Br8 Creations – Privacy Policy

Last updated: 1 October 2026

1. Who we are

Br8 Creations Ltd is the data controller for personal information collected through br8creations.co.uk and when you buy from or work with us. We only use your information as described here and in line with UK data protection law (UK GDPR and the Data Protection Act 2018).

  • Br8 Creations Ltd, registered in England and Wales
  • Company No. 15927495
  • Registered office: 24 Melrose Street, Hull, HU3 6ES
  • ICO registration number: [ICO number]
  • Email for privacy questions: design@br8creations.co.uk

2. What we collect

We collect only what we need to sell, make and deliver your orders and to answer your enquiries.

  • Contact details: name, email address, phone number, and delivery and billing addresses.
  • Order details: what you bought, prices, delivery method and order history.
  • Payment information: payment is handled by our payment provider. We receive confirmation of payment and limited details such as the card type and last four digits. We never see or store your full card number.
  • Account details: if you create an account, your login email and password (stored in encrypted form by our website platform), wishlist and saved addresses.
  • Enquiries and projects: messages, quotations, and any designs, images, sketches or files you send us for custom work.
  • Website data: IP address, browser and device type, pages visited and similar technical information, collected through cookies and our website platform.
  • Marketing choices: whether you have agreed to receive marketing emails.

We collect this information directly from you when you order, create an account, contact us by email, WhatsApp, social media or our contact form, or use our website. We may also receive enquiries passed to us by lead platforms such as Bark.

3. How we use it and why

UK law requires a lawful basis for each use of your information. Ours are set out below.

  • Processing, making and delivering your order: contact, order and payment details. Lawful basis: contract.
  • Quotations and custom or commissioned work: contact details, your enquiry and files you supply. Lawful basis: contract, or steps before a contract.
  • Answering enquiries and customer service: contact details and messages. Lawful basis: legitimate interests.
  • Handling returns, refunds and complaints: contact and order details. Lawful basis: contract and legal obligation.
  • Keeping accounting, tax and VAT records: order and payment details. Lawful basis: legal obligation.
  • Product safety notices or recalls: contact and order details. Lawful basis: legal obligation and legitimate interests.
  • Running, securing and improving our website: website data. Lawful basis: legitimate interests.
  • Non-essential cookies, such as analytics: website data. Lawful basis: consent.
  • Marketing emails about new products: name and email. Lawful basis: consent, or soft opt-in for past customers.

We do not sell your personal information, and we do not make decisions about you using automated processes.

4. Who we share it with

We share your information only with trusted providers who help us run the business, and only what they need.

  • Website and online shop: Webador, which hosts our website, shop, accounts and order records.
  • Payments: [payment provider(s), e.g. Stripe / PayPal], who process your payment securely.
  • Delivery: Royal Mail, who receive your name, delivery address and, where needed, email or phone number for tracking.
  • Email and communication: our email provider and, if you contact us that way, WhatsApp and social media platforms.
  • Professional advisers: our accountant, and HMRC where required for tax and VAT.
  • Authorities: regulators, Trading Standards or police, where we are legally required to share information.

These providers may only use your information to provide their service to us.

International transfers

Some providers store data outside the UK, for example in the European Economic Area or the USA. Where this happens, we rely on UK adequacy regulations or approved safeguards, such as the UK International Data Transfer Agreement, to protect your information.

5. How long we keep it

We keep information only as long as we need it.

  • Orders, invoices and payment records: 6 years from the end of the financial year, as required for tax and VAT.
  • Custom work, quotations and project files: 6 years after the project ends, unless you ask us to delete files sooner.
  • Enquiries that do not lead to an order: 2 years from our last contact.
  • Customer accounts: until you close your account, then as above for order records.
  • Marketing consent: until you unsubscribe.

6. Security

We use secure, reputable providers, password-protected devices and accounts, and limit access to your information to those who need it. No system is completely secure, but we take reasonable steps to protect your information and will tell you and the ICO about any serious breach where the law requires it.

7. Cookies

Our website uses essential cookies to make the shop work, such as remembering your basket. With your consent, we may also use analytics cookies to understand how the site is used. You can change your choices at any time. See our Cookie Policy for details.

8. Marketing

We will only send marketing emails if you have agreed, or if you have bought from us and did not opt out at the time. Every email includes an unsubscribe link, or you can email us to stop at any time.

9. Children

Our website and products are not intended for children. We do not knowingly collect information from anyone under 18. Orders must be placed by an adult.

10. Your rights

You have the right to:

  • Access a copy of the information we hold about you.
  • Correct information that is wrong or incomplete.
  • Delete your information, where we no longer need it or have no legal reason to keep it.
  • Restrict or object to how we use it, including stopping marketing at any time.
  • Data portability: receive information you gave us in a common format, or have it sent to another organisation.
  • Withdraw consent where we rely on it, without affecting anything done before.

To use any of these rights, email design@br8creations.co.uk. There is no charge. We will reply within one month and may ask you to confirm your identity.

11. Complaints

If you are unhappy with how we use your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.