Privacy Policy

Last Updated: April 27, 2025

At BrandNU, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, place an order, or interact with our services. By using our website or services, you consent to the practices described in this policy.

1. Introduction

Who we are:
BrandNU is an online store specialising in print-on-demand and customised products.

Company Name: BrandNU
Registered Address: [Insert your registered address]
Contact Information: contact-us@brandnu.net

What this policy covers:
This policy applies to all personal data collected through our websites (brandnu.net, brandnu.shop) and any related services. It outlines how we handle your data in compliance with UK GDPR and other applicable data protection laws.

2. What Personal Data We Collect and Why

We collect personal data when you use our website, place an order, create an account, or interact with us in other ways. The types of personal data we collect include:

Personal Information: Name, email address, phone number, and shipping address.
Payment Information: Details necessary for processing payments (e.g., credit/debit card information, handled securely by payment processors).
Order Details: Information about your purchases, including product selections and order history.
Account Information: If you create an account, we store your login credentials and account preferences.
Website Usage Data: Information about how you use our site, such as IP address, browser type, and pages visited (collected via cookies and similar technologies).

Why we collect this data:
We process your personal data for the following purposes:

To fulfill your orders: We need your name, address, and payment details to process and deliver your products.
To manage your account: If you create an account, we use your data to provide you with access to your order history and preferences.
To communicate with you: We may send you order confirmations, shipping updates, and other transactional emails.
To improve our services: We analyse website usage data to enhance user experience and optimise our site.
To comply with legal obligations: We may need to retain certain data for tax, accounting, or legal purposes.

Legal bases for processing your data:
We process your personal data based on the following legal grounds under UK GDPR:

Performance of a contract: For processing orders and managing your account.
Consent: For marketing communications (you can opt out at any time).
Legal obligation: For compliance with tax and accounting laws.
Legitimate interests: For improving our services and analysing website usage (while respecting your privacy).

3. How We Use Your Personal Data

Your personal data is used for the following purposes:

Order Processing: To fulfill your orders and deliver products through our print-on-demand partner, Printful.
Account Management: To allow you to access your account, view order history, and manage preferences.
Customer Support: To respond to inquiries and resolve issues related to your orders.
Marketing: With your consent, we may send you promotional emails about our products and services. You can unsubscribe at any time.
Website Analytics: To understand how users interact with our site and improve its functionality.

4. Data Sharing

We may share your personal data with the following parties:

Printful: Our print-on-demand partner, who processes your order details (e.g., name, address, product selections) to fulfill your orders. Printful acts as a data processor on our behalf. You can review Printful’s privacy policy at www.printful.com/policies/privacy.
Payment Processors: We use secure payment gateways (e.g., Stripe, PayPal) to handle payment information. These processors are GDPR-compliant and do not store your payment details on our servers.
Service Providers: Third-party providers who assist us with website hosting, delivery, and other operational functions. These providers are contractually obligated to protect your data.
Legal Authorities: We may disclose your data if required by law or to protect our legal rights.

5. International Data Transfers

As BrandNU uses Printful for print-on-demand services, your personal data may be transferred to countries outside the UK and EU, including the US, where Printful operates. We ensure that such transfers are protected by appropriate safeguards, such as standard contractual clauses, as required by UK GDPR. For more details on Printful’s data transfer practices, please refer to their Data Processing Terms.

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Access: You can request a copy of the personal data we hold about you.
Rectification: You can ask us to correct inaccurate or incomplete data.
Erasure: You can request the deletion of your data (right to be forgotten), subject to legal or contractual obligations.
Restriction: You can request that we restrict the processing of your data.
Portability: You can request a copy of your data in a structured, commonly used format.
Objection: You can object to the processing of your data for marketing or other legitimate interests.
Withdrawal of Consent: If you have given consent for us to process your data (e.g., for marketing), you can withdraw it at any time.

To exercise any of these rights, please contact us at dataprotection@brandnu.net. We will respond to your request within one month, as required by law.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example:

Order Data: Retained for accounting and tax purposes (typically 7 years).
Account Data: Retained while your account is active and for a reasonable period after account deletion.
Website Usage Data: Retained for analytics purposes but anonymised over time.

We will securely delete or anonymise your data when it is no longer needed.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website. For example:

Essential Cookies: Necessary for the site to function properly (e.g., adding items to your cart).
Performance Cookies: Used to analyse website usage and improve performance.
Functionality Cookies: Remember your preferences (e.g., language settings).
Marketing Cookies: Used for targeted advertising (with your consent).

You can manage your cookie preferences through your browser settings or by using the cookie consent banner on our site. For more details, please see our Cookie Policy.

9. Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, use, or disclosure. This includes:

Secure payment processing through GDPR-compliant gateways.
Encryption of sensitive data.
Regular security audits and updates.

While we strive to protect your data, no method of transmission over the internet is completely secure. You are responsible for keeping your account credentials confidential.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on this page. Your continued use of our website after such changes constitutes your acceptance of the new policy.

11. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us at:

Email: dataprotection@brandnu.net
Postal Address: [Insert your registered address]

Effective Date: April 27, 2025