Privacy policy
1.Who is responsible for your data
SOLVETA LTD, trading as Brasmora, is the controller of the personal data described in this policy. This policy applies to customers in the United Kingdom under the UK GDPR and the Data Protection Act 2018, and to customers in the European Union under the EU General Data Protection Regulation.
- Seller
- SOLVETA LTD, trading as Brasmora
- Company number
- 17349586
- Registered office
- Dept 6953, 196 High Road, Wood Green, London, N22 8HH
- info@brasmora.com
- Support hours
- Mon–Fri, 09:00–18:00 (GMT)
For any question about your data or to use your rights, email info@brasmora.com.
2.What we collect
- Account details: first and last name, email, phone number, date of birth, street, city, postcode and country, and your password, which we store only as a one-way hash.
- Order details: the items you buy, delivery and billing addresses, contact details, the delivery method, and the payment result and transaction reference sent to us by our payment provider.
- Messages: what you send through the contact form or by email, including any order number, and for the contact form the IP address it was sent from.
- Saved items: products you save to your account.
- Newsletter: your email address, if you sign up.
- Technical data: IP address, browser and device type, and the pages requested, recorded in server logs. Browser storage is described in our Cookie policy.
3.Card payments
We do not store or process full payment card data. All card payments are processed by our PCI DSS compliant payment provider.
You enter your card details on the provider’s hosted payment page, not on our website. Payments are protected by 3-D Secure and Strong Customer Authentication (SCA), so your bank may ask you to confirm a payment, for example in your banking app. We receive only the result of the payment and a transaction reference.
4.Why we use it and our lawful basis
| Purpose | Data | Lawful basis |
|---|---|---|
| Taking, packing and delivering your order | Name, email, phone, delivery and billing address, items ordered | Contract |
| Running your account | Name, email, phone, date of birth, address, password (stored as a hash), order history, saved items | Contract |
| Checking you are 18 or over | Date of birth | Contract and legitimate interests |
| Answering messages and complaints | Name, email, order number, the content of your message, the IP address it was sent from | Contract and legitimate interests |
| Refunds, chargebacks and fraud prevention | Order details, payment result and transaction reference, IP address | Legal obligation and legitimate interests |
| Not selling to restricted countries and territories | Delivery and billing country, address | Legal obligation |
| Accounting and tax records | Order and refund records | Legal obligation |
| Newsletter, only if you sign up | Email address | Consent |
| Keeping the website secure and working | IP address, browser and device type, pages requested, error logs | Legitimate interests |
6.International transfers
Your order is packed and dispatched from Spain, so delivery details are processed in the European Union. The UK and the EU recognise each other’s data protection as adequate. Where a service provider processes data outside the UK or the European Economic Area, we use an adequacy decision or standard contractual clauses (with the UK International Data Transfer Addendum for UK data).
7.How long we keep it
- Order, payment and refund records: 6 years after the order, for accounting and tax law.
- Your account: until you ask us to close it, or after 3 years without a sign-in or order. Order records are then kept as above.
- Messages and complaints: 24 months after the conversation ends.
- Newsletter: until you unsubscribe.
8.Your rights
You have the right to:
- get a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have data deleted where we no longer need it or have no lawful basis to keep it;
- restrict or object to our use of it, including where we rely on legitimate interests;
- receive data you gave us in a portable format;
- withdraw consent at any time, for example by unsubscribing from the newsletter or changing your cookie settings.
Email info@brasmora.com to use any of these rights. We reply within one month. We may ask you to confirm your identity before we act on a request.
You can complain to a supervisory authority: in the United Kingdom, the Information Commissioner’s Office (ico.org.uk); in the European Union, the data protection authority of the country where you live or work. We would appreciate the chance to deal with your concern first.
9.Security
The website is served only over HTTPS. Passwords are stored as one-way hashes. Access to customer data is limited to the people who need it to fulfil orders and answer messages. Card details never reach our systems.
10.Automated decisions
We do not make decisions with legal or similarly significant effects about you by automated means alone. Your card issuer and our payment provider run their own automated fraud checks and may decline a payment. If that happens, contact us and we will look at the order.
11.Age
Our store is for adults. We do not knowingly collect data from anyone under 18. If you believe a person under 18 has created an account, email info@brasmora.com and we will delete it.
12.Changes to this policy
We update this policy when the way we use personal data changes. The date at the top of the page shows the latest version.