PRIVACY POLICY

1. WHO WE ARE

This Privacy Policy explains how Simply Brands Direct Limited ("we", "us", "our") collects, uses, stores, and protects your personal information when you visit our website, purchase from us via our marketplaces (Amazon, eBay, OnBuy, TikTok Shop, BigCommerce, Shopify), or otherwise interact with us.

Company: Simply Brands Direct Limited
Trading as: simplybrandsdirect.com
Registered address: Sambhav House, Unit 3B, Greenhill Way, Harrow, HA1 1AF, United Kingdom
Company number: 05555825
Data controller contact: privacy@simplybrandsdirect.com

For the purposes of UK GDPR and the Data Protection Act 2018, Simply Brands Direct Limited is the data controller of your personal information.

2. INFORMATION WE COLLECT

We collect and process the following categories of personal information:

(a) Information you provide directly:
- Name, billing and delivery addresses, email address, telephone number
- Payment card details (processed by our payment providers — we do not store full card numbers)
- Account login credentials, order history, communication preferences
- Correspondence with us (emails, returns requests, customer service messages)

(b) Information from marketplaces:
When you buy from us via Amazon, eBay, OnBuy, TikTok Shop, or other marketplaces, those platforms share with us the buyer information needed to fulfil your order: your name, shipping address, marketplace username, contact details, and order details.

(c) Information collected automatically:
- IP address, browser type, device information
- Pages visited, items viewed, time spent on site
- Cookies and similar technologies (see section 8)

3. HOW WE USE YOUR INFORMATION (LAWFUL BASIS)

We process your personal information on the following legal bases under UK GDPR:

(a) Performance of a contract — to process and deliver your orders, manage returns and refunds, provide customer service, and meet our obligations to you as a seller.

(b) Legal obligation — to comply with tax, accounting, consumer protection, and regulatory requirements (including marketplace seller obligations to Amazon, eBay, etc.).

(c) Legitimate interests — to improve our products and services, detect and prevent fraud, analyse sales trends, manage our business, and (where permitted) inform you of similar products you may be interested in.

(d) Consent — for marketing communications by email or SMS (you may withdraw consent at any time), and for non-essential cookies.

4. SHARING YOUR INFORMATION

We share personal information only with the following categories of recipients, and only as necessary:

(a) Marketplace operators (Amazon, eBay, OnBuy, TikTok, etc.) — to confirm shipments, respond to claims, and fulfil platform requirements.

(b) Multi-channel order management — we use Linnworks (Linn Systems Ltd, UK) to centralise order processing across our sales channels.

(c) Couriers and delivery services — Royal Mail, Spring Global, and other carriers receive your name and delivery address to deliver your order.

(d) Payment processors — your payment details are handled directly by Amazon Payments, eBay-Managed Payments, Stripe, PayPal, or other regulated providers; we do not see or store your full card details.

(e) Service providers — IONOS (web hosting, UK/EU), Zoho Mail, our accountants and tax advisers — all bound by contractual confidentiality and data protection obligations.

(f) Legal and regulatory authorities — where we are required by law to disclose information (HMRC, ICO, courts, etc.).

(g) Business transfers — if our business is acquired or merged, your information may be transferred to the new owner under the same protections set out here.

We do not sell your personal information to third parties.

5. INTERNATIONAL TRANSFERS

Some of our service providers (such as Amazon Web Services data centres used by certain processors) may store data outside the UK. Where this occurs, we ensure that appropriate safeguards are in place — typically the UK International Data Transfer Agreement, Standard Contractual Clauses, or transfers to countries with UK adequacy decisions.

6. HOW LONG WE KEEP YOUR INFORMATION

We retain personal information only for as long as necessary for the purposes set out above:

- Order and transaction records: 6 years after the order date, to meet HMRC and accounting obligations.
- Marketplace buyer information (Amazon, eBay, etc.): no longer than 180 days after order delivery, unless required for ongoing claims or returns, in which case retained until the matter is resolved.
- Customer account information: while your account is active, plus 12 months after closure.
- Marketing preferences: until you withdraw consent.
- Website analytics and cookies: see section 8.

After these periods, your personal information is securely deleted or anonymised.

7. YOUR RIGHTS

Under UK GDPR you have the following rights:

(a) Right of access — request a copy of the personal information we hold about you.
(b) Right to rectification — correct inaccurate or incomplete information.
(c) Right to erasure — request deletion of your information ("right to be forgotten") in certain circumstances.
(d) Right to restriction — limit how we use your information.
(e) Right to object — object to processing based on legitimate interests or direct marketing.
(f) Right to data portability — receive your information in a structured, machine-readable format.
(g) Right to withdraw consent — where processing is based on consent.

To exercise any of these rights, email privacy@simplybrandsdirect.com or write to us at the registered address above. We will respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. COOKIES

Our website uses cookies. Cookies are small text files stored on your device. We use:

(a) Strictly necessary cookies — required for the website to function (e.g. shopping basket, login session). These cannot be disabled.

(b) Analytics cookies — help us understand how visitors use the site so we can improve it. Used only with your consent.

You can manage cookie preferences via the cookie banner on first visit, your browser settings, or by emailing us. Disabling strictly necessary cookies may affect site functionality. For more information visit aboutcookies.org.

9. SECURITY

We take the security of your personal information seriously. Measures include:

- Encrypted transmission (HTTPS / TLS) for all communications
- Encrypted storage of data at rest
- Role-based access controls limiting who in our organisation can access your information
- Regular security reviews and vulnerability monitoring
- Staff training on data protection
- Incident response procedures with notification to the ICO and affected individuals where legally required

While we take all reasonable steps to protect your information, no method of internet transmission or electronic storage is 100% secure. We will notify you and the ICO of any qualifying personal data breach in accordance with our legal obligations.

10. THIRD-PARTY WEBSITES

Our website may contain links to other websites (manufacturers, marketplaces, social media). We are not responsible for the privacy practices of those websites. Please review their privacy policies before providing personal information.

11. CHILDREN'S PRIVACY

Our website and services are not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us at privacy@simplybrandsdirect.com so we can delete it.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. We will notify you of material changes by email (where appropriate) or by prominent notice on our website.

13. CONTACT US

For any questions, complaints or requests regarding your personal information:

Email: support@simplybrandsdirect.com
Post: Data Privacy Team, Simply Brands Direct Limited, Sambhav House, Unit 3B, Greenhill Way, Harrow, HA1 1AF, United Kingdom

If you are not satisfied with our response, you may contact the Information Commissioner's Office: ico.org.uk