1. Introduction
Bristleandpan (“we”, “our” or “us”) respects the privacy of visitors and customers who use www.bristleandpan.com.
This Privacy Policy explains how we collect, use, store, process and disclose personal information when you visit our website, purchase our products, contact our customer service team or otherwise interact with our business.
We handle personal information in accordance with applicable data protection and privacy legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU General Data Protection Regulation (GDPR), and applicable United States privacy laws.
2. Data Controller
Bristleandpan is the data controller responsible for determining how and why personal information is processed in connection with our website and retail operations.
Data Controller: Bristleandpan
Website: www.bristleandpan.com
Email: service@bristleandpan.com
Registered Business Address: [XXX]
Company Registration Number: [XXX]
For privacy-related enquiries, requests or concerns, please contact us using the details provided above.
3. Personal Information We Collect
Depending on how you interact with our website, we may collect the following categories of information:
Personal Identification Information
- Full name.
- Billing address.
- Delivery address.
- Email address.
- Telephone number.
Order and Transaction Information
- Products purchased.
- Order reference numbers.
- Purchase dates and order history.
- Payment status and transaction references.
- Billing and delivery details.
Payment Information
Payments made through our website are processed by Stripe. Payment information may include cardholder details, payment card information and transaction-related information required to complete a purchase.
Bristleandpan does not ordinarily receive or retain complete payment card numbers or card verification codes. Payment details are handled through Stripe’s payment processing services.
Communication Information
- Messages and enquiries submitted through our website.
- Email correspondence with our customer service team.
- Information supplied when requesting assistance with an order.
Website Usage Information
- IP address.
- Browser type and version.
- Device information.
- Website access dates and times.
- Pages visited and interaction information.
- Cookie identifiers and similar online identifiers, where applicable.
We collect information that is relevant to the purposes described in this Policy.
4. How We Collect Personal Information
We may obtain personal information through the following methods:
- Directly from you when placing an order or completing checkout.
- When you submit a contact form or send us an email.
- When you communicate with our customer service team.
- Automatically through website functions, cookies and similar technologies, subject to applicable consent requirements.
- From payment processing and service providers involved in completing your transaction.
5. How We Use Your Information
We process personal information for the following purposes:
- To receive, confirm and manage customer orders.
- To process payments and maintain transaction records.
- To arrange order preparation and delivery.
- To communicate order confirmations and relevant updates.
- To respond to customer enquiries and requests.
- To manage returns, refunds and after-sales matters.
- To maintain business, accounting and tax records.
- To identify unusual transactions and address potential misuse.
- To maintain and improve website functionality.
- To meet applicable legal and regulatory obligations.
- To send promotional communications where permitted by law and where the required consent or other lawful basis exists.
6. Legal Bases for Processing
Where UK GDPR or EU GDPR applies, we process personal information on one or more of the following legal bases:
Contractual Necessity: Processing information required to accept, manage and fulfil your order and provide related customer assistance.
Legal Obligations: Retaining and providing relevant records where required by tax, accounting or other applicable legislation.
Legitimate Interests: Managing our business operations, maintaining transaction records, responding to enquiries, identifying unusual activity and improving our website, provided these interests do not override your applicable rights and interests.
Consent: Processing information for activities that require your consent, including certain promotional communications and non-essential cookies.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing carried out before consent was withdrawn.
7. Payment Processing Through Stripe
Bristleandpan uses Stripe as its payment processing provider to handle online transactions.
When you make a purchase, relevant payment and transaction information is transmitted to Stripe for payment processing.
Depending on the payment method and transaction, this information may include:
- Cardholder name.
- Payment card details.
- Billing information.
- Transaction amount and currency.
- Payment status and transaction reference.
- Relevant device and transaction information.
Stripe processes payment information in accordance with its own privacy documentation and applicable contractual arrangements.
For certain payment processing activities, Stripe acts as a data processor on behalf of Bristleandpan. For other activities, including certain fraud prevention, regulatory and independent business operations, Stripe may act as a separate data controller.
Bristleandpan does not use payment card verification codes for its own record-keeping and does not ordinarily retain complete payment card details.
For further information about Stripe’s privacy practices, please visit:
8. Disclosure of Personal Information
We may disclose relevant personal information to the following categories of recipients where necessary for the purposes described in this Policy:
Payment Processing Providers
Stripe processes relevant payment and transaction information to facilitate customer purchases.
Delivery and Fulfilment Providers
Relevant customer names, addresses and contact details may be provided to delivery and fulfilment providers to arrange and complete orders.
Website and Hosting Providers
Website hosting, maintenance and related service providers may process information required to operate our website.
Professional and Regulatory Organisations
We may disclose relevant information to accountants, legal advisers, tax authorities, regulators or public authorities where required or permitted by applicable law.
We limit disclosures to information relevant to the purpose for which it is shared.
9. International Data Transfers
As Bristleandpan serves customers in the United Kingdom, European Economic Area and United States, personal information may be processed in different countries depending on the location of our service providers.
