interest to you.

You can withdraw your consent to receive marketing communications at any time, free of charge and without any negative consequence. Simply click the unsubscribe link at the bottom of any marketing email we send you, or contact us directly at support@shoppybrit.com and we will remove you from our mailing list promptly.

Improving Our Website and Products

We use technical and behavioural data collected through cookies and analytics tools to understand how visitors navigate our website, identify which products and categories are most popular, spot any technical issues or areas of friction in the shopping experience, and make informed decisions about how to improve our platform. This analysis is carried out on aggregated data wherever possible.

Personalising Your Shopping Experience

We may use information about your browsing behaviour and past purchases to personalise the content and product recommendations you see on our website, making your shopping experience more relevant and enjoyable. You can manage your cookie preferences at any time via the cookie settings on our site.

Preventing Fraud and Maintaining Security

We process certain data in order to detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other illegal or harmful activity that could affect our customers or our business. The protection of your security is one of our highest priorities.

Complying With Legal Obligations

In certain circumstances, we are required by UK law to process and retain your personal data. For example, we are required to retain financial and transaction records for a period of seven years for tax and accounting purposes. We will always comply with our legal obligations in relation to data processing.

Communicating Service Updates

From time to time, we may need to contact you with important information about your account, changes to our policies, updates to our terms and conditions, or other service related communications. These communications are not marketing and you will receive them regardless of your marketing preferences, as they are necessary for the performance of our contract with you.

Legal Basis for Processing Your Personal Data

UK GDPR requires that every organisation identifies a lawful basis for each type of personal data processing it carries out. The lawful bases we rely upon at ShoppyBrit are as follows.

Contract Performance: The majority of the personal data we process is necessary for the performance of our contract with you as a customer. This includes processing your order, arranging delivery, managing your account, and handling returns and refunds. Without this data, we would be unable to provide our services to you.

Legitimate Interests: In some cases, we process your data on the basis of our legitimate business interests, provided that those interests do not override your rights and freedoms. This includes activities such as improving our website, preventing fraud, carrying out analysis to understand our customer base, and sending relevant product recommendations to existing customers.

Consent: Where we send you marketing communications or use non essential cookies, we do so only on the basis of your freely given, informed, and explicit consent. You have the right to withdraw your consent at any time, and we will always make this process as simple as possible.

Legal Obligation: We process and retain certain categories of data because we are required to do so under applicable UK law, including tax law, employment law, and consumer protection regulations.

Cookies and Tracking Technologies

Cookies are small text files that are placed on your device when you visit a website. They serve a variety of purposes and are widely used across the internet to make websites work more effectively and to provide useful information to website owners.

ShoppyBrit uses the following categories of cookies:

Strictly Necessary Cookies are essential for the basic operation of our website. They enable core functions such as your shopping basket, secure login, and the checkout process. These cookies cannot be disabled as the website would not function properly without them.

Performance and Analytics Cookies collect anonymous information about how visitors use our website, such as which pages are visited most often and whether users encounter any error messages. We use this data to improve the overall performance and usability of ShoppyBrit. The information collected by these cookies is aggregated and does not identify individual users.

Functionality Cookies allow our website to remember choices you make, such as your preferred currency, language settings, or items saved in your wish list. These cookies improve your experience by making the site feel more personalised and easier to use.

Marketing and Targeting Cookies are used to deliver advertisements and product recommendations that are more relevant to your interests, both on our website and on third party platforms such as social media networks. These cookies track your browsing activity across different websites and are only placed on your device with your consent.

When you first visit shoppybrit.com, you will be shown a cookie consent banner that clearly explains which types of cookies we use and asks for your permission before we place any non essential cookies on your device. You can update your cookie preferences at any time by clicking the cookie settings option available on our website.

For more detailed information about the specific cookies we use, the purposes they serve, and how long they remain on your device, please refer to our Cookie Policy at shoppybrit.com/cookie-policy.

How We Share Your Personal Information

ShoppyBrit does not sell, rent, trade, or otherwise commercially exploit your personal data to any third party. Your information is not a commodity and we will never treat it as one.

However, in order to operate our business and provide you with our services, we do share certain personal data with carefully selected third parties. We only share the minimum information necessary for each specific purpose, and we ensure that all third parties we work with are bound by appropriate contractual obligations and data protection standards.

Delivery and Logistics Partners

We share your name, delivery address, and contact telephone number with our courier and logistics partners so that they can deliver your orders to you. These partners are only permitted to use your information for the purpose of completing your delivery and do not retain it for any other purpose.

