BRUMZ RESELLER LTD (trading as Brumz Reseller) is an e-commerce retailer registered in England and Wales under company number 17424019. We operate this website and are responsible for the personal data you provide to us. Our email for data-related enquiries is andrewbarnes@brumzreseller.com.

• Identity & Contact Data: name, email address, phone number, billing and delivery addresses.
• Transaction Data: details of products purchased, order values, and payment references (we do not store full card details).
• Technical Data: IP address, browser type, device information.

• Contract: to process and fulfil your orders.
• Legal obligation: fraud prevention, accounting, and tax compliance under UK law.
• Legitimate interests: improving our website and customer service.
• Consent: sending you marketing emails (you may withdraw consent at any time).

• Processing and despatching your orders.
• Sending order confirmations and shipping notifications.
• Handling customer service queries.
• Improving website functionality and preventing fraud.

We do not sell or rent your personal data. We share it only with trusted third-party service providers (e.g. payment processors such as Stripe, courier companies) who are contractually obligated to keep your data secure and use it only for the purposes we specify.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Order data is typically retained for 7 years in line with HMRC requirements.

• Right of access: request a copy of your personal data.
• Right to rectification: request correction of inaccurate data.
• Right to erasure: request deletion of your data where there is no lawful reason to retain it.
• Right to object: object to processing for direct marketing purposes.
• Right to data portability: receive your data in a structured, machine-readable format.
• To exercise any of these rights, email us at andrewbarnes@brumzreseller.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We use industry-standard encryption (SSL/TLS) to protect data in transit. Payment information is handled by PCI-DSS compliant payment processors and is never stored on our servers.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email.