Where personal information originating in the UK or EEA is transferred to a country that does not provide an applicable level of data protection, we use an appropriate lawful transfer mechanism where required, such as an adequacy decision, the UK International Data Transfer Agreement, the UK Addendum or the EU Standard Contractual Clauses.
Further safeguards may be applied where required by applicable data protection legislation.
10. Data Retention Periods
Bristleandpan retains personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable accounting, tax, regulatory and legal requirements.
Our general retention periods are as follows:
Order and Transaction Records
Order confirmations, invoices, purchase records and related accounting information are generally retained for up to six years after the end of the relevant financial year where required for UK tax and accounting purposes.
Where another applicable legal requirement prescribes a different period, the relevant statutory period will apply.
Customer Contact and Enquiry Records
General customer enquiries and related correspondence are generally retained for up to 24 months after the enquiry has been resolved, unless a longer period is reasonably required for an ongoing matter or legal purpose.
Customer Account Information
Where customer accounts are available, account information is retained while the account remains active. Following account closure, relevant information is generally retained for up to 24 months, subject to applicable record-keeping obligations.
Payment Information
Payment card information is handled by Stripe in accordance with its applicable retention practices. Bristleandpan retains relevant transaction references, payment status and accounting information for the periods required for business and legal purposes.
Marketing Information
Marketing contact information is retained until you withdraw consent or object to the relevant marketing activity, or until the information is no longer required for that purpose.
Website and Cookie Information
Website usage records and cookie-related information are retained according to their individual purposes and applicable cookie lifetimes. Non-essential tracking information is processed subject to the required consent.
When personal information is no longer required, we will arrange for its deletion or anonymisation, subject to applicable legal retention requirements.
11. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support website functions and improve the browsing experience.
Cookies may include:
Strictly Necessary Cookies
These cookies support essential website functions, such as shopping basket operations, checkout processes and remembering relevant website preferences.
Functional Cookies
These cookies may remember selected preferences and improve the operation of certain website features.
Analytics Cookies
Where used, these cookies help us understand website traffic, visitor behaviour and general website performance.
Third-Party Cookies
Certain service providers, including Stripe where applicable, may use cookies or similar technologies in connection with payment processing and related functions.
Where consent is required, non-essential cookies will only be activated after you have provided the relevant consent through our cookie preference mechanism.
You may change or withdraw your cookie preferences through the available cookie settings on our website.
12. Data Protection and Information Handling
Bristleandpan applies appropriate organisational and technical measures to manage personal information and reduce the risk of unauthorised access, disclosure, alteration or loss.
Access to personal information is restricted to individuals and service providers who require the information for legitimate business purposes.
Where a personal data incident occurs, we will assess and handle it in accordance with applicable legal reporting and notification requirements.
13. Your Privacy Rights
Depending on your location and the applicable legislation, you may have the following rights concerning your personal information:
- The right to request access to personal information held about you.
- The right to request correction of inaccurate or incomplete information.
- The right to request deletion of personal information where applicable.
- The right to request restriction of certain processing activities.
- The right to object to processing based on legitimate interests.
- The right to withdraw consent where processing relies on consent.
- The right to request a copy of certain information in a portable format.
- The right to opt out of certain direct marketing activities.
- The right to lodge a complaint with the relevant data protection authority.
For eligible United States residents, additional rights may apply under relevant state privacy laws. These may include rights to know, access, correct and delete personal information, and to opt out of certain forms of personal information sharing or targeted advertising where applicable.
Requests can be submitted by email to:
We may request reasonable information to verify your identity before responding to a privacy request. Requests will be handled within the time limits prescribed by applicable law.
14. Children’s Privacy
Our website is intended for general retail customers and is not directed towards children under the age of 13.
We do not knowingly collect personal information directly from children under 13 without the required parental consent.
If we become aware that such information has been collected in circumstances requiring parental consent, we will take appropriate steps in accordance with applicable law.
15. Third-Party Websites
Our website may contain links to external websites or services operated by other organisations.
These external services maintain their own privacy practices and policies. Bristleandpan does not determine how those independent websites collect or process personal information.
We recommend reviewing the relevant privacy information before providing personal details to an external website.
16. Changes to This Privacy Policy
Bristleandpan may update this Privacy Policy when our business practices, website functions or applicable legal requirements change.
The revised version will be published on this page together with an updated revision date.
We encourage visitors and customers to review this page periodically.
17. Contact Information
For questions, requests or concerns relating to this Privacy Policy or the handling of personal information, please contact us using the details below.
Brand Name: Bristleandpan
Legal Company Name: [XXX]
Registered Business Address: [XXX]
Company Registration Number: [XXX]
Warehouse Address: [XXX]
Email Address: service@bristleandpan.com
Telephone: [XXX]
Website: www.bristleandpan.com
All privacy-related correspondence should be directed to our customer service email address.