Bravalan Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, and protect your information when you use our website or communicate with us.

1. Who We Are
Bravalan Ltd is the data controller responsible for your personal information.
We trade as Highland Huts, offering handcrafted shepherd’s huts and related services in Scotland and the wider UK.

If you have any questions about this policy, please contact us at:
📧 hello@highlandhuts.co.uk

2. What Information We Collect
We may collect and process the following personal data:

Contact Information: your name, email address, phone number, and postal address.

Order Information: your purchase details, delivery address, and communication preferences.

Payment Details: payment method and transaction data (processed securely via third-party payment providers; we do not store full card details)

Technical Data: IP address, browser type, operating system, and how you interact with our website.

Marketing Preferences: whether you’ve opted in to receive updates or offers.

3. How We Collect Your Data
We collect data in three main ways:

1. Directly from you – when you make an enquiry, place an order, or sign up for updates.
2. Automatically – via cookies and analytics tools when you browse our website.
3. From third parties – such as payment processors or delivery partners who help complete your order.

4. How We Use Your Data

We use your information to:

• Process and fulfil your orders.
• Communicate with you about your order or enquiry.
• Send invoices, receipts, and updates.
• Arrange delivery and customer support.
• Improve our website and services.
• Send marketing communications (only if you’ve opted in).
• We only use your data when it’s lawful to do so — typically under one of the following legal bases:
• Performance of a contract (e.g., fulfilling an order).
• Compliance with legal obligations.
• Legitimate business interests (e.g., improving services).
• Your consent (for marketing or optional communications).

5. How We Store and Protect Your Data

We take appropriate technical and organisational measures to secure your data.

This includes:

• Encrypted website connections (HTTPS).
• Secure password-protected systems.
• Restricted access to authorised personnel only.
• Regular data backups.
• We retain your data only as long as necessary to fulfil our purposes — for example:
• Customer orders: retained for up to 6 years (for tax and legal compliance).
• Marketing data: until you withdraw consent.
• General enquiries: typically deleted after 12 months.

6. Sharing Your Data

We do not sell or rent your data.

We may share limited information with:

• Payment processors (e.g., Stripe, PayPal, or your bank).
• Delivery partners (to arrange transport and logistics).
• Professional service providers (accountants, legal advisors, or web hosting).
• All partners are GDPR-compliant and process your data only as necessary for their role.

7. Cookies and Website Analytics

Our website uses cookies to improve performance and user experience.

Cookies are small text files stored on your device that help us:

• Remember preferences.
• Track website usage through analytics tools (e.g., Google Analytics).
• You can manage or disable cookies in your browser settings at any time.

For more information, see our separate Cookie Policy (if applicable).

8. Your Rights Under UK GDPR

You have the right to:

• Access your personal data.
• Correct inaccurate or incomplete information.
• Request deletion of your data (where legally permissible).
• Restrict processing of your data.
• Withdraw consent at any time (for marketing).
• Complain to the Information Commissioner’s Office (ICO) if you believe your data rights have been infringed.
• ICO website: https://ico.org.uk
• To exercise these rights, contact us at hello@highlandhuts.co.uk.

9. Marketing Preferences

You’ll only receive marketing emails if you have opted in.

You can unsubscribe at any time by:

• Clicking the “unsubscribe” link in any marketing email, or
• Emailing us directly to withdraw consent.
• We never send unsolicited messages or share your contact details with other companies for marketing.

10. Third-Party Links

Our website may include links to third-party websites (for example, Instagram or external suppliers).
We are not responsible for their privacy practices.
We encourage you to read the privacy policies of any external sites you visit.

11. Updates to This Policy

We may update this Privacy Policy from time to time.
Any significant changes will be posted on our website, and the “Effective Date” at the top will be updated.

12. Contact

For privacy-related questions or data requests, contact:
📧 hello@highlandhuts.co.uk