Privacy Policy
We take your privacy seriously. Here's exactly what we collect and why.
Last updated: 19 June 2026
Privacy Policy — Brandhoo
1. Data Controller
Brandhoo Ltd ("Brandhoo", "we", "us") is the data controller for personal data collected through the Brandhoo platform at brandhoo.co.uk.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Platform. It applies to all users — customers, creators, sellers, and visitors.
2. Data We Collect
2.1 Data You Provide Directly
- •Account registration: name, email address, password (hashed), role, date of birth.
- •Profile information: username, bio, profile photo, social media links, location.
- •Seller/Creator verification: government ID, bank account details, VAT number.
- •Product listings: product name, description, images, pricing, inventory.
- •Communications: messages, support tickets, form submissions.
- •Payment information: billing address (card details are handled by Stripe and not stored by us).
2.2 Data We Collect Automatically
- •Usage data: pages visited, videos watched, products viewed, search queries, clicks.
- •Device data: IP address, browser type, operating system, device identifiers.
- •Log data: access times, referring URLs, error logs.
- •Location data: approximate location derived from IP address.
- •Cookies and similar tracking technologies (see Section 6).
2.3 Data From Third Parties
- •Social login providers (if you sign in with Google, Apple, etc.): name, email, profile photo.
- •Payment processors (Stripe): transaction status, fraud signals.
- •Analytics providers (Google Analytics 4): aggregated usage statistics.
3. How We Use Your Data
- •To create and manage your account and authenticate your identity.
- •To process orders, payments, and facilitate transactions between buyers and sellers.
- •To calculate and pay creator commissions and affiliate earnings.
- •To personalise your feed, recommendations, and search results.
- •To send transactional emails: order confirmations, shipping updates, password resets.
- •To send marketing communications where you have opted in (you can opt out at any time).
- •To detect, investigate, and prevent fraud, abuse, and security incidents.
- •To moderate content and enforce our Community Guidelines and Terms of Service.
- •To improve the Platform through analytics, A/B testing, and user research.
- •To comply with legal obligations, including tax reporting and law enforcement requests.
4. Legal Basis for Processing (GDPR)
For users in the UK and European Economic Area, we process your personal data on the following legal bases:
7. Data Retention
We retain your personal data for as long as necessary to provide the Platform and comply with legal obligations:
- •Account data: retained for the duration of your account plus 2 years after closure.
- •Order and transaction data: 7 years (UK tax and accounting requirements).
- •Content (videos, posts): deleted within 30 days of account closure unless required by law.
- •Analytics data: aggregated and anonymised after 26 months (Google Analytics default).
- •Support communications: 3 years from last contact.
You may request deletion of your data at any time (see Section 8). Some data may be retained longer where required by law or for legitimate business purposes such as fraud prevention.
8. Your Rights
You also have the right to lodge a complaint with theInformation Commissioner's Office (ICO) if you believe we have not handled your data lawfully.
9. International Data Transfers
Brandhoo is based in the United Kingdom. Some of our service providers are located outside the UK and EEA. Where we transfer data internationally, we ensure appropriate safeguards are in place, including:
- •UK adequacy regulations for transfers to countries deemed adequate by the UK government.
- •Standard Contractual Clauses (SCCs) approved by the UK ICO.
- •Binding Corporate Rules where applicable.
10. Children's Privacy
The Platform is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at[email protected] and we will delete the data promptly.
11. Security
We implement industry-standard technical and organisational measures to protect your personal data, including:
- •TLS encryption for all data in transit.
- •Bcrypt password hashing — we never store plaintext passwords.
- •Role-based access controls limiting staff access to personal data.
- •Regular security audits and penetration testing.
- •Automatic session expiry and suspicious login detection.
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and the ICO within 72 hours as required by law.
12. Third-Party Links
The Platform may contain links to third-party websites, including brand pages, social media platforms, and external retailers. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the Platform. The "Last updated" date at the top of this page reflects the most recent revision.
Your continued use of the Platform after the effective date of the revised policy constitutes your acceptance of the changes.
14. Contact Us & DPO
For any privacy-related questions, data subject requests, or concerns, please contact our Data Protection Officer:
Data Protection Officer — Brandhoo Ltd
Email: [email protected]
General enquiries: [email protected]
Website: brandhoo.co.uk
You may also contact the UK Information Commissioner's Office directly:ico.org.uk