Privacy Policy

Privacy Policy

Effective Date: [Insert Date]

This Privacy Policy explains how brainstorm-edu.com (“the Site,” “we,” “our,” or “us”) collects, uses, and protects your personal information when you visit, use our services, or make a purchase.

We are committed to safeguarding your privacy. We will never sell your personal data.

1. Collecting Personal Information

When you use our Site, we collect certain information to provide and improve our services.

(a) Device Information

  • Examples collected: browser version, IP address, time zone, cookies, pages/products viewed, search terms, and site interaction.

  • Purpose: to ensure the Site works properly, improve performance, and prevent fraud.

  • Source: automatically collected using cookies, log files, pixels, and tags.

  • Disclosure: shared with Shopify (our e-commerce platform).

(b) Order Information

  • Examples collected: name, billing/shipping address, payment information (e.g. credit card details), email address, phone number.

  • Purpose: to process orders, deliver products/services, issue invoices/confirmations, communicate with you, detect fraud, and (if you consent) send offers.

  • Source: provided by you.

  • Disclosure: shared with Shopify, payment processors, and shipping partners.

(c) Customer Support Information

  • Examples collected: contact details, communication history, order details.

  • Purpose: to provide support and resolve issues.

  • Source: provided by you.

  • Disclosure: may be shared with customer service platforms (e.g. email or support ticket systems).

2. Sharing Personal Information

We share information only with trusted providers to operate our business:

  • Shopify: powers our online store (Shopify Privacy Policy)

  • Payment processors: to securely process payments.

  • Shipping providers: to deliver orders.

  • Customer service tools: to support customers.

  • Advertising partners: for marketing (see Behavioural Advertising).

We may also disclose your data if required to comply with UK law, enforce agreements, or protect our rights.

3. Behavioural Advertising

We may use your personal information to provide targeted advertising.

Opt-out options:

4. Use of Personal Information

We use your information to:

  • Provide and improve services.

  • Process and deliver orders.

  • Communicate with you.

  • Detect and prevent fraud.

  • Send updates, offers, and marketing (with your consent).

5. Legal Basis for Processing (UK GDPR)

We process personal data under the following lawful bases:

  • Consent (e.g. email marketing).

  • Performance of a contract (e.g. fulfilling your order).

  • Legal obligation (e.g. tax and accounting).

  • Legitimate interests (e.g. preventing fraud, improving services) – provided these do not override your rights.

6. Data Retention

We keep your personal data only as long as necessary for the purposes described in this policy, unless a longer retention is required by law. You may request deletion at any time.

7. Automated Decision-Making

We do not engage in fully automated decision-making with legal or significant effects.
Shopify may use limited automated tools to prevent fraud (e.g. temporary blocklists).

8. Cookies & PECR Compliance

Cookies are used to improve your experience.

  • Types: functional, analytics, performance, advertising, social media.

  • Duration: session (until browser is closed) or persistent (30 mins to 2 years).

  • Managing cookies: you can block/manage cookies in your browser settings. See www.allaboutcookies.org.

Under PECR, we require consent before placing non-essential cookies (e.g. analytics, advertising). A cookie consent banner is shown when you first visit our Site.

9. Do Not Track

As there is no industry standard for “Do Not Track,” we do not alter our practices in response to browser signals.

10. Your Rights (UK Data Protection Law)

You have the following rights under the UK GDPR:

  • Access your personal data.

  • Request correction of inaccurate data.

  • Request deletion (“right to be forgotten”).

  • Restrict or object to processing.

  • Data portability.

  • Withdraw consent at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk

11. Changes to this Policy

We may update this Privacy Policy to reflect legal or business changes. Updates will be posted here with the new effective date.

12. Contact Us

For questions or to exercise your data rights, please contact us:

📧 Email: tom@brainstormeducationteach.com
📬 Address: [Insert full UK business address here]

If you are not satisfied with our response, you may contact the ICO:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
www.ico.org.uk