Last updated: July 2026
1. Who We Are
Bromley Brush Company (Kent) Ltd (trading as Bromley Brush) is a professional janitorial supplies and commercial cleaning equipment specialist based in Bromley, Kent. We operate the website bromleybrush.co.uk (the “Site”).
Data Controller: Bromley Brush Company (Kent) Ltd (trading as Bromley Brush)
Registered address: 1 Pembroke Road, Bromley, Kent, BR1 2TJ
Email: enquiries@bromleybrush.co.uk
Phone: 020 8464 1753
Company Registration: 00687618 (registered in England and Wales)
ICO Registration: Z633130X
2. What Data We Collect
We may collect and process the following personal data:
- Identity data – first name, last name, company name
- Contact data – billing address, delivery address, email address, telephone number
- Transaction data – details of products you have purchased from us
- Financial data – payment card details (processed securely by our payment provider, we do not store card details)
- Technical data – IP address, browser type and version, time zone, operating system
- Usage data – information about how you use our website
- Marketing and communications data – your preferences for receiving marketing from us
3. How We Collect Your Data
We collect data through:
- Direct interactions – when you place an order, create an account, contact us, or subscribe to communications
- Automated technologies – cookies and similar tracking technologies as you interact with our Site (see Section 9)
- Third parties – payment processors and analytics providers
4. How We Use Your Data
We use your personal data for the following purposes:
- To process and fulfil your orders, including delivery and returns
- To manage your account and relationship with us
- To send order confirmations, invoices, and delivery notifications
- To respond to enquiries and provide customer support
- To improve our website and product offering
- To comply with legal obligations
- To send marketing communications where you have consented or we have a legitimate interest to do so
5. Legal Basis for Processing
We rely on the following legal bases under UK GDPR:
- Contract performance – processing necessary to fulfil your order
- Legal obligation – processing required to comply with UK law, for example VAT records
- Legitimate interests – improving our services, fraud prevention, and direct marketing to existing customers
- Consent – where you have opted in to marketing communications or non-essential cookies
6. Data Sharing and Third Parties
We may share your personal data with:
- Payment processors – Stripe or PayPal, to process payments securely. These providers have their own privacy policies.
- Delivery and logistics providers – to fulfil your order
- IT and hosting providers – who support the operation of our website
- Analytics providers – such as Google Analytics, to help us understand how our Site is used (anonymised data)
- Legal and regulatory authorities – where required by law
We do not sell your personal data to third parties.
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including:
- Order and transaction records – 7 years (HMRC requirement)
- Account data – for the duration of your account plus 2 years after last activity
- Marketing consent – until you withdraw consent or unsubscribe
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access – to request a copy of the personal data we hold about you
- Right to rectification – to request correction of inaccurate or incomplete data
- Right to erasure – to request deletion of your data where there is no overriding legal reason to retain it
- Right to restriction – to request that we limit how we use your data
- Right to data portability – to receive your data in a structured, machine-readable format
- Right to object – to object to processing based on legitimate interests, including direct marketing
- Rights related to automated decision-making – we do not make solely automated decisions that have a significant effect on you
To exercise any of these rights, please contact us at enquiries@bromleybrush.co.uk. We will respond within 30 days. You will not be charged for making a request.
9. Cookies
Our Site uses cookies – small text files stored on your device. We use:
- Essential cookies – necessary for the Site to function, for example shopping cart and session management
- Analytical cookies – to understand how visitors use our Site, for example Google Analytics
- Preference cookies – to remember your settings and choices
On your first visit you will be asked to consent to non-essential cookies via our cookie banner. You can withdraw consent at any time by clearing your browser cookies. Most browsers also allow you to refuse cookies through their settings.
10. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment transactions are encrypted via SSL/TLS. We do not store payment card details.
11. International Transfers
Some of our third-party providers (such as Google Analytics) may transfer data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.
13. How to Complain
If you are unhappy with how we handle your personal data, please contact us first at enquiries@bromleybrush.co.uk. If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO):
ICO
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
ico.org.uk/make-a-complaint
Tel: 0303 123 1113