Privacy Policy
Your data, handled responsibly.
This policy explains how Brand Direct Services Ltd collects, uses, stores and protects personal data in connection with our trade wholesale portal and business operations.
Who we are — the data controller
Brand Direct Services Ltd is the data controller for all personal data collected through this website and our trade operations.
- Company number: 14716501
- VAT number: GB445799636
- Registered in: England & Wales
- Address: Unit 19-20 Orde Wingate Way, Stockton on Tees, TS19 0GA
- Telephone: (+44) 1642 040249
- Email: sales@branddirectservices.co.uk
If you have any questions about how we handle your personal data, please contact us using the details above or in the contact section at the end of this page.
What personal data we collect.
We collect personal data in the following circumstances. We only collect what is necessary for the purpose stated.
Trade Account Applications
Name, business name, email address, telephone number (optional), business type, product interests and any details provided in the message field of your application.
Trade Portal Account
Login credentials (stored securely by Shopify), order history, purchase records, account preferences, delivery addresses and billing information.
Enquiries & Communications
Any information you provide when contacting us by telephone, email or through our website, including your name, contact details and the subject of your enquiry.
Website Usage Data
Technical data automatically collected when you visit our website, including IP address, browser type, pages visited and referring URLs. Used for security and analytics.
How we use your data.
We use your personal data only for the purposes for which it was collected:
- To review, process and respond to trade account applications
- To set up and manage your trade account
- To process and fulfil orders placed through the portal
- To communicate with you about your account, orders and enquiries
- To send relevant trade communications about product ranges, pricing or promotions (where you have consented or where we have a legitimate interest as an existing trade customer)
- To comply with legal and regulatory obligations
- To operate, maintain and improve our website and services
- To detect and prevent fraud or misuse of our portal
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
Why we're allowed to process it.
We rely on the following legal bases under UK GDPR:
Contract Performance
Processing necessary to set up and manage your trade account and to fulfil orders you have placed.
Legitimate Interests
To respond to enquiries, prevent fraud, improve our services, and communicate relevant trade information to existing customers.
Legal Obligation
Where required to comply with UK law — for example, tax, accounting or product safety records.
Consent
Where you have explicitly agreed to receive marketing communications. You may withdraw consent at any time.
Who we share your data with.
Shopify Inc.
Our trade portal is hosted on the Shopify platform. Shopify processes data on our behalf as a data processor. See Shopify's Privacy Policy.
Formspree
Our trade account application form is processed via Formspree (formspree.io). Submissions are securely transmitted to us. See Formspree's Privacy Policy.
Delivery & Logistics Partners
Where necessary to fulfil your orders, we share relevant contact and delivery details with our courier partners.
Professional Advisers & Regulators
We may share data with accountants, solicitors, HMRC or other regulatory bodies where required by law or to protect our legal rights.
How long we keep it.
We retain personal data only for as long as necessary for the purpose it was collected and to comply with our legal obligations.
Trade Account Applications
Up to 2 years from application date if no account is opened, or for the duration of the trading relationship plus 6 years thereafter.
Active Trade Account Data
For the duration of your active account plus 6 years after the account is closed.
Enquiry Records
Up to 2 years from the date of last contact.
Legal & Financial Records
6 years in accordance with UK statutory accounting requirements.
After the applicable retention period, data is securely deleted or anonymised.
Your rights.
Under UK GDPR you have the following rights in relation to your personal data. To exercise any right, contact us and we will respond within one calendar month.
Cookies & how we protect your data.
Cookies
Our website uses cookies and similar technologies, including:
- Essential cookies — required for the site to function, including maintaining your trade portal login session (set by Shopify)
- Analytics cookies — to understand how visitors use the site and improve it
- Preference cookies — to remember your settings and choices
You can control cookies through your browser settings. Note that disabling certain cookies may affect trade portal functionality. For full details of Shopify cookies, see Shopify's Cookie Policy.
Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure — including secure HTTPS connections, access controls and relying on Shopify's security framework. No method of internet transmission is 100% secure.
In the event of a personal data breach likely to risk your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.
International transfers & policy changes.
International transfers
Some of our third-party service providers (including Shopify and Formspree) may process data outside the UK or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses or adequacy decisions — in accordance with UK GDPR requirements.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal requirements. The date at the top of this page indicates when it was last updated.
Where changes are significant, we will take reasonable steps to notify active trade account holders. We encourage you to review this page periodically.
Contact us about your data.
To exercise your rights, ask a question about this policy, or raise a data protection concern, please contact us using any of the methods below.
Brand Direct Services Ltd
Unit 19-20 Orde Wingate Way
Stockton on Tees
TS19 0GA
Information Commissioner's Office
If you are not satisfied with how we handle your data or your rights request, you have the right to complain to the UK supervisory authority:
📞 0303 123 1113
Wycliffe House, Water Lane, Wilmslow, SK9 5AF