Privacy Policy — BRINOVELA

1. Who is responsible for your data

The controller of your personal data is BRINOVELA, a sole trader business, 49 Eastry Avenue, Bromley, BR2 7PE, United Kingdom. Email: support@brinovela.shop. Phone: +44 7857 716201. We are a small business and have not appointed a data protection officer; please send any privacy question to the email address above.

2. What we collect

Order details: your name, delivery and billing address, email address, phone number (optional), the items and device models you order, and your order history.
Account details if you create an account: your email address and a password (stored in hashed form).
Payment information: payments are processed by Stripe or PayPal. We receive a confirmation, the payment method type and the last four digits of a card; we never see or store your full card number.
Messages you send us by email, phone or the contact form.
Technical data: your IP address and browser information, used for security and to work out which country — and therefore which currency and delivery prices — to show you. The country is worked out from your IP address by WooCommerce, which may ask an IP lookup service to check it.

3. Why we use it and our legal basis

Purpose	Legal basis (UK GDPR / EU GDPR)
Taking payment, making and delivering your order, returns and refunds	Performance of a contract with you
Answering your messages	Our legitimate interest in helping customers; contract where it concerns an order
Keeping accounting and tax records	Legal obligation
Preventing fraud and keeping the website secure	Our legitimate interests
Showing prices in your currency	Our legitimate interest in showing correct prices and delivery costs

We do not send marketing emails, and we do not sell or rent your data. We do not use your data for automated decisions that have legal effects for you.

4. Who we share it with

Hostinger — hosts this website and its database.
Stripe and PayPal — process payments and check for fraud. They act as independent controllers for some purposes under their own privacy notices.
Postal and courier services — receive your name, address and, where needed for delivery, your phone number or email.
Customs authorities — for deliveries outside the UK, the customs declaration includes your name, address and the contents and value of your parcel.
Professional advisers and authorities where the law requires it.

5. International transfers

We are based in the UK. Some of our providers process data in the European Economic Area or the United States. Where data leaves the UK or EEA, it is protected by an adequacy decision or by standard contractual clauses (and the UK addendum) agreed with the provider.

6. How long we keep it

Order and payment records: 6 years after the end of the tax year of the order, as required for UK tax purposes.
Customer accounts: until you ask us to close your account.
Messages: up to 2 years after the matter is closed.
Server security logs: up to 30 days.

7. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable format. Where we rely on legitimate interests, you can object at any time. To use any of these rights, email support@brinovela.shop; we reply within one month.

You can also complain to a data protection authority: in the UK the Information Commissioner’s Office (ico.org.uk); in the EU the authority of the country where you live, for example Datatilsynet in Denmark or your state data protection authority in Germany. We would appreciate the chance to deal with your concern first.

8. Cookies

We only use cookies that the shop needs to work. See our Cookie Policy.

9. Children

Our shop is not aimed at children under 16 and we do not knowingly collect their data.

10. Changes

We will update this policy if the way we use data changes. The date at the top of this page shows when it was last updated.