Effective Date: 11/03/2026

1. Data Controller

Bravalan Ltd is the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or how your data is handled, you can contact us at:

📧 [email protected]

Bravalan Ltd does not currently require a formal Data Protection Officer. However, we will respond promptly to all privacy and data protection enquiries through the contact details above.

2. What Personal Data We Collect

We may collect, store and process the following categories of personal data.

Contact Information

Your name, email address, telephone number, and postal address.

Order Information

Information relating to quotations, specifications, orders, delivery details, and communications regarding your project.

Payment Information

Payment method details and transaction records. Payments are processed securely through third-party payment providers. We do not store full card details.

Technical Data

Information collected automatically when you use our website, including:

• IP address

• browser type

• device type

• operating system

• pages visited

• interaction with our website

Uploaded Files

Customers may optionally upload images, sketches, plans, screenshots, or reference materials when submitting a quote request or specification. These files are used solely to assist with preparing quotations, specifications, or project discussions.

Marketing Preferences

Information about your preferences in receiving marketing communications from us.

3. How We Collect Your Data

We collect personal data in several ways.

Directly From You

When you:

• submit a quote request

• contact us via forms, email, or telephone

• request a specification link

• place an order

• subscribe to updates or marketing communications

Automatically

When you visit our website, certain technical information may be collected automatically through cookies and analytics tools.

From Third Parties

We may receive information from trusted third parties who assist with providing our services, including:

• payment processors

• delivery partners

• website hosting providers

• analytics providers

4. How We Use Your Personal Data

We use your personal data only where there is a lawful basis for doing so.

Your information may be used to:

• prepare quotations and specifications

• communicate with you regarding enquiries or projects

• process and fulfil orders

• send invoices, receipts, and updates

• arrange delivery and logistics

• provide customer support

• improve our website and services

• prevent fraud or misuse of our services

• send marketing communications where you have opted in

5. Legal Basis for Processing

Under UK GDPR we rely on the following lawful bases.

Contractual Necessity

Processing necessary to fulfil a contract with you or to take steps prior to entering into a contract (for example preparing a quote or specification).

Legal Obligation

Where we must process personal data to comply with legal requirements such as tax, accounting, or regulatory obligations.

Legitimate Interests

Processing necessary for our legitimate business interests, such as improving services, responding to enquiries, managing customer relationships, or preventing fraud, provided these interests do not override your rights.

Consent

Where you have given consent, such as receiving marketing communications. You may withdraw consent at any time.

6. How We Store and Protect Your Data

We implement appropriate technical and organisational security measures to protect personal data.

These include:

• encrypted website connections (HTTPS)

• password-protected systems

• restricted access to authorised personnel

• secure hosting infrastructure

• regular data backups

While we take reasonable precautions, no online system can guarantee absolute security.

7. Data Retention

We retain personal data only for as long as necessary to fulfil legitimate business purposes or legal obligations.

Customer Orders and Invoices

Retained for up to 6 years for tax and accounting compliance.

Quote Requests and Specifications

When you submit a quote request through our website, we will use your details to prepare your quote and provide a specification link.

By submitting a quote request, you acknowledge that we may contact you regarding your enquiry and store the information required to prepare your quote.

If you do not submit your specification within 30 days, we may delete your quote details.

If you submit your specification, your enquiry will be treated as active and we may retain your information for up to 2 years after the enquiry, order, or project has been closed, unless certain information must be retained longer for legal, accounting, or record-keeping purposes.

General Enquiries

Typically retained for 12 months after the enquiry has been resolved.

Marketing Data

Retained until you unsubscribe or withdraw consent.

Where personal data is no longer required, it will be securely deleted or anonymised.

8. File Uploads

If you upload images, plans, drawings, sketches, screenshots, or other files as part of a quote request or specification, you confirm that you have the right to provide these materials and that they do not infringe the rights of any third party.

We recommend that uploaded files do not contain sensitive personal information.

Uploaded files will only be used for the purpose of preparing your quotation, specification, or project and will be handled in accordance with this Privacy Policy.

9. Sharing Your Personal Data

We do not sell or rent personal data.

We may share limited information with trusted third parties who assist with operating our business, including:

• payment processors (such as Stripe or PayPal)

• delivery or transport providers

• accountants or professional advisers

• website hosting or IT service providers

All service providers are required to process personal data securely and only for the purposes necessary to perform their services.

10. International Data Transfers

Some third-party services we use may store or process data outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK-approved Standard Contractual Clauses

• adequacy regulations

• equivalent data protection safeguards

These protections ensure your personal data remains protected in accordance with UK GDPR.

11. Cookies and Website Analytics

Our website uses cookies and similar technologies to improve user experience and website functionality.

Cookies are small files stored on your device that help us:

• remember preferences

• analyse website traffic

• improve performance and functionality

We may use analytics tools such as Google Analytics to understand how visitors interact with our website.

You can manage or disable cookies through your browser settings at any time.

For more information, please refer to our Cookie Policy (if applicable).

12. Your Rights Under UK GDPR

You have the following rights regarding your personal data.

You may request to:

• access your personal data

• correct inaccurate or incomplete information

• request deletion of your data where legally permitted

• restrict processing of your data

• object to certain types of processing

• withdraw consent at any time for marketing communications

To exercise these rights, please contact us using the details below.

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

ICO website:
https://ico.org.uk

13. Marketing Communications

We will only send marketing emails where you have opted in to receive them.

You can unsubscribe at any time by:

• clicking the unsubscribe link in marketing emails

• contacting us directly to withdraw consent

We do not share your personal data with other companies for marketing purposes.

14. Third-Party Links

Our website may contain links to third-party websites such as social media platforms or suppliers.

We are not responsible for the privacy practices of those external websites and encourage you to review their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, legal requirements, or data processing practices.

When updates occur, the revised version will be published on this page and the Effective Date will be updated.

16. Contact

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

📧 [email protected]

Bravalan Ltd
48 West George Street, 2nd Floor, Office 213, Glasgow, G2 1BP

17. Business Transparency

Bravalan Ltd operates the Highland Huts website and is responsible for the products and services offered through it.

We aim to operate transparently and responsibly by providing clear information about our business, how we handle personal data, and how customers can contact us.

Business information including company registration details and contact information is available on our website. If you have any questions regarding our services, privacy practices, or your personal data, please contact us using the details below.