Your privacy, explained.

1. Who is responsible for your information?

Invogue Limited is the controller of personal information processed through the Brushworks website and online store.

• Registered office: 8 Queens Square, Ascot Business Park, Lyndhurst Road, Ascot, England, United Kingdom

2. Information we collect

Depending on how you interact with us, we may collect your name, contact details, delivery and billing addresses, order and return history, customer-account information, marketing preferences, reviews, survey responses and correspondence.

We may also collect device and browser information, IP address, cookie or similar identifiers, referral information and website activity. Payment-card information is handled by Shopify and the selected payment provider; we do not receive the complete card number.

Information can come directly from you, automatically from your use of the website, or from providers involved in an order or service, such as Shopify, payment providers and delivery carriers.

3. How and why we use it

We process information to perform a contract, including taking payment, fulfilling orders, arranging delivery and managing returns. We also use information to meet legal obligations such as tax, accounting, product-safety and fraud-prevention requirements.

Where our legitimate interests apply, we use information to operate and secure the website, prevent misuse, answer enquiries, improve products and services, measure performance and understand customer needs. We balance those interests against your rights.

We rely on consent where required for email marketing and non-essential cookies or similar tracking. You can unsubscribe from marketing at any time and change available cookie choices through the website’s privacy controls.

4. Shopify and other service providers

Shopify provides the commerce platform that powers this store and processes customer, order, device and payment-related information so the website, checkout and related services can operate. Read the Shopify Consumer Privacy Policy for more detail.

We share only the information needed with providers such as payment processors, delivery carriers, hosting and security services, customer-support and email tools, analytics services, embedded map providers, professional advisers and regulators. We may also disclose information where required by law or in connection with a business reorganisation.

If enhanced Shopify services are enabled, Shopify may use permitted data for its own stated purposes. Available cookie and data-sharing choices are passed to Shopify through its customer privacy controls.

5. Cookies and similar technologies

We and our providers use cookies and similar technologies to operate checkout, keep the store secure and remember essential choices. With permission where required, they may also be used for analytics, personalisation and advertising.

You can use the cookie banner or privacy-preference controls, when shown, to manage available choices. Browser controls can also remove or block cookies, although parts of the store may then work differently.

6. International transfers

Shopify and some other providers may process information outside the United Kingdom. Where data-protection law requires it, recognised safeguards are used, such as adequacy regulations, the UK International Data Transfer Agreement or an approved UK addendum.

7. How long information is kept

Information is kept only for as long as needed for the purposes described, including fulfilling contracts, handling enquiries and meeting tax, accounting, fraud-prevention, product-safety and legal requirements. The period varies according to the information, why it is held and whether a dispute or legal hold is active.

8. Your rights

Subject to applicable law, you may have rights to access, correct or erase information; restrict or object to processing; receive portable data; and withdraw consent. You can also complain to the UK Information Commissioner’s Office.

We may need to verify your identity before acting on a request, and legal exemptions can apply. Shopify also provides privacy controls for information it handles for its own purposes.

9. Security

We use appropriate technical and organisational safeguards designed to protect personal information and require relevant providers to protect it. No internet transmission is completely secure, so use a strong password and protect access to your account.

10. Contact and updates

Use our Contact page or email info@brushworks.com for privacy questions or rights requests.

We may update this notice when services, providers or legal requirements change. The current version and update date will always be published here.