Bramble Bush Bay Privacy Policy
Last Updated: 16/05/2026
Bramble Bush Bay ("we," "our," or "us") operates https:// www.bramblebushbay.co.uk (the "Site"). We are committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Data Controller
For the purpose of the GDPR, the Data Controller is:
Company Name/Your Name: Clare Walsh
Contact Email: hello@bramblebushbay.co.uk
2. Personal Data We Collect
We collect and process personal data only when necessary to provide you with our products (downloadable learning materials and physical merchandise) and to improve your experience on our Site.
Identity & Contact Data: Name, email address, shipping address, and billing address (collected during checkout).
Transaction Data: Details about products you purchased from us, downloads accessed, and total order amounts.
Technical & Usage Data: IP address, browser type, operating system, pages visited, and time spent on our Site (collected via cookies and tracking tools).
Note on Payment Information: We do not collect, view, or store your credit card or financial account numbers. All payments are securely processed by our third-party payment processors.
3. How We Use Your Personal Data (Legal Basis)
Under the GDPR, we only process your data if we have a valid legal basis:
Performance of a Contract: To fulfil your orders for physical merchandise, process your downloads, and send you order confirmations.
Legitimate Interests: To analyse website performance, optimize user experience, and protect our Site from fraud.
Consent: Where you have explicitly opted in to receive marketing communications or accepted non-essential cookies. You can withdraw consent at any time.
4. Third-Party Data Processors & Service Providers
We share your data with trusted third-party service providers who assist us in running our business. These parties are contractually obligated to protect your data in line with GDPR requirements:
Website Hosting: Squarespace, which hosts our e-commerce store and website infrastructure.
Analytics: Google Analytics, used to track and report website traffic to help us improve our content.
Payment Processing:
Squarespace Payments / Stripe: Used to securely process payment transactions during our current setup. You can view their privacy policy on https://www.squarespace.com/privacy
Paddle: We are transitioning to use Paddle as our Merchant of Record and payment provider. When you make a purchase, your payment data is collected directly by Paddle. Paddle acts as an independent data controller for your financial information. You can view their privacy practices on https://www.paddle.com/legal/privacy
5. Future Third-Party Data Sharing
We do not sell, rent, or trade your personal data to any third parties for marketing or other commercial purposes.
However, we reserve the right to share your information with external third parties in the future under the following strict conditions:
If we expand our business operations, introduce new tools (e.g., email marketing platforms, CRM software, or third-party fulfilment centres), or undergo a business restructuring.
If we are legally required to do so by applicable laws, regulations, or legal proceedings.
If we update this Privacy Policy to name those specific third parties, providing you with notice and the right to object or withdraw your consent where applicable.
6. International Data Transfers
Because we use services like Squarespace, Google Analytics, and Paddle, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), such as the United States. We ensure that all such transfers are protected by appropriate legal safeguards, such as the European Commission's Standard Contractual Clauses (SCCs).
7. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.
Order Information: Retained as required by law for tax and accounting purposes (typically 6-7 years).
Download History: Retained while your account/access is active to allow you to re-download materials.
Analytics Data: Retained in an anonymized or pseudonymized form for a limited period to analyse store performance trends.
8. Your GDPR Rights
If you are located within the EU/EEA, you have the following rights regarding your data:
Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request that we correct inaccurate data.
Right to Erasure ("Right to be Forgotten"): You can request that we delete your data, subject to legal retention rules.
Right to Restrict or Object to Processing: You can object to our processing of your data based on legitimate interests.
Right to Data Portability: You can request a transfer of your data to another service provider.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at hello@bramblebushbay.co.uk. You also have the right to lodge a complaint with your local Data Protection Authority.
9. Cookies
Our website uses cookies to function properly, remember your shopping cart items, and collect analytics via Google Analytics. You can manage your cookie preferences through our website’s cookie banner or via your browser settings.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or changes to legal obligations. We will notify you of any significant updates by posting the new policy on this page with an updated date.