Privacy policy

Effective date: 10 May 2026

This Privacy Policy explains how Brandskyl (“we,” “us,” “our”) collects, uses, and protects your personal information when you visit brandskyl.com or buy from us. It is written in line with the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Who we are (data controller)

Brandskyl is a sole trader operated by JEMMINA ANGUS in the United Kingdom. For the purposes of UK data protection law, JEMMINA ANGUS trading as Brandskyl is the data controller for personal data collected through brandskyl.com.

You can contact the data controller at:

Email: info@brandskyl.com
Phone: +44 7702 585368
Post: Brandskyl, 60 Lovell Road, UB1 3DL, United Kingdom

What information we collect

Information you give us

  • Name, billing and delivery address, email, phone number, and payment details when you place an order.
  • Email address when you subscribe to our newsletter.
  • Any information you choose to share when you contact our customer service.

Information collected automatically

  • Device and browser information, IP address, pages viewed, and links clicked.
  • Cookies and similar technologies (see our separate Cookie Policy).
  • Approximate location based on IP address, used for delivery estimates and fraud prevention.

Lawful basis and how we use your information

Under UK GDPR we must have a lawful basis for processing your personal data. The basis depends on what we’re using the data for:

  • To fulfil your order (process payment, ship goods, contact you about your order) — lawful basis: contract.
  • To prevent fraud, ensure security, and meet our legal obligations (e.g., tax records, accounting, anti-money-laundering checks) — lawful basis: legal obligation or legitimate interest.
  • To send marketing emails about new arrivals and offers — lawful basis: consent (you can withdraw at any time using the unsubscribe link in any email or by contacting us).
  • To improve our store, products, and customer experience — lawful basis: legitimate interest.

Who we share your information with

We do not sell your personal data. We share it only with service providers (acting as “processors” on our behalf) who help us run the store, and only what they need to do their job:

  • Shopify — our e-commerce platform, which hosts the store and processes payments.
  • Payment processors (Shopify Payments, Klarna, etc.) — to charge your card or wallet.
  • Shipping carriers (Royal Mail, Evri, DPD, or comparable couriers) — to deliver your package.
  • Email service providers (e.g., Klaviyo, Shopify Email) — to send order updates and any newsletters you subscribed to.
  • Analytics providers (e.g., Google Analytics, Meta) — to understand site usage in aggregate.
  • Law enforcement, regulators, or HMRC — only when required by valid legal process.

International transfers

Some of our service providers (notably Shopify and Google) are based outside the UK and EEA. When we transfer your data to these providers, we rely on UK Government adequacy decisions, the UK International Data Transfer Agreement, or Standard Contractual Clauses with additional safeguards, to ensure your data receives an essentially equivalent level of protection.

Your rights under UK GDPR

You have the following rights over your personal data:

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — ask us to correct inaccurate or incomplete information.
  • Right to erasure (“right to be forgotten”) — ask us to delete your data, subject to legal retention obligations.
  • Right to restrict processing — ask us to limit how we use your data.
  • Right to data portability — receive your data in a structured, machine-readable format.
  • Right to object — object to processing based on our legitimate interests, including direct marketing.
  • Right to withdraw consent — where we rely on consent, you can withdraw it at any time.
  • Rights relating to automated decision-making — we do not currently make decisions about you based solely on automated processing.

To exercise any of these rights, email info@brandskyl.com. We will respond within one calendar month.

Right to complain to the ICO

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK’s data-protection regulator, the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk

We’d appreciate the chance to address your concerns first — please contact us before going to the ICO if you can.

Data retention

We keep order records for up to 7 years to comply with UK tax and accounting law (HMRC requirements). Marketing data is kept only as long as you remain subscribed and is deleted promptly when you unsubscribe. Customer service emails are retained for up to 3 years.

Security

We use industry-standard security measures, including SSL/TLS encryption on every page and PCI-DSS compliant payment processing through Shopify Payments. We never see or store your full card number on our servers. No system is 100% secure, but we work hard to protect your data.

Children

brandskyl.com is intended for adults (18+). We do not knowingly collect personal data from anyone under 13. If you believe a child has submitted information to us, contact us and we will delete it.

Cookies

We use cookies and similar technologies on this site. Full details are in our separate Cookie Policy, including the categories of cookies, the providers we use, and how to control them.

Changes to this policy

We may update this Privacy Policy from time to time. The “Effective date” above tells you when it was last revised. Material changes will be announced on the homepage or by email if we have your address.