Brokestreet
Last updated: 24 July 2026

Please read this Privacy Policy carefully to understand how we collect, use, and protect your personal data when you interact with Brokestreet. By using our website or placing an order, you agree to the practices described below.

1. Who We Are

Brokestreet is a trading name of Charlie Drake, a sole trader operating from Spilsby, Lincolnshire, United Kingdom, and acting as the Data Controller for the personal data described in this policy.

Email: brokestreetuk@gmail.com

Throughout this policy, "we", "us", and "our" refer to Brokestreet / Charlie Drake. "You" refers to the customer or website visitor.

As a sole trader, Charlie Drake is personally responsible for how your data is handled, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Definitions

"Personal data" means any information relating to an identified or identifiable individual, as defined under UK GDPR.

"Processing" means anything done with your personal data — collecting, storing, using, sharing, or deleting it.

"Processor" means a third party who processes personal data on our behalf and under our instruction (e.g. Printful, our payment provider).

3. What Data We Collect

We collect the following personal data, depending on how you interact with our website:

• Name — collected when you place an order, sign up to our newsletter, or contact us

• Email address — collected via order confirmation, contact form, or newsletter signup

• Delivery address — collected when you place an order

• Billing address — collected when you place an order, if different from delivery

• Order history — collected when you place an order

• Payment information — processed by our payment provider at checkout; we do not store full card details ourselves (see Clause 6)

• Website usage data (IP address, browser type, pages visited) — collected automatically via cookies and analytics (see Clause 7)

We do not knowingly collect data from children under 13. Our website and Goods are intended for general consumer use, not directed at children.

4. Why We Collect Your Data (Lawful Basis)

• Processing and fulfilling your order — lawful basis: performance of a contract

• Sending order/dispatch/delivery updates — lawful basis: performance of a contract

• Responding to customer service queries — lawful basis: performance of a contract / legitimate interest

• Sending marketing emails/newsletters — lawful basis: consent (you can withdraw this at any time)

• Improving our website via analytics — lawful basis: legitimate interest / consent (for non-essential cookies)

• Preventing fraud — lawful basis: legitimate interest

• Complying with tax and accounting obligations — lawful basis: legal obligation

5. How We Use Printful (Our Production & Fulfillment Partner)

As set out in our Terms & Conditions (Clause 3a), Brokestreet uses Printful as our print-on-demand production and fulfillment partner. In relation to your personal data, this means:

• When you place an order, we share only the information necessary to produce and deliver your item — typically your name, delivery address, and order details (the specific product, size, and design ordered).

• Printful acts as a data processor on our behalf. They only use your information to fulfil your order and are contractually bound to handle it securely; they do not become the controller of your data.

• Printful may process data outside the UK/EEA as part of its global production network. Printful maintains its own safeguards for international data transfers, in line with UK data protection requirements. You can review Printful's own privacy policy at printful.com/policies/privacy for detail on how they handle data as a processor.

• We do not share your data with Printful for any purpose beyond fulfilling your specific order.

6. Payment Processing

We do not store your full payment card details on our own systems. Payments are handled securely by our payment provider [Stripe / PayPal / your platform's checkout, e.g. Shopify Payments — update to match whatever your checkout actually uses], who process your payment information directly in line with their own privacy policy and PCI-DSS security standards.

7. Cookies & Analytics

Our website may use cookies for essential site functionality and, where you consent, for analytics (e.g. Google Analytics) to understand how visitors use our site. Non-essential cookies are only set with your consent, which you can withdraw at any time. Full details are in our separate Cookie Policy.

8. Who We Share Your Data With

We only share your personal data with:

• Printful — for order production and fulfillment (see Clause 5)

• Our payment provider — to process payments securely

• Our website hosting/e-commerce platform — to run the website and store order records

• Analytics providers (e.g. Google Analytics) — only with your consent via cookies

• HMRC or other authorities — where legally required, e.g. for tax purposes

We do not sell your personal data to third parties, and we do not share it with anyone for their own marketing purposes.

9. How Long We Keep Your Data

• Order and transaction records — kept for at least 6 years, as required for UK tax and accounting purposes

• Marketing/newsletter data — kept until you unsubscribe or withdraw consent

• Contact form enquiries — kept for as long as needed to resolve your query, then deleted or anonymised within a reasonable period

10. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you

• Correct inaccurate or incomplete data

• Erase your data ("right to be forgotten"), subject to our legal obligations (e.g. we may need to retain order records for tax purposes)

• Restrict or object to certain processing, including marketing

• Data portability — receive your data in a portable, machine-readable format

• Withdraw consent at any time where we rely on consent (e.g. marketing emails, non-essential cookies)

To exercise any of these rights, contact us at brokestreetuk@gmail.com. We will respond within one month, as required by law.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.

11. Data Security

We take reasonable technical and organisational measures to protect your personal data, including using reputable, secure third-party platforms (payment providers, production partners, website hosts) that maintain their own security standards. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Complaints

If you have concerns about how your data has been handled, please contact us first at brokestreetuk@gmail.com. We aim to respond within 2 business days and resolve issues fairly and promptly, before you approach the ICO.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The version in effect at the time you use our website or place an order will apply. The current version will always be available on our website, with the "last updated" date shown at the top.

14. Governing Law

This policy is governed by the laws of England and Wales.

15. Contact Us

Brokestreet
Charlie Drake
Spilsby, Lincolnshire, United Kingdom
Email: brokestreetuk@gmail.com