Payment Processing Providers

Your payment information is shared with our secure payment gateway providers to process your transactions. These providers are fully certified and compliant with the Payment Card Industry Data Security Standard (PCI DSS) and are subject to strict contractual and regulatory obligations regarding the handling of payment data.

Technology and Platform Service Providers

We work with a range of trusted third party technology providers who assist us in operating our website, managing our email communications, analysing website performance, hosting our platform, and managing our customer relationship processes. These providers act as data processors on our behalf and are contractually prohibited from using your data for any purpose other than providing the specific service we have engaged them for.

Marketing and Advertising Partners

If you have consented to marketing cookies and communications, certain limited data may be shared with our marketing and advertising partners to facilitate targeted advertising and promotional campaigns. You can withdraw your consent and opt out of this at any time by updating your cookie preferences or contacting us directly.

Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or other competent authorities if we are legally required to do so, or where disclosure is necessary to protect the legal rights, property, or safety of ShoppyBrit, our customers, or members of the public. We will always aim to notify you of any such disclosure where it is legally permissible to do so.

Business Transfers

In the event that ShoppyBrit undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring organisation as part of that transaction. In such circumstances, we will take all reasonable steps to ensure that your privacy rights continue to be protected and will notify you of any material change in how your data is handled.

How We Protect Your Personal Data

Protecting the personal information you entrust to us is one of our most important responsibilities. We have implemented a comprehensive range of technical and organisational security measures designed to safeguard your data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Our security measures include the use of SSL (Secure Sockets Layer) encryption across our entire website, ensuring that all data transmitted between your browser and our servers is protected. We use secure, encrypted storage for all sensitive data including passwords, which are stored using industry standard hashing techniques and are never stored in plain text. Access to personal data within our organisation is restricted on a strict need to know basis, and all staff with access to customer data are trained in data protection best practice. We carry out regular security assessments and vulnerability checks on our systems and infrastructure. All payment transactions are processed through PCI DSS compliant payment gateways, and full card details are never stored on our servers.

While we take every reasonable and practicable measure to protect your data, it is important to note that no method of data transmission over the internet or electronic storage system is entirely without risk. We therefore encourage you to take steps to protect your own account, including choosing a strong and unique password, keeping your login credentials confidential, and logging out of your account when using a shared device.

If you believe that your ShoppyBrit account has been compromised or that your personal information has been accessed without your authorisation, please contact us immediately at support@shoppybrit.com so that we can take swift action.

How Long We Retain Your Personal Data

We do not retain your personal data for any longer than is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by UK law.

The following general retention periods apply to the main categories of data we hold:

Order and transaction records are retained for a period of seven years from the date of the transaction in order to comply with UK tax and accounting legislation. Account information is retained for as long as you maintain an active account with ShoppyBrit, plus a period of up to two years following account closure or inactivity, after which it is securely deleted or anonymised. Customer support communications are retained for a period of up to three years to enable us to provide consistent support and to handle any disputes or complaints that may arise. Marketing email lists and consent records are maintained for as long as you remain subscribed and have given valid consent. If you unsubscribe, your data will be removed from our active marketing lists within a reasonable period, though we may retain a suppression record to ensure we do not inadvertently contact you again. Cookie and analytics data is typically retained for a maximum of 26 months.

When your data reaches the end of its applicable retention period, it is securely and permanently deleted or anonymised in accordance with our internal data retention and disposal procedures.

Your Rights Under UK GDPR

As a UK resident, you have a number of important and enforceable rights in relation to the personal data we hold about you. We are committed to upholding these rights and making it easy for you to exercise them.

The Right of Access

You have the right to request a copy of the personal data we hold about you at any time. This is known as a Subject Access Request. We will provide you with a copy of your data free of charge within one calendar month of receiving your request.

The Right to Rectification

If any of the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to ask us to correct it. We will update your data promptly upon receiving your request.

The Right to Erasure

In certain circumstances, you have the right to request that we permanently delete the personal data we hold about you. This is sometimes referred to as the right to be forgotten. We will comply with such requests where there is no overriding legal reason for us to retain the data.

The Right to Restrict Processing

You have the right to ask us to restrict how we process your personal data in certain circumstances, for example if you believe the data is inaccurate or if you have objected to our processing of it and you wish us to pause that processing while we consider your objection.

The Right to Data Portability

You have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, and machine readable format, and to have that data transferred directly to another organisation where this is technically feasible.

