Privacy Policy

Last updated: September 2026

1. Information We Collect

At Brightlane, we respect your privacy and are committed to protecting your personal data. We collect information you provide directly to us, such as when you create an account, make a purchase, subscribe to our newsletter, or contact our concierge. This information may include your name, email address, phone number, shipping address, and payment information.

2. How We Use Your Information

We use the information we collect to fulfill your orders, provide customer support, and, if you opt-in, send you our editorial dispatches and exclusive offers. Furthermore, we use data to improve and optimize our Website (for example, by generating analytics about how our customers browse and interact with the Website, and to assess the success of our marketing and advertising campaigns).

3. Data Sharing and Disclosure

We do not sell your personal data to third parties. We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use third-party logistics partners for shipping, and payment gateways for processing transactions securely. We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

4. Data Security

Our checkout is secured by industry-standard 256-bit SSL encryption. Payment details are processed directly by our payment gateway providers (Stripe, PayPal) and are never stored on our servers. We follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

5. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to track activity on our Website and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

6. Your Rights Under UK Law

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of all personal data we hold about you (Subject Access Request). We will respond within one calendar month.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete personal data.
• Right to Erasure: You can request that we delete your personal data where there is no compelling reason for its continued processing.
• Right to Restrict Processing: You can ask us to suspend the processing of your personal data in certain circumstances.
• Right to Data Portability: You can request that we transfer your data to another organisation or directly to you, in a structured, commonly used, machine-readable format.
• Right to Object: You can object to our processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object.
• Right to Withdraw Consent: Where we rely on consent to process your data (e.g. marketing emails), you can withdraw that consent at any time by clicking “Unsubscribe” in any email or contacting our Concierge.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Order data: Retained for 6 years after the date of purchase for accounting and tax compliance (in accordance with HMRC requirements).
• Account data: Retained for as long as your account is active, plus 2 years after the last login.
• Marketing data: Retained until you unsubscribe or withdraw consent.
• Website analytics: Anonymised data is retained for up to 26 months.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom (e.g. by our payment processors or cloud hosting providers). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO, or transfers to countries deemed to have an adequate level of data protection under the UK adequacy regulations.

9. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will take steps to delete such information.

10. Data Protection Officer

For all data protection enquiries, please contact our Data Protection Officer at Sales@BRIGHTLANE.uk.

11. Complaints

If you are not satisfied with our response to any data protection concern, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically to stay informed about how we are protecting your personal data.