Last updated: 2025-10-30
Who we are
Brat Life (“we”, “us”, “our”) operates the website at https://bratlife.link (the “Site”).
Contact: support@bratlife.link
Scope
This policy explains what personal data we collect, how we use and share it, how long we keep it, and the choices you have. It applies to the Site, orders placed through the Site, and our customer support.
What we collect
Information you provide
- Account & checkout: name, email, phone (optional), billing/shipping addresses, order details.
- Payments: your payment method is processed by our payment provider (e.g., Stripe/PayPal/Google Pay/Affirm). We do not store full card numbers on our servers.
- Support & messages: the info you include when you contact us.
- Reviews/comments/uploads: text, ratings, images you choose to submit (avoid EXIF/GPS data if you don’t want it shared).
Information collected automatically
- Device & usage: IP address, browser type, pages viewed, timestamps, referral URLs.
- Cookies & similar tech: to keep you logged in, remember cart contents, process orders, and measure basic performance (see “Cookies”).
Information from third parties
- Payment/fraud signals from payment processors.
- Fulfillment status from print & shipping partners.
- Optional: social login providers (if used) may share your name/email with your consent.
How we use your information
- Fulfill and deliver orders (produce, pack, ship, provide order updates).
- Payments & fraud prevention (via payment providers).
- Account & support (create/manage your account, respond to requests).
- Site performance & security (load balancing, logs, abuse prevention).
- Legal & compliance (tax/audit records, lawful requests).
- Marketing (lightweight): transaction emails and—only with your consent or where permitted—updates about Brat Life. You can unsubscribe anytime.
We do not sell your personal information. We don’t run third-party ad networks on the Site.
Legal bases (GDPR/UK GDPR): performance of a contract (orders), legitimate interests (security/analytics), consent (optional marketing/certain cookies), legal obligations (tax/accounting).
Fulfillment & payment partners
Print/ship partners (e.g., Printify print providers)
To make and deliver your order, we share only what’s necessary: items ordered and your shipping name/address/phone. Providers use this data solely to fulfill your order. They may be located in the US, EU, or other regions depending on the product and destination.
Payments
When you pay, your data is sent directly to the provider you choose (e.g., Stripe, PayPal, Google Pay, Affirm). They act as independent controllers/processors for that transaction. See their respective privacy notices for details (risk checks, chargeback handling, etc.). If you use Affirm or any “pay over time” option, the provider may run credit/identity checks under its own policies.
Email marketing & automations
What we send
We send two kinds of email:
- Transactional (always allowed): order confirmations/updates, account, password reset, shipping notifications, support replies.
- Marketing (only with consent or where legally permitted): new products, promotions, win-backs, product review requests, and cart/browse reminders.
You can unsubscribe from marketing at any time using the Unsubscribe link in any marketing email or by contacting support@bratlife.link. Unsubscribing does not stop transactional emails about orders or your account.
When we add you to our marketing list
- If you opt-in on checkout, account sign-up, or a form on the Site (unchecked by default).
- Where permitted by local law (“soft opt-in”), we may email existing customers about similar products; you can opt-out at any time.
What we store for marketing
If you subscribe, we store your email, optional name, preferences (e.g., categories of interest), subscription source & time, and campaign activity (delivery, opens, clicks, unsubscribes, bounces). If you buy from us, we may link order history to your subscriber profile to keep messages relevant (legitimate interest/consent, depending on jurisdiction).
Abandoned cart & browse emails
If you begin checkout or add items to cart and provide an email (or you’re logged in), we may send 1–3 cart reminders within ~48 hours. We include an unsubscribe link in each reminder. For “browse” reminders, we only send if you explicitly opted-in or local law permits soft opt-in.
Tracking & cookies used by the ESP
Marketing emails may include a standard web beacon (tiny image) that records open and click metrics. If you click a link in a marketing email, our email provider may set a first-party cookie so later visits can be attributed to that campaign (used for segmentation and to avoid sending irrelevant messages). You can block images in your email client and/or clear cookies to disable this measurement. See our Cookies section/cookie banner for details.
Who processes marketing email
We use an Email Service Provider (ESP) integrated with WooCommerce: [ESP name, e.g., MailPoet/Klaviyo/Mailchimp].
The ESP processes your subscriber/profile data to deliver emails, measure performance, and manage unsubscribes. Data may be stored in the [US/EU/…]. Where required, transfers rely on appropriate safeguards (e.g., SCCs).
We do not sell your email list or allow the ESP to use it for their own marketing.
Legal bases
- EEA/UK: consent (Art. 6(1)(a)) for marketing; legitimate interests (Art. 6(1)(f)) for security, frequency capping, list hygiene, and limited product-review/cart reminders where soft opt-in applies; contract (Art. 6(1)(b)) for transactional emails.
- US (CAN-SPAM): we include our contact details and an opt-out link in every marketing email and honor opt-outs promptly.
- Canada (CASL): we send marketing only with express consent or an applicable implied-consent relationship, and we identify ourselves in each message.
Retention
- Subscriber profiles & campaign logs: kept while you remain subscribed.
- If you unsubscribe, we keep a suppression record (email + opt-out time) so we don’t email you again.
- Event-level analytics (opens/clicks) are typically retained up to 24 months; order-linkage retained per our Retention section.
Your choices
- Unsubscribe anytime via the link in our emails or email support@bratlife.link.
- You can request access, correction, deletion, or portability of your marketing data (see “Your rights”).
- To minimize measurement, block remote images in your email client and clear cookies.
Cookies
We use cookies to:
- keep your cart and session working;
- remember preferences (e.g., currency);
- perform basic analytics to improve the store.
You can control cookies in your browser settings. Blocking strictly-necessary cookies may break cart/checkout. If you operate a cookie banner, categorize as: Strictly Necessary, Functional, Analytics (default Strictly Necessary always on).
How we share information
We share data only with:
- Fulfillment & logistics partners to produce and deliver your order;
- Payment processors to take payment and prevent fraud;
- Hosting & security providers;
- Email infrastructure for order/support emails;
- Authorities when required by law or to protect rights/safety.
We do not allow partners to use your order data for their own marketing.
Retention
- Orders: typically 7 years (tax/audit).
- Support messages: as long as needed to resolve your request + reasonable backup period.
- Accounts: until you request deletion or after prolonged inactivity.
- Server logs: typically 30–180 days.
- Cookies: per cookie purpose (session to 24 months).
When retention ends, we delete or anonymize data.
Security
We use HTTPS, access controls, and standard safeguards. No method of transmission or storage is 100% secure, but we work to protect your information.
International transfers
Data may be processed in countries other than yours (for example, where a print provider or payment processor is located). Where required, we rely on appropriate safeguards (e.g., SCCs) or provider certifications.
Your rights
Depending on your location, you may have rights to:
- Access the data we hold about you;
- Correct inaccurate data;
- Delete data (where feasible—order records may need to be kept for tax/legal reasons);
- Portability (obtain a copy in a usable format);
- Restrict/opt-out of certain processing (e.g., non-essential cookies, marketing);
- Object to processing based on legitimate interests;
- Withdraw consent where processing is based on consent.
California/CPRA: we don’t “sell” personal information. If we ever engage in cross-context behavioral advertising, we’ll offer a “Do Not Sell or Share” mechanism.
EEA/UK: you can lodge a complaint with your data protection authority.
To exercise rights: email support@bratlife.link. We may need to verify your identity.
Children
Our store is not directed to children under 13 (or under 16 in the EEA). We don’t knowingly collect their data. If you believe a child has provided data, contact us to delete it.
Do Not Track
Browsers may send a “DNT” signal; we currently don’t respond to it. Use cookie controls to manage tracking technologies.
Changes
We may update this policy from time to time. The “Last updated” date will change and the new policy applies upon posting.
Contact
Brat Life
Email: support@bratlife.link