Legal

Privacy Policy

Last updated: 20 June 2026

This policy explains how we collect, use, and protect your personal data when you use blubrain.co.uk. We are committed to handling your data lawfully and transparently under UK GDPR and the Data Protection Act 2018.

Who we are

The data controller is MUSK TECH GROUP Limited, a company registered in England and Wales (Company No. 16496635), registered office Unit 5, The Mill, Keats Lane, Earl Shilton, Leicestershire, LE9 7DQ, trading as Blu Brain®. For any privacy query, contact us at support@blubrain.co.uk or through our support centre.

What we collect

Order and account data — your name, email address, billing and delivery address, phone number, and order history, collected when you check out or manage a subscription.
Payment data — handled by our payment provider. We do not store full card numbers on our own systems.
Newsletter data — your email address (and optionally your name) if you subscribe to marketing emails.
Support data — your name, email, and the content of any message when you contact us.
Technical and usage data — IP address, device and browser information, and how you interact with the site, collected through cookies and analytics.

How we use it, and our legal basis

To process and deliver your orders and manage subscriptions — performance of a contract.
To provide customer support — performance of a contract / legitimate interests.
To send marketing emails where you have opted in — consent, which you can withdraw at any time.
To protect against fraud and keep the site secure — legitimate interests.
To meet accounting, tax, and other legal obligations.

We use trusted third-party processors to run the business. Each only receives the data needed for its task and is bound to protect it:

Checkout, orders and subscriptions — Foxy.io
Payments — Stripe (and PayPal, where selected at checkout)
Hosting and content delivery — Vercel and Cloudflare
Content management — Sanity
Email and newsletter — Brevo/ActiveCampaign
Customer support — Freshworks (Freshdesk)
Order fulfilment and dispatch — Veeqo, and our carriers Royal Mail and Evri (name and delivery address only)
Analytics — Google Analytics 4 / Google Tag Manager

Operator note: Confirm this list matches your live integrations before publishing, and remove any processors you no longer use.

We do not sell your personal data.

International transfers

Some of our processors are based outside the UK. Where personal data is transferred abroad, we rely on appropriate safeguards — such as a UK adequacy decision or the UK International Data Transfer Agreement/Addendum — to ensure your data receives an equivalent level of protection.

Cookies and tracking

We use cookies for essential site functionality, for analytics, and, where applicable, for marketing. Non-essential cookies are only set with your consent, which you can give or decline through our cookie banner, and you can change it at any time. Managing cookies through your browser may affect how parts of the site work.

How long we keep it

We keep personal data only as long as necessary for the purpose it was collected, or as required by law — for example, order and transaction records are retained for the period required by HMRC for tax purposes. Marketing data is kept until you unsubscribe.

Your rights

Under UK GDPR, you have the right to: access your data; have it corrected; have it erased; restrict or object to its processing; data portability; and to withdraw consent for marketing at any time. To exercise any of these, contact us using the details above.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data properly.

Children's privacy

This website is not intended for children under 13, and we do not knowingly collect data from them.

Changes to this policy

We may update this policy from time to time. The current version, with its effective date, will always be available on this page.