Privacy Policy

Last updated: 24/11/2025

This Privacy Policy explains how Basil Bush Limited (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you visit www.basilbush.co.uk or interact with our services. It also outlines your rights under the UK General Data Protection Regulation (UK GDPR) and related data-protection laws.

By using our website, you agree to the practices described in this policy. If you do not agree, please discontinue use of our site and services.

1. Who We Are (Data Controller)

Basil Bush Limited
Company Number: 04907883
Registered Address:
Unit 6, Riverside Business Park, Lyon Road, London, SW19 2RL
Email: customerservice@basilbush.co.uk

For the purposes of data protection law, Basil Bush Limited is the Data Controller responsible for your personal information.

2. What Personal Data We Collect

We collect the following categories of data:

Information You Provide Directly

Name
Email address
Postal address
Phone number
Company name
Account details (if applicable)
Order and payment information (processed securely by third-party payment processors)
Any information submitted via forms, emails, or customer support requests
Product reviews, comments, or feedback

Information Collected Automatically

When you visit our website, we automatically collect:

IP address
Browser type and version
Device information
Pages visited and time spent
Click paths and navigation behaviour
Referring/exit pages
Cookie data and analytics data

We use Google Analytics to gather aggregated data about how visitors use our site.

Email Marketing & Subscription Data

If you sign up for marketing communications, we may store:

Email address
Preferences and interaction data (opens, clicks)
This information is processed using Mailchimp.

3. How We Collect Personal Data

We collect data in the following ways:

When you place an order on our website
When you create an account
When you contact us by email or through our website
When you sign up for newsletters or marketing emails
When you browse or interact with our website (via cookies and analytics tools)

4. Legal Bases for Processing

Under UK GDPR, we process your data under the following legal grounds:

Contractual Necessity

To process and fulfil orders, deliver products, manage your account, or communicate about transactions.

Legitimate Interests

To:

Improve our website and services
Analyse site usage
Prevent fraud or misuse
Send relevant marketing to existing customers (within legal limits)

Consent

For:

Email marketing to non-customers
Tracking and analytics cookies (where required)
You may withdraw consent at any time.

Legal Obligation

To comply with tax, accounting, and regulatory requirements.

5. How We Use Your Personal Data

We use your information to:

Process and deliver orders
Provide customer support
Manage your account
Contact you about service updates or important information
Send marketing emails (only if consent is given or permitted by law)
Improve the performance and usability of our website
Analyse traffic, behaviour, and trends using Google Analytics
Prevent fraud or misuse of our site
Comply with legal obligations

6. Cookies and Tracking Technologies

Our website uses cookies to enhance functionality and analyse performance.

Types of cookies we use:

Essential cookies (required for website operation)
Analytics cookies (Google Analytics)
Preference cookies

You may control or disable cookies through your browser settings. Some functions may not work fully without cookies.

7. Third-Party Data Processors

We share personal data with trusted third parties that help us operate our business. These processors only use your data in accordance with our instructions.

We use:

Google Analytics (Google LLC)
Used to analyse website traffic and visitor behaviour.
Google may collect pseudonymised usage data.

Mailchimp (Intuit Inc.) Used for marketing emails, newsletters, and subscriber management.

Payment Processors Such as WorldPay or other gateways used at checkout. They handle payment information securely and comply with PCI-DSS standards.

Website Hosting & IT Providers
Used to deliver and maintain our website securely.

We do not sell or rent your personal data to third parties.

8. International Data Transfers

We do not transfer or store personal data outside the United Kingdom.

Where external services potentially use international infrastructure (e.g., Google or Mailchimp), we ensure that:

Only UK-based storage is used where possible, or
Adequate data protection safeguards are in place.

9. Data Retention

We retain your personal information only for as long as necessary for the purposes it was collected, including:

Order records: 6 years for tax and accounting compliance
Customer accounts: Until you request deletion
Marketing data: Until you unsubscribe or request deletion
Analytics data: As per analytics tool retention settings (typically 14–26 months)

After these periods, data is securely deleted or anonymised.

10. Data Security

We take appropriate technical and organisational measures to keep your data secure, including:

Encrypted connections (HTTPS)
Secure servers and firewalls
Access controls and authentication measures
Regular security monitoring
PCI-DSS–compliant payment processing (we never store card details)

11. Your Rights Under UK GDPR

You have the right to:

Access your personal data
Rectify incorrect or incomplete data
Request deletion (“right to be forgotten”)
Restrict processing
Object to certain processing activities
Request data portability
Withdraw consent at any time
Opt out of marketing communications

To exercise these rights, contact:
customerservice@basilbush.co.uk

If you believe your rights have been violated, you may also lodge a complaint with the UK Information Commissioner’s Office (ICO).

12. Marketing Communications

We may send you marketing emails if:

You have given explicit consent, or
You are an existing customer and marketing is related to similar products (as permitted under UK law)

You can unsubscribe at any time using the link in each email or by contacting us.

13. Children’s Privacy

Our website is not intended for individuals under 18. We do not knowingly collect personal data from children.

14. Changes to This Privacy Policy

We may update this policy occasionally. Changes take effect when posted on this page.
We will notify you of any material updates.

15. Contact Us

For questions, concerns, or to exercise your rights:

Email: customerservice@basilbush.co.uk

Post:
Basil Bush Limited
Unit 6, Riverside Business Park
Lyon Road
London
SW19 2RL