1. Who Is Responsible?
Brayne & Co. B.V., Rustenburgerdwarsstraat 12h, 1074 JJ Amsterdam, the Netherlands, is the data controller for the personal data described in this privacy policy.
✉ Questions or requests about privacy: info@brayneco.com
Privacy Policy
Brayne & Co. B.V. respects your privacy. In this privacy policy, we explain which personal data we process when you visit our website, place an order, contact us, or sign up for marketing communications.
2. What Data Do We Process?
Publishing reviews and, where appropriate, verifying whether a review comes from a genuine customer or actual experience. The basis is our legitimate interest in reliable product information and transparent customer feedback, to the extent consent or another basis is not required.
Purpose
Examples
Legal Basis
Fulfilling Orders
processing orders, payment, shipping, returns and customer service
performance of the contract
Legal Obligations
tax administration, bookkeeping, legal requests
legal obligation
Fraud and Security
preventing misuse, securing the webshop and transactions
legitimate interest and, where necessary, legal obligation
Customer Service
answering questions, complaints and requests
performance of the contract and/or legitimate interest
Newsletter and Commercial Email
sending news, product launches and offers
consent, or where legally permitted an applicable existing-customer exception
Analytics and Advertising
measuring website use and improving campaigns
consent where legally required
3. Who Do We Share Data With?
We only share personal data when necessary for our services, when legally required, or when another valid basis exists.
At present, we work with at least the following categories of parties:
- Shopify for the webshop, hosting and webshop functionality. For EEA customers, personal data is initially processed by Shopify International Ltd. in Ireland; Shopify may process data internationally within its group and through sub-processors with appropriate safeguards.
- PostNL and/or DHL for delivery and track & trace; for this we share the data necessary to deliver the package.
- The payment provider and payment method you select at checkout, once configured by Brayne & Co.
- Service providers for email, bookkeeping, reviews and other business processes once selected, and to the extent they process personal data.
When we add new suppliers or marketing tools that process personal data, we will update this privacy policy where necessary before or when they are put into use.
4. International Transfers
Some service providers may process personal data outside the European Economic Area.
In that case, we ensure the transfer takes place on a legally permitted basis, such as an adequacy decision, binding corporate rules, or approved standard contractual clauses, depending on the service provider concerned.
5. Retention Periods
We do not keep personal data longer than necessary for the purpose it was collected for, unless a statutory retention obligation requires a longer period.
We generally keep basic financial records and invoice data for 7 years for tax purposes.
We keep customer service and returns data for as long as reasonably necessary to handle the question, complaint, warranty, or possible legal claim.
We keep marketing data until you unsubscribe or withdraw consent, unless a limited longer retention is needed to respect your unsubscribe request.
Cookie data is retained according to the duration of the relevant cookie, as shown in our Cookie Settings or Cookie Policