Privacy Policy

Last Updated: January 15, 2025

1. Data Controller

Brylumexa Ltd ("Brylumexa", "we", "us", or "our") operates as the data controller responsible for your personal information collected through this website. For any inquiries regarding data protection, please contact us at [email protected].

2. Scope of Policy

This Privacy Policy outlines how we collect, process, store, and safeguard personal data when you visit our website, submit online consultation forms, or engage our tailoring and clothing repair services within the United Kingdom.

3. Information We Collect

We may collect and process the following categories of information:

Directly Provided Information: Full name, email address, telephone number, and detailed garment descriptions submitted via contact forms.
Automated Usage Data: IP address, browser type, operating system, pages visited, time spent, and referral sources collected via log files and analytics.
Cookies and Consent Tracking: User preferences regarding consent signals recorded via our Consent Mode banner.

4. Purposes and Legal Basis for Processing

Purpose of Processing	Categories of Data	Legal Basis (UK GDPR)
Processing fitting requests & service enquiries	Name, Email, Phone, Message	Performance of a Contract / Pre-contractual steps (Art. 6(1)(b))
Website optimization & traffic analysis	IP address, device data, cookies	Consent (Art. 6(1)(a))
Legal compliance & record keeping	Contact history, consent logs	Legal Obligation (Art. 6(1)(c))

5. Cookies & Google Consent Mode v2

We implement Google Consent Mode v2 to respect user privacy choices. Non-essential analytical and advertising cookies remain strictly disabled (denied) until explicit consent is given via our cookie banner. You can modify or revoke your consent at any time using the "Cookie Settings" link located in the website footer.

6. Third-Party Sharing

We do not sell or rent personal information to third parties. Data may be shared with trusted IT infrastructure providers and analytics partners strictly under data processing agreements complying with UK GDPR standards.

7. International Transfers

Where personal data is transferred outside the UK or European Economic Area (EEA), appropriate safeguards such as Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTAs) are enforced.

8. Retention Period

Enquiry data is retained for up to 24 months from the last point of contact to manage service follow-ups and guarantee obligations, after which it is securely deleted or anonymized.

9. Your Statutory Rights

Under the UK Data Protection Act 2018 and UK GDPR, you hold the following rights regarding your data:

Right of Access, Rectification, and Erasure ("Right to be Forgotten").
Right to Restrict or Object to processing.
Right to Data Portability.
Right to lodge a complaint with the UK supervisory authority: Information Commissioner's Office (ICO) (www.ico.org.uk).

10. Children's Privacy

Our website and tailoring services are directed to individuals aged 16 and over. We do not knowingly collect information from children without parental consent.

11. Contact Us

For questions or rights requests regarding this Privacy Policy, email us at [email protected].