Privacy policy
This policy explains what we collect when you shop with BRAGLUX, why we collect it, who we share it with, and how you can control or delete it.
What we collect
-
Order information: name, email, shipping and billing address, phone number and order contents.
-
Payment information: handled entirely by our PCI-DSS Level 1 payment provider. We receive only a token and the last four digits of your card.
-
Usage information: pages viewed, device type, referring site and approximate location derived from your IP address.
-
Marketing preferences: whether you have opted in to email, and how you interact with those emails.
How we use it
-
To process, pack, ship and support your order.
-
To send transactional messages: confirmations, dispatch notices and delivery updates.
-
To send marketing email and abandoned-cart reminders, where you have opted in. Every message includes a one-click unsubscribe link.
-
To measure and improve the store — which products people look for, where checkout causes friction, which pages load slowly.
Who we share it with
We share only what is necessary, and never sell your personal data. Our processors include our payment provider, our fulfilment and shipping partners, our email marketing platform, and our analytics provider. Each is bound by a data processing agreement.
Cookies and tracking
We use essential cookies to keep your cart and session working, and optional analytics and advertising cookies to measure campaigns. You can accept or reject optional cookies from the banner on your first visit and change your choice at any time.
How long we keep it
Order records are retained for seven years to meet tax and accounting obligations. Marketing data is deleted when you unsubscribe or after 24 months of inactivity, whichever comes first.
Your rights
-
Request a copy of the personal data we hold about you.
-
Ask us to correct anything inaccurate.
-
Ask us to delete your data, subject to legal retention requirements.
-
Withdraw marketing consent at any time.
-
Object to processing or request that it be restricted.
Security
The store runs entirely over HTTPS with 256-bit encryption. Access to customer data is limited to team members who need it, protected by two-factor authentication, and logged.
Children
BRAGLUX is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has provided us information, contact us and we will delete it.
Contact
For any privacy request, email privacy@braglux.com. We respond within 30 days, and sooner where the law requires it.