Privacy Policy

1. Introduction
Universal Fitness Exports Ltd, trading as BRAW ("we," "our," "us"), is committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, and protect your personal information when you visit our website or purchase our products.


2. Information We Collect
We may collect and process the following data:

  • Personal Identification Information: Name, address, email address, phone number.
  • Payment Information: Credit/debit card details or other payment information.
  • Technical Data: IP address, browser type, time zone settings, and operating system.
  • Usage Data: Information about how you use our website, products, and services.
  • Marketing and Communications Data: Preferences in receiving marketing from us and communication preferences.


3. How We Use Your Information
We use your personal data to:

  • Process Orders: To manage and deliver your orders, process payments, and communicate order updates.
  • Improve Our Services: To analyse and enhance our website, products, services, and customer experience.
  • Marketing Communications: To inform you about products, services, promotions, and news that may interest you, provided you have opted in to receive such communications.
  • Customer Support: To respond to your inquiries, requests, or complaints.
  • Legal Obligations: To comply with legal and regulatory requirements.


4. Legal Basis for Processing
We process your personal data based on the following legal grounds:

  • Contractual Necessity: To fulfil our contract with you when you make a purchase.
  • Legitimate Interests: To improve our services and provide you with a better customer experience.
  • Consent: For sending marketing communications, where you have provided explicit consent.
  • Legal Compliance: To adhere to applicable laws and regulations.


5. Sharing Your Information
We may share your personal data with:

  • Service Providers: Third-party vendors that assist in order fulfilment, payment processing, and website operations.
  • Professional Advisors: Including lawyers, bankers, auditors, and insurers.
  • Regulatory Authorities: When required by law or to protect our rights.

We do not sell or rent your personal data to third parties for marketing purposes.

The third parties we share personal data with are: Shopify (store hosting, checkout and order processing), Klaviyo and Mailchimp (email marketing), Meta and Google (advertising and analytics), Loox (product reviews), and Royal Mail and our other carriers (delivery). Meta acts as a joint controller with us for data collected through the Meta Pixel.


6. International Data Transfers
Because we use Shopify and other providers, your data may be processed and stored outside the UK and the European Economic Area, including in Canada and the United States. Where that happens we rely on an appropriate safeguard under Chapter V of the UK GDPR: the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-U.S. Data Privacy Framework where the recipient is certified under it. You can ask us for a copy of the safeguard we rely on by emailing support@brawstore.com.


7. Data Security
We implement appropriate security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Despite these measures, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.


8. Data Retention
We keep your personal data only as long as we need it. In practice: order and transaction records for 7 years, to meet HMRC and Companies Act requirements; customer account and contact details for as long as your account is open and 2 years after your last order; marketing contact details until you unsubscribe and for 2 years after that, so we can honour your unsubscribe; customer service correspondence for 3 years; and website analytics and advertising identifiers for up to 26 months. After those periods we delete or anonymise the data.


9. Your Rights
Under the UK General Data Protection Regulation (UK GDPR), you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data under certain circumstances.
  • Restriction: Request restriction of processing your personal data.
  • Data Portability: Request transfer of your data to you or a third party.
  • Objection: Object to processing your personal data where we rely on legitimate interests.
  • Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your data.

To exercise any of these rights, please contact us at support@brawstore.com.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection. You can reach the ICO at ico.org.uk, on 0303 123 1113, or at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would ask you to raise it with us first so we can try to put it right.


10. Cookies and Tracking Technologies
Our website uses cookies to enhance user experience, analyse website performance, and facilitate online transactions. You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. However, if you disable or refuse cookies, some parts of our website may become inaccessible or not function properly. For more information, please refer to our Cookie Policy.


11. Third-Party Services
We work with third-party providers to support our business operations, such as payment processing, shipping, and analytics. These providers are contractually obligated to protect your personal data and use it only for the services they provide on our behalf.


12. Marketing and Analytics
We may use your personal data to provide tailored marketing communications, promotions, or advertisements that we believe will interest you. These may be delivered via email, social media, or other digital channels. We also use analytics tools, such as Google Analytics, to understand website usage and improve our services.

You can opt out of marketing communications by clicking the "unsubscribe" link in any of our emails or contacting us at support@brawstore.com. Opting out of marketing emails will not affect important transactional updates, such as order confirmations or shipping notifications.


13. Automated Decision-Making and Profiling
We may use automated decision-making processes for fraud prevention or marketing purposes. For example, we may flag suspicious orders for review based on predefined rules. You have the right to request human intervention if you believe an automated decision has unfairly impacted you.


14. Social Media and User-Generated Content
If you tag us or use our branded hashtags on social media, you consent to our sharing of your content on our website or social media platforms. If you wish to have your content removed, please contact us at support@brawstore.com.


15. Children's Privacy
Our website is not intended for use by children under the age of 16, and we do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will delete it promptly.


16. Data Breach Notification
In the unlikely event of a data breach, we will notify affected individuals promptly, as required by law. If a breach poses a high risk to your rights and freedoms, we will provide specific details of the breach and advice on steps you should take to protect yourself.


17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our Privacy Policy.


18. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:

  • Email: support@brawstore.com
  • Address: BRAW, Located within Everyday Athlete Gym, Unit 18B, 100 Borron Street, Port Dundas, Glasgow, G4 9XG