The Right to Object

You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, and where you believe that your individual rights and freedoms outweigh those interests. You also have the absolute right to object to the processing of your data for direct marketing purposes at any time.

The Right to Withdraw Consent

Where we process your personal data on the basis of your consent, such as for marketing communications or non essential cookies, you have the right to withdraw that consent at any time. Withdrawing your consent will not affect the lawfulness of any processing that took place before the withdrawal.

The Right Not to Be Subject to Automated Decision Making

You have the right not to be subject to a decision that is made solely by automated means and that produces a legal or similarly significant effect on you, unless you have explicitly consented to this or it is necessary for the performance of a contract.

To exercise any of the above rights, please contact us in writing at support@shoppybrit.com. In order to protect the security of your data, we may need to verify your identity before we are able to fulfil your request. We will respond to all rights requests within one calendar month. In complex cases, or where we receive a high volume of requests simultaneously, we may extend this period by up to two further months and will notify you accordingly.

If you are not satisfied with our response to your request, or if you have concerns about the way in which ShoppyBrit handles your personal data, you have the right to lodge a formal complaint with the Information Commissioner’s Office, which is the UK’s independent supervisory authority for data protection. You can contact the ICO at ico.org.uk or by calling their helpline on 0303 123 1113.

International Data Transfers

ShoppyBrit is a UK based business and we process the majority of your personal data within the United Kingdom. However, some of the third party service providers we use may process data in countries outside of the UK. Where this occurs, we ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.

These safeguards may include the use of Standard Contractual Clauses approved by the UK Information Commissioner’s Office, reliance on an adequacy decision confirming that the destination country provides an adequate level of data protection, or other legally recognised transfer mechanisms.

If you would like further information about the international transfer safeguards we use, please contact us at support@shoppybrit.com.

Third Party Websites and Links

Our website may contain links to third party websites, social media platforms, and external services for your convenience and information. Please be aware that ShoppyBrit has no control over the content, privacy practices, or data handling procedures of any third party website, and we accept no responsibility for them.

We strongly encourage you to review the privacy policy of any third party website you visit before providing any personal information. The fact that we have linked to a website does not imply that we endorse or have any affiliation with that website.

Social Media and External Platforms

ShoppyBrit maintains active profiles on social media platforms including Instagram, Facebook, and TikTok. If you follow, like, comment on, or message us through any of these platforms, please be aware that your interactions with us on social media are also subject to the privacy policies of those platforms themselves. We encourage you to review the relevant platform’s privacy policy to understand how your data is handled.

If you choose to use a social media login to access ShoppyBrit, we may receive basic profile information from that platform in accordance with your privacy settings on that platform.

Children’s Privacy

ShoppyBrit is an online shopping website intended for use by adults aged 18 and over. We do not knowingly collect, process, or store personal data from children under the age of 13. If you are a parent or guardian and you believe that your child has provided us with personal information without your consent, please contact us immediately at support@shoppybrit.com and we will take prompt steps to delete that information from our systems.

Changes to This Privacy Policy

We review and update this Privacy Policy periodically to ensure that it remains accurate, compliant with applicable law, and reflective of our current data practices. We may make changes to this policy from time to time as a result of updates to UK data protection legislation, changes in the way we operate our business, new services or features we introduce, or feedback we receive from customers or regulators.

When we make significant changes to this Privacy Policy, we will update the Last Updated date at the top of this page. Where the changes are particularly material or affect your rights in a meaningful way, we will take additional steps to notify you, such as sending you an email notification or displaying a prominent notice on our website.

We encourage you to revisit this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of ShoppyBrit following any update to this policy constitutes your acceptance of the revised terms.

Contact Us and Data Queries

We genuinely welcome any questions, comments, or concerns you may have about this Privacy Policy or about the way in which ShoppyBrit handles your personal data. Our team is always available to help and will respond to all data related queries promptly, honestly, and with care.

Please do not hesitate to reach out to us using any of the following methods:

Email: support@shoppybrit.com Website: shoppybrit.com/contact-us WhatsApp: Available during UK business hours via the link on our Contact Us page

Our customer support team is available Monday to Friday from 9:00 AM to 6:00 PM and Saturday from 10:00 AM to 4:00 PM (GMT/BST). We aim to respond to all enquiries within 24 to 48 hours on business days.

Thank you for taking the time to read our Privacy Policy. Your trust means everything to us, and we remain absolutely committed to protecting your personal information every time you shop with ShoppyBrit.