Privacy Policy — Bramwell Orchard

1. Who we are

This website, bramwellorchard.co.uk, is run by BRAMWELL ORCHARD LTD, a company registered in England and Wales under company number 17368601, with its registered office at 50 Bowmen Drive, Dudley, Cramlington, United Kingdom, NE32 7AS.

We supply British countrywear wholesale to independent shops, country stores, equestrian and field sports retailers and estate shops. For the personal data described in this policy we are the controller.

For any privacy question or request, contact us at [email protected], by phone on +44 7824 613957, or by post at the address above.

2. Data we collect

We work business to business, so most of the personal data we hold relates to people who work for our trade customers and prospective customers.

Business contact details

Name, job title or role, the shop or company you work for.
Work email address, work and mobile phone numbers.
Records of our correspondence, calls, showroom visits and sample loans.

Trade account applications

Trading name, shop address and type of business.
Companies House registration number or sole trader details, and VAT registration number.
Names of directors, owners or buyers where they are given to us, and trade references if you choose to supply them.

Orders, invoicing and delivery

Data entered at checkout on this website: full name, email, phone number, delivery address, town or city, postcode and any order comment.
Invoicing address, order history, payment status and account terms.
Delivery contact name, phone number and delivery instructions for box and pallet shipments.

We do not collect card details on this website. The order form on this site does not send data to any server; when an order is confirmed with you by email or phone, we record the details above in our order and accounting systems.

Website data

Our hosting provider records standard server logs (IP address, browser type, date and time of the request, pages requested) to keep the site secure and working.

3. Purposes and legal bases

Under UK GDPR we must have a legal basis for each use of personal data.

Purpose	Legal basis
Processing orders, arranging delivery, invoicing and handling returns	Contract, or steps taken at your request before entering into a contract
Assessing and opening trade accounts, checking company and VAT details, setting account terms	Legitimate interests in knowing who we trade with and managing credit risk; contract
Day-to-day business correspondence with shop staff and buyers	Legitimate interests in running our wholesale business
Sending seasonal catalogues, price lists and pre-order reminders to business contacts	Legitimate interests in promoting our products to trade customers. You can opt out at any time.
Marketing emails to sole traders and partnerships where the law requires it	Consent, under the Privacy and Electronic Communications Regulations
Keeping accounting and tax records, VAT returns	Legal obligation
Keeping the website secure and preventing fraud	Legitimate interests

Where we rely on legitimate interests, we have balanced our interests against yours. We contact you only in your business capacity and only about matters relevant to your shop.

4. Who we share data with

We do not sell personal data. We share it only with service providers who help us run the business, under written contracts that require them to protect it:

Couriers and pallet networks, to deliver your orders.
Accounting, invoicing and banking providers.
Email, IT and website hosting providers.
Credit reference and company check services, when opening a trade account with credit terms.
Our accountants and professional advisers.
HMRC and other authorities, where the law requires it.

5. International transfers

We aim to keep data in the UK. Some IT providers may store or access data in the European Economic Area or the United States. Where data leaves the UK, we make sure it is protected by UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU–US Data Privacy Framework.

6. How long we keep data

Invoices, orders and accounting records: 6 years after the end of the financial year they relate to, as required by UK company and tax law.
Trade account records: for as long as the account is active, and 6 years after the last transaction.
Unsuccessful trade account applications: 12 months.
Business contacts for catalogue mailings: until you opt out, or 3 years after our last contact with you.
General enquiries by email or phone: 2 years after the enquiry is closed.
Server logs: up to 90 days.

After these periods we securely delete or anonymise the data.

7. Security

We protect personal data with encrypted connections (HTTPS), access limited to staff who need it, strong passwords with two-factor authentication on business systems, and regular backups. If a data breach is likely to put your rights at risk, we will tell you and the ICO as the law requires.

8. Cookies

This website does not use advertising or analytics cookies and does not store your cart in your browser. Your cart lives only in the open page and disappears when you close or reload it. Our font provider may receive your IP address when fonts load, which is needed to display the site.

9. Your rights

Under UK GDPR you have the right to:

Access: ask for a copy of the personal data we hold about you.
Rectification: ask us to correct inaccurate or incomplete data.
Erasure: ask us to delete your data where we no longer need it or have no legal basis to keep it.
Restriction: ask us to limit how we use your data while a concern is looked into.
Portability: receive data you gave us in a structured, machine-readable format, or have it sent to another organisation.
Objection: object to processing based on legitimate interests, and to direct marketing at any time.
Withdraw consent: where we rely on consent, withdraw it at any time.

To use any of these rights, email [email protected]. We reply within one month. There is no charge in most cases.

10. Withdrawing consent

You can withdraw consent or opt out of catalogue mailings by replying "unsubscribe" to any of our emails, or by writing to [email protected]. Withdrawing consent does not affect processing carried out before you withdrew it, and does not affect order and account emails we need to send.

11. Complaints

If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk, helpline 0303 123 1113.

12. Age restriction

Our services are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.

13. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version. If we make significant changes, we will tell trade customers by email.