This Privacy Policy will explain what data we collect from you, how we use that data, who can see your data and how you can access/change the personal data we hold.

The Bradshaw Foundation is the data controller for your personal information.

If you have any questions about this policy or your data, please contact:
Data Protection Officer
The Bradshaw Foundation
5 Albany Courtyard
London W1J 0HF
Email: info@bradshawfoundation.com

We process your personal data on the following legal bases:

• To fulfil a contract: For example, to process and deliver your order.
• To comply with legal obligations: Such as retaining sales invoices for tax purposes.
• With your consent: For example, when you use our contact form or email us.
• For our legitimate interests: Such as improving our website and services, provided these interests do not override your rights.

The Bradshaw Foundation may ask you to input and collect the following information during the ordering process on this website: Customer Name, Billing Address, Shipping Address, Telephone Number, and Email Address. In addition to this we also have a contact form which if used collects your name, email, country, organisation and message text.

When you enter payment information, this is not held by The Bradshaw Foundation, but collected by our Third Party payment processor Stripe in a secure manner (see Who Can See Your Information?).

Both the Bradshaw Foundation Contact Form and the Bradshaw Foundation payment processor – Stripe – offer the option to receive updates from the Bradshaw Foundation in the future. If you choose to opt in for updates, your data is held in accordance with the privacy policy on this page.

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Rectify any inaccurate or incomplete data.
• Erase your data (“right to be forgotten”), subject to certain legal exceptions.
• Restrict or object to our processing of your data.
• Port your data to another provider.
• Withdraw consent at any time, where processing is based on consent. To exercise any of these rights, please contact us using the details above. You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

We only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including for legal, accounting, or reporting requirements. For example, sales invoices are kept for up to 7 years to comply with HMRC requirements. Other data, such as contact form submissions, are retained only as long as needed to resolve your enquiry.

Cookies are small text files stored on your device when you visit our site. They help us understand things like how many visitors return, which pages are popular, and how long people stay. Cookies do not identify you personally.

Essential cookies are necessary for the website to function.

Non-essential cookies (such as analytics or advertising cookies) will only be set with your consent.

When you first visit our website, you will be asked to accept or reject non-essential cookies. You can change your preferences at any time in your browser settings. For more information, contact us via our Contact page.

If we transfer your personal data outside the UK or European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as standard contractual clauses or other approved mechanisms, to protect your data.

The Bradshaw Foundation will not sell or rent your information to Third Parties for marketing purposes. We do however work with a small number of Third Party organisations to help us deliver some customer services, some of which have limited access to your data. We may pass your information to these Third Party service providers for the purpose of providing services to your behalf. Examples include sending emails, processing payments and targeted advertisements on social media. The information shared will be that which is only relevant to the task at hand. Third Parties cannot use or share your information for any other purpose than to carry out what The Bradshaw Foundation has requested them to do and are required to keep your data secure. Please see below for a list of our Third Party partners, a brief rundown of the services they provide and links to their own privacy policies.

Third Parties who work on behalf of, or in association with, The Bradshaw Foundation:

Stripe (Payment processor)

• Privacy policy https://stripe.com/privacy

Our website uses SSL encryption to ensure that any information you enter is transmitted securely. You can verify this by clicking the padlock icon in your browser’s address bar.

Our website may contain links to other websites. Please note that we are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any external websites you visit.

The Bradshaw Foundation takes the security of your personal data seriously. We have procedures in place to detect, investigate, and respond to personal data breaches.

• Report the breach to the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of it, where required by law.
• Notify affected individuals without undue delay, if the breach is likely to result in a high risk to their rights and freedoms.
• Record all breaches internally, whether or not they are reported to the ICO, including details of the incident, its impact, and the actions taken.

We also require our third-party service providers to notify us immediately if they experience a data breach involving personal data we control.

We may update this policy from time to time. If we make significant changes, we will communicate those changes clearly by a notice on our website. This policy was last updated 24/09/2025.