This Privacy Policy describes how BRANDISTIFIT LTD (“we”, “us”, or “our”) collects, uses, and protects your personal data when you interact with us, in compliance with the UK GDPR, the EU General Data Protection Regulation (GDPR), and other applicable data protection laws.

Company details:

BRANDISTIFIT LTD, Company number: 15271667. Registered office: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, United Kingdom, BH16 6FA.

1. Data We Collect.

We may collect and process the following types of personal data:

  1. Identity Data (e.g., name, title, date of birth).
  2. Contact Data (e.g., email address, telephone number, billing and shipping address).
  3. Transaction Data (e.g., payments, order history).
  4. Technical Data (e.g., IP address, browser type, operating system, cookies)
  5. Usage Data (e.g., website interactions, preferences, interests).
  6. Marketing & Communications Data (e.g., consent preferences, responses to marketing campaigns).

2. How We Use Your Data.

We process personal data only when there is a lawful basis under GDPR, such as:

  1. To provide products and services to you.
  2. To process payments and manage orders.
  3. To communicate with you (customer support, service updates).
  4. To comply with legal obligations (e.g., tax and accounting).
  5. To improve our services, website, and user experience.
  6. To send marketing communications where you have given consent.

3. Legal Bases for Processing.

We rely on the following legal grounds to process personal data:

  1. Contractual necessity – when processing is required to perform a contract with you.
  2. Legal obligation – when we must comply with laws and regulations.
  3. Legitimate interests – to improve services, detect fraud, and protect our business.
  4. Consent – when you voluntarily agree to receive marketing or optional services.

4. Sharing of Data.

We do not sell your personal data. We may share data with:

  1. Service providers (e.g., payment processors, IT hosting, delivery partners).
  2. Professional advisors (e.g., lawyers, accountants).
  3. Regulatory and legal authorities where required by law.
  4. All third parties are required to protect personal data in compliance with GDPR.

5. International Transfers.

If we transfer your personal data outside the UK/EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

6. Data Retention.

We keep personal data only as long as necessary for the purposes collected, or as required by law.

  1. Customer transaction data: retained for up to 6 years (for tax and legal obligations).
  2. Marketing data: retained until you withdraw consent.

7. Your Rights Under GDPR.

You have the right to:

  1. Access your personal data.
  2. Request correction or deletion.
  3. Restrict or object to processing.
  4. Withdraw consent at any time (for marketing or optional processing).
  5. Data portability (receive a copy of your data in a structured format).
  6. Lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local EU data protection authority.

8. Security.

We take appropriate technical and organizational measures to protect personal data against loss, misuse, or unauthorized access.

9. Cookies and Tracking.

Our website may use cookies and similar technologies to improve functionality, analyze usage, and personalize your experience. You can manage cookie settings through your browser.

10. Contact Us

If you have questions about this Privacy Policy or how your data is handled, please contact us:

Data Protection Officer (if applicable):

BRANDISTIFIT LTD. Address: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, United Kingdom, BH16 6FA. Email: info@onfitz.com.