Privacy Policy

INTRODUCTION

This Privacy Notice outlines how we gather, use, and protect your personal information when you engage with our store, whether by making a purchase or simply browsing our website.

1. INFORMATION WE COLLECT

When you place an order with us, we collect personal details such as your name, delivery address, and email address as part of the purchasing process. We also receive your device’s IP address automatically when you browse our site, which helps us understand your browser type and operating system. With your permission, we may send you occasional updates, promotional offers, or news about our products and services.

2. CONSENT

How do we obtain your consent?

By providing your personal details to complete an order, confirm payment, organise a delivery, or process a return, you are granting us permission to collect and use this information strictly for that purpose. If we intend to use your information for other purposes—such as marketing—we will either ask you directly or give you the opportunity to refuse.

How can you withdraw your consent?

If you later change your mind, you can withdraw your consent at any time by contacting us at info@brasilinbox.co.uk or by post at:

GrowUp Digi Services Ltd trade as BrasilinBox
[FAO: Privacy Compliance Officer]
82a James Carter Road
Mildenhall, Bury St. Edmunds
England, IP28 7DE

3. DISCLOSURE OF INFORMATION

We may share your information if we are legally obliged to do so or if you breach our Terms of Service.

4. OUR E-COMMERCE PLATFORM: SHOPIFY

Our store operates through Shopify Inc., which supplies us with the digital infrastructure to sell our products. Your data is securely stored through Shopify’s databases and servers, protected by firewalls.

Payment Handling

If you choose to pay using a direct gateway, Shopify processes your card information using encryption in accordance with PCI-DSS (Payment Card Industry Data Security Standard). Your transaction data is retained only as long as necessary to complete your order, after which it is deleted. All direct payment gateways comply with PCI-DSS standards as governed by the PCI Security Standards Council (including Visa, MasterCard, AmEx, and Discover). For more details, please review [Shopify’s Privacy Policy] and [Terms of Service].

5. THIRD-PARTY SERVICES

Third-party providers we work with will access your personal data only to the extent required for them to deliver their services. However, some—particularly payment providers—have their own privacy policies that we recommend you review. Be aware that these providers may operate in jurisdictions different from your own or ours. For instance, if you are located in the UK and your payment is processed by a provider in the US, your data could be subject to local laws, such as the US Patriot Act.

Once you leave our website or are redirected to another site or app, this privacy notice and our site’s terms no longer apply.

Links

Clicking external links on our site may take you to third-party websites. We are not responsible for the privacy practices of these other sites.

6. DATA SECURITY

We take all reasonable measures and follow recognised industry practices to ensure your personal data is not lost, misused, accessed without authorisation, altered, or destroyed. When you provide sensitive data like your card number, it is protected by SSL encryption and stored using AES-256 encryption standards. Although no digital transmission method is entirely foolproof, we meet all PCI-DSS requirements and maintain strict security protocols.

7. COOKIES

We use cookies to enhance your shopping experience. Below are examples of cookies we may use:

_session_id: Tracks your session details (referral source, landing page, etc.).
_shopify_visit: Records the number of visits (expires after 30 minutes).
_shopify_uniq: Counts visits from individual customers (expires at midnight).
cart: Retains cart contents (expires after two weeks).
_secure_session_id: Maintains secure session data.
storefront_digest: Determines if a user has access to a password-protected shop.

You may opt out of cookies at any time through your browser settings.

8. AGE OF CONSENT

By using this site, you confirm that you are of the legal age of majority in your location, or that you are the legal guardian granting permission for any minors in your care to use our services.

9. UPDATES TO THIS POLICY

We may revise this policy occasionally. Any changes will be posted on this page and take effect immediately. If there are significant amendments, we will notify you to ensure you are informed about what data we collect, how it’s used, and in what circumstances it may be disclosed. Should our business be acquired or merged, your data may be transferred to the new owner to continue serving you.

SMS MARKETING

By signing up for our text alerts, you consent to receive messages regarding your orders, promotions, and cart reminders. Our website may also use cookies to track abandoned baskets, helping us determine when to send SMS notifications.

QUESTIONS & CONTACT

To access, update, or delete your personal data, lodge a complaint, or request further details, contact us at:

info@brasilinbox.co.uk
or write to:

GrowUp Digi Services Ltd trade as BrasilinBox
[FAO: Privacy Compliance Officer]
82a James Carter Road
Mildenhall, Bury St. Edmunds
England, IP28 7DE