Last Updated: 10 June 2026

Welcome to My Brush Box UK Limited. We respect your privacy and are committed to protecting your personal data. This Privacy Policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Important Information and Who We Are

My Brush Box UK Limited is the controller and responsible for your personal data (collectively referred to as “we”, “us” or “our” in this Privacy Policy).

If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact us using the details set out at the bottom of this page.

The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. Because we do not offer customer account registration, we only collect personal data when you make a purchase using our Guest Checkout or when you fill out the form on our Contact Page.

We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: Includes first name and last name.
• Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
• Financial Data: Includes payment card details (please note that transactions are processed through secure third-party payment gateways; we do not store your full credit/debit card numbers on our systems).
• Transaction Data: Includes details about payments to and from you and other details of physical products you have purchased from us.

How We Use Your Personal Data

We will only use your personal data when the law allows us to. We use your data for the following specific activities:

• To process and deliver your order via guest checkout (including managing payments, refunds, and DPD delivery or in-store collection)
  • Type of Data: Identity, Contact, Financial, Transaction
  • Lawful Basis for Processing: Fulfilment of a contract with you
• To respond to enquiries submitted by you via our online contact form
  • Type of Data: Identity, Contact
  • Lawful Basis for Processing: Legitimate interests (to answer your query)

Disclosures of Your Personal Data

We do not sell your personal data to any third parties. We may have to share your personal data with the parties set out below strictly for the purposes of fulfilling your order and operating our website:

• Delivery Partners: Specifically, DPD, to arrange the delivery of your physical goods and provide you with tracking updates.
• Payment Processors: Secure third-party gateways used to authorise and complete your financial transactions securely.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Data Security and Retention

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements:

• Order Data: By law, we must keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they purchase from us for UK tax purposes.
• Contact Form Data: Messages sent via our contact form are retained only for as long as necessary to fully resolve your query, after which they are securely deleted unless required for legal reasons.

Cookie Policy (Strictly Necessary Cookies Only)

Our website uses cookies. A cookie is a small file of letters and numbers that we put on your computer if you agree.

We only use “Strictly Necessary” cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to use a shopping basket, securely input your guest checkout details, or make use of e-billing services.

No Tracking or Marketing Cookies: We respect your right to browse privately. We do not use marketing, tracking, or targeting cookies. Your browsing behaviour on our website is not tracked for marketing purposes, nor is it shared with advertising networks.

Because we only use essential cookies required to provide the service you have requested (e.g., keeping items in your shopping cart), we do not require your explicit consent to place these on your device under UK Privacy and Electronic Communications Regulations (PECR).

Your Legal Rights

Under certain circumstances, you have rights under UK data protection laws in relation to your personal data, including the right to request access, correction, erasure, or restriction of your data, or to object to its processing.

If you wish to exercise any of your rights, please contact us using the details below. You will not have to pay a fee to access your personal data.

Contact Details

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

• Email: datacontroller@mybrushbox.co.uk
• Address: Unit 7 Ebor Court, Randall Park Way, Retford, DN22 8FQ
• Telephone: 01777 800477