Privacy policy
Last updated: 14 November 2026
This policy explains how BrollyPod (“we”, “us”) collects and uses your personal data when you visit our website, buy from us or contact us. We are the data controller for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
In short: when you pre-order, we use your details to take your payment, keep you updated about your order until it ships in January 2027, deliver it and handle any refund. We never sell your data, and we only send marketing if you ask us to.
Our details: BrollyPod. Email: hello@brollypod.co.uk.
1. The data we collect
Data you give us
- Identity and contact details: your name, email address, delivery and billing address and phone number, when you place an order, sign up to emails or contact us.
- Order details: what you pre-ordered, when, the price you paid, your delivery address and the status of your pre-order.
- Messages: anything you send us by email or through our contact form.
- Marketing preferences: whether you’ve signed up to our emails.
Payment data. Pre-orders are paid in full at checkout. Payments, and any refunds, are processed by our payment provider, Stripe. We never see or store your full card number.
Data collected automatically
- Device and usage data: your IP address, browser, device type, pages viewed, how you arrived at our site and what you did while there. Some of this is collected using cookies and similar technologies. See our cookie policy.
We don’t knowingly collect data from children under 13. Our shop is for adults to buy from.
2. How we use your data and our lawful basis
| What we do | Lawful basis |
|---|---|
| Process and deliver your order, send order and shipping emails, handle returns and refunds | Performance of a contract |
| Send you updates about your pre-order: confirmation, any change to the expected ship date, and shipping and tracking emails | Performance of a contract. These are service messages, not marketing, and stop once your order is complete |
| Refund you if you cancel your pre-order or we can’t fulfil it | Performance of a contract and legal obligation |
| Answer your questions and complaints | Performance of a contract, or our legitimate interest in helping customers |
| Keep records for tax and accounting | Legal obligation |
| Prevent fraud and keep our shop secure | Legitimate interests |
| Send marketing emails | Consent. You can unsubscribe at any time using the link in every email |
| Send a reminder if you leave items in your bag at checkout | Legitimate interests (you can opt out at any time) or consent, depending on how you gave us your email |
| Understand how our site is used and improve it (analytics cookies) | Consent |
| Show you relevant ads on other sites and measure them (advertising cookies) | Consent |
3. Who we share your data with
We only share what’s needed, with service providers who act on our instructions (processors) or who are independently responsible for the data:
- Hostinger, which hosts our website and stores order and customer data on our behalf. Hostinger acts as our processor.
- [Email newsletter provider], which sends our marketing emails if you sign up to them.
- Payment providers that process your payment at checkout.
- Our fulfilment partner and delivery companies, who receive your name, address and order details so they can pack and deliver your order.
- Analytics and advertising partners, such as Google and Meta, only if you accept analytics or advertising cookies.
- Professional advisers such as accountants and lawyers, and authorities where the law requires it.
We never sell your personal data.
4. International transfers
Some of our service providers, including our payment provider and our fulfilment partner, may store or process your data outside the UK. Where they do, we make sure your data is protected by safeguards recognised under UK law, such as a UK adequacy decision, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. Email us if you’d like more information.
5. How long we keep it
- Pre-order, order and payment records: while your pre-order is open, then six years from the end of the financial year they relate to, for tax and accounting. This includes cancelled and refunded pre-orders.
- Customer messages: up to two years after our last contact, unless they relate to an order.
- Marketing: until you unsubscribe. We keep a record that you unsubscribed so we don’t email you again.
- Cookies: see our cookie policy for each cookie’s lifespan.
6. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you
- correct data that is wrong or incomplete
- erase your data in certain circumstances
- restrict how we use your data in certain circumstances
- object to our use of your data based on legitimate interests, and to direct marketing at any time
- data portability, to receive your data in a reusable format
- withdraw consent at any time, where we rely on consent
To use any of these rights, email hello@brollypod.co.uk. We’ll respond within one month. There’s usually no charge.
We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.
7. Security
Our website uses encryption (HTTPS) to protect data in transit. Card details are entered into our payment provider’s secure payment form, which is certified to the PCI DSS standard, and are never stored on our website. We limit access to your data to people who need it.
8. Complaints
If you’re unhappy with how we’ve handled your data, please contact us first at hello@brollypod.co.uk so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
9. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If we make significant changes, we’ll tell you by email or on our website.