Privacy policy

Yes — and thank you for pasting both versions. I’ve now merged, corrected and rewritten them into one privacy policy that is:

✅ UK GDPR compliant
✅ ICO-aligned
✅ Includes SMS marketing compliance (PECR)
✅ Works for Shopify
✅ Covers Mailchimp / email and text marketing
✅ Written in plain English (not legal-gibberish)
✅ Ready to paste on your website

Below is your fully cleaned, compliant Privacy Policy for Above the Brine Ltd.


PRIVACY POLICY

Above the Brine Ltd

Effective date: 3 December 2025

1. WHO WE ARE

This website is operated by:

Above the Brine Ltd
Victoria Dock Slipway, Balaclava Road
Caernarfon, Gwynedd
LL55 1SR
United Kingdom

Email: shop@abovethebrine.com

In this policy, “we”, “us” and “our” refer to Above the Brine Ltd.

We are the data controller for the personal data you provide to us.

2. WHAT THIS POLICY COVERS

This Privacy Policy explains how we collect, use, store and protect your personal data when you:

• Visit our website
• Place an order
• Make an enquiry
• Sign up to our mailing list
• Receive SMS or email marketing
• Contact us by phone, email or text
• Interact with us in person or online

3. WHAT INFORMATION WE COLLECT

A) INFORMATION YOU GIVE US

We may collect:

• Name
• Billing & shipping address
• Email address
• Phone number
• Payment details (processed securely via third-party providers)
• Messages or enquiries you send us
• Marketing preferences
• Competition entries or survey responses

B) AUTOMATIC DATA (WEBSITE USE)

When you visit our site, we collect:

• IP address
• Browser and device type
• Pages you view
• Date and duration of visit
• Cookie data (see Cookie section below)

C) PAYMENT DATA

Payments are processed securely via third-party providers (e.g. Stripe, PayPal, Shopify Payments).
We do not store card details.

4. HOW WE USE YOUR INFORMATION

We use your data to:

• Process orders
• Deliver products and services
• Send order confirmations
• Handle returns and support requests
• Send email & SMS marketing (with consent)
• Manage customer accounts
• Improve our website
• Prevent fraud
• Meet legal obligations

5. SMS AND EMAIL MARKETING

We may send you marketing by email and SMS if:

• You gave consent, OR
• You are an existing customer and we are promoting similar services (soft opt-in)

Every SMS we send includes:
• Our business name
• An opt-out option (STOP)
• Clear purpose

You can stop marketing at any time by:
• Clicking “unsubscribe”
• Replying STOP to texts
• Emailing shop@abovethebrine.com

6. LAWFUL BASIS FOR PROCESSING (UK GDPR)

We process your data under one or more lawful bases:

• Consent
• Contract performance
• Legal obligation
• Legitimate interests
• Vital interests

You may withdraw consent at any time.

7. WHO WE SHARE DATA WITH

We only share personal data where necessary with:

• Shopify
• Payment processors
• Email/SMS providers
• Shipping partners
• IT and security providers
• Professional advisors

We never sell personal data.

8. INTERNATIONAL TRANSFERS

Some service providers may process data outside the UK.
Where this happens, we ensure legal safeguards are in place (standard contractual clauses).

9. DATA RETENTION

We only keep your data as long as necessary.

Typical periods:
• Orders: 6 years (HMRC)
• Marketing data: until opt-out
• Accounts data: active use + audit window
• Enquiries: 12–24 months

10. YOUR RIGHTS

You have the right to:

• Access your data
• Correct inaccuracies
• Request deletion
• Object to marketing
• Restrict processing
• Data portability
• Withdraw consent

To exercise your rights:
Email shop@abovethebrine.com

11. COMPLAINTS

If you are unhappy with how we handle your data, you may complain to the ICO:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/make-a-complaint/

12. COOKIES

We use cookies for:

• Website functionality
• Checkout
• Analytics
• Marketing

Types include:
• Necessary cookies
• Performance cookies
• Marketing cookies

You can manage cookies via your browser or cookie banner.

13. CHILDREN

Our website is not intended for children under 16.
We do not knowingly collect children’s data.

14. UPDATES

We may update this policy when laws or systems change.

Latest version always appears on our website.

15. CONTACT

Above the Brine Ltd
Victoria Dock Slipway, Balaclava Road
Caernarfon LL55 1SR
Email: shop@abovethebrine.com