Privacy policy

This Privacy Policy describes how Bright&Shiny (“we”, “us” or “our”) collects, uses, stores and shares personal information when you visit www.brightandshinystore.com, place an order, contact us or use our services.

By using our website, you agree to the collection and use of information as described in this Privacy Policy.

Personal information we collect

We collect personal information that is necessary to operate our store, process orders, provide customer support, improve our website and comply with legal obligations.

The information we may collect includes:

  • name, billing address and shipping address;
  • email address and phone number;
  • order details, selected products, product options and customisation notes;
  • payment status and transaction information processed through our payment providers;
  • shipping and delivery information;
  • customer support messages and communication history;
  • body measurements, body type, size information or reference photos if you choose to provide them for made-to-measure or custom-made products;
  • technical information such as IP address, browser type, device information, time zone, cookie data, pages viewed, products viewed and website interaction data.

We do not ask you to provide unnecessary sensitive information. If you provide body measurements, body type information, reference photos or other customisation details, we use this information only to process your order, create the requested product, provide customer support and maintain order records where necessary.

How we collect information

We collect information directly from you when you place an order, create an account, submit measurements, contact us, subscribe to marketing communications or otherwise interact with our website.

We also collect certain technical information automatically through cookies, analytics tools, log files, pixels and similar technologies when you browse our website.

How we use your personal information

We use your personal information to:

  • process and fulfil your order;
  • produce custom-made and made-to-measure products;
  • process payments and prevent fraud;
  • arrange shipping and delivery;
  • send order confirmations, invoices, shipping updates and customer service messages;
  • respond to questions, complaints, returns, defects or warranty requests;
  • improve our website, products and customer experience;
  • send marketing communications where permitted by law or where you have given consent;
  • comply with legal, tax, accounting, customs and regulatory obligations;
  • protect our rights, property, business and customers.

Legal basis for processing

If you are located in the European Economic Area, the United Kingdom or another jurisdiction with similar privacy rules, we process your personal information under one or more of the following legal bases:

  • performance of a contract with you, including processing and fulfilling your order;
  • your consent, where required, such as for certain marketing or optional cookies;
  • compliance with legal obligations, including tax, accounting, customs and consumer law obligations;
  • our legitimate interests, such as fraud prevention, website security, customer support and business improvement, provided that these interests do not override your rights and freedoms.

Sharing personal information

We share personal information only where necessary to operate our business, fulfil orders, provide services or comply with legal obligations.

We may share personal information with:

  • Shopify, which provides our ecommerce platform;
  • payment processors and fraud prevention providers;
  • shipping carriers, postal services, courier services and customs service providers;
  • email, hosting, analytics, marketing and customer support service providers;
  • professional advisers such as accountants, legal advisers and tax consultants;
  • public authorities, customs authorities, courts, regulators or law enforcement where required by law.

We do not sell your personal information in the ordinary meaning of the word. If any privacy law treats certain advertising or analytics sharing as a “sale” or “sharing” of personal information, you may have the right to opt out depending on your location.

Payments

Payments are processed by third-party payment providers. We do not store full credit card numbers on our own systems. Payment information is handled by secure payment providers according to their own security and privacy standards.

Cookies and tracking technologies

We use cookies and similar technologies to operate our store, remember your preferences, keep your cart active, analyse website performance, improve our services and, where applicable, provide marketing or advertising.

Some cookies are necessary for the website and checkout to work correctly. Other cookies, such as analytics or advertising cookies, may depend on your location, browser settings and consent preferences.

You can manage cookies through your browser settings and, where available, through the cookie or privacy settings shown on our website. Blocking cookies may affect the functionality of the website, cart or checkout.

Marketing communications

If you subscribe to our marketing emails or otherwise give permission, we may send you information about products, offers, updates and news from Bright&Shiny.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in our emails or by contacting us at office@brightandshinystore.com.

Retention of personal information

We keep personal information only for as long as necessary for the purposes described in this Privacy Policy, including order fulfilment, customer support, legal compliance, tax and accounting records, fraud prevention and dispute resolution.

Order records may be retained for the period required by applicable tax, accounting, customs and consumer protection laws. Custom measurement information may be retained where necessary to fulfil your order, support repeat orders or handle customer service issues, unless you request deletion and we are legally able to delete it.

International transfers

Because we use Shopify and other international service providers, your personal information may be processed in countries outside your country of residence, including countries that may have different data protection laws.

Where required by law, we rely on appropriate safeguards for international transfers, such as standard contractual clauses, adequacy decisions or other lawful transfer mechanisms.

Your rights

Depending on your location, you may have the right to request access to the personal information we hold about you, correction of inaccurate information, deletion of your information, restriction of processing, objection to processing, data portability, withdrawal of consent and the right to lodge a complaint with a data protection authority.

To exercise your rights, please contact us at office@brightandshinystore.com. We may need to verify your identity before responding to your request.

Please note that we may not be able to delete certain information immediately if we are required to keep it for legal, tax, accounting, customs, fraud prevention or dispute resolution purposes.

Minors

Our website and products are not intended for children. By using our website or placing an order, you confirm that you are at least the age of majority in your country, state or province of residence.

We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us so that we can take appropriate action.

Security

We take reasonable technical and organisational measures to protect personal information. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, technologies or legal obligations. The updated version will be posted on this page.