Privacy policy

Privacy and Cookies Policy

Bramwell Views — bramwellviews.co.uk

Last updated: 20 August 2026

1. Who is responsible for your data

The data controller is AKYT LTD, trading as Bramwell Views, a company registered in England and Wales under company number 17022802, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

For any question about your personal data, or to exercise any of the rights in section 6, contact us at contact@bramwellviews.co.uk or write to us at the address above.

We are not required to appoint a Data Protection Officer. Data protection matters are handled by the company's director.

This policy explains how we handle personal data under the UK GDPR and the Data Protection Act 2018, and how we use cookies under the Privacy and Electronic Communications Regulations 2003 (PECR).

2. What we collect

When you buy from us: your name, billing and delivery address, email address, telephone number, order details and order history. We do not receive or store your full card number — payment is processed by our payment providers.

When you contact us: your name, email address, telephone number where you give it, and the content of your message.

When you subscribe to marketing: your email address, and your subscription and engagement history.

When you browse the site: your IP address, device and browser type, operating system, the pages you view, the site you arrived from, and information collected through cookies (section 8).

We do not collect special category data, and we do not knowingly collect data from children.

3. Why we use it, and our lawful basis

Purpose	Data used	Lawful basis
Processing and delivering your order, and dealing with returns	Contact, address, order data	Performance of a contract (Art. 6(1)(b))
Answering your enquiries	Contact data, message content	Contract where you are a customer; otherwise legitimate interests in responding to enquiries
Keeping accounting and tax records	Order and payment data	Legal obligation (Art. 6(1)(c))
Preventing and investigating fraud	Order data, IP address	Legitimate interests in protecting the business
Sending marketing emails	Email address	Consent (Art. 6(1)(a)), or the soft opt-in under PECR where you have bought from us
Analytics and advertising measurement	Cookie and usage data	Consent (Art. 6(1)(a))
Improving the site and our product range	Aggregated usage data	Legitimate interests in running and improving the business

Where we rely on legitimate interests, we have assessed that our interest does not override your rights and freedoms. You may object at any time — see section 6.

We do not sell your personal data, and we do not use automated decision-making that produces legal or similarly significant effects.

4. Who we share it with

Shopify Inc. — our ecommerce platform and host, which stores order and account data on our behalf.
Payment providers — Shopify Payments, PayPal, Klarna, Apple Pay and Google Pay. Each acts as its own controller for the payment and has its own privacy policy.
Carriers and logistics partners — your name, address and telephone number, so they can deliver your order.
Email and marketing platforms — where you have subscribed.
Analytics and advertising providers, including Google — where you have consented to the relevant cookies.
Professional advisers, such as accountants, and public authorities where the law requires it.

We require every processor to act only on our instructions and to keep your data secure.

5. Where your data goes

Some of our providers, including Shopify and Google, process data outside the United Kingdom.

Where personal data leaves the UK, we rely on either an adequacy decision made by the UK government for the destination country, or the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards required. You may ask us for details of the mechanism used for a specific transfer.

6. Your rights

Under UK data protection law you have the right to:

Be informed about how we use your data — this policy.
Access the personal data we hold about you.
Rectification of inaccurate or incomplete data.
Erasure of your data in certain circumstances.
Restriction of our processing in certain circumstances.
Data portability — receive data you gave us in a structured, machine-readable format.
Object to processing based on legitimate interests, and to direct marketing at any time and without giving a reason.
Withdraw consent at any time, where we rely on consent. Withdrawing does not affect processing carried out before you withdrew.

To exercise any right, email contact@bramwellviews.co.uk. We respond within one month. There is no charge. We may ask for information to confirm your identity, but only what is proportionate — we will not routinely demand a copy of your passport.

Complaints. If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office (ICO) — Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — 0303 123 1113 — ico.org.uk/make-a-complaint

7. How long we keep it

Data	Retention
Order and transaction records	6 years from the end of the financial year in which the order was placed, to meet HMRC and limitation-period requirements
Customer account data	While the account is active, then 2 years after your last order
Enquiries with no order	12 months
Marketing subscription data	Until you unsubscribe, then a suppression record kept indefinitely so we do not contact you again
Cookie and analytics data	As set out in section 8, and no longer than 26 months

8. Cookies

A cookie is a small file placed on your device when you visit a website. We use four categories.

Strictly necessary — required for the site to work: keeping you signed in, remembering your basket, securing checkout, and remembering your cookie choices. These do not require consent and cannot be switched off.

Functional — remembering preferences such as your region or recently viewed products.

Analytics — understanding how visitors use the site so we can improve it.

Advertising — measuring the performance of our advertising and, where you consent, showing you relevant ads. This includes cookies set by Google for Google Ads conversion measurement.

Your choice. When you first visit, a banner lets you accept all, reject all non-essential cookies, or choose by category. We do not set functional, analytics or advertising cookies before you consent. You can change your choice at any time through the cookie settings link in the site footer, and you can block or delete cookies through your browser settings — though blocking strictly necessary cookies will stop parts of the site working.

Google Consent Mode. Where you decline analytics or advertising cookies, Google's tags on our site operate in a restricted mode that does not store identifiers on your device.

9. Security

We take appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and using established providers who maintain their own security programmes. Card payments are handled by PCI DSS compliant providers; we never see or store your full card details.

No method of transmission or storage over the internet is completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the ICO within 72 hours and, where the risk is high, tell you directly and without undue delay.

10. Marketing

We send marketing emails only where you have opted in, or where you have bought from us and we are offering similar products under the PECR soft opt-in — and in that case we tell you at the point of sale and give you a way to opt out.

Every marketing email contains an unsubscribe link. You can also email contact@bramwellviews.co.uk at any time. We action unsubscribes immediately.

11. Other websites

Our site links to other websites. This policy applies only to bramwellviews.co.uk. We are not responsible for the privacy practices of sites we link to, and we encourage you to read their policies.

12. Changes to this policy

We may update this policy. The date at the top shows when it was last changed. Where a change materially affects how we use your data, we will tell you by email or through a notice on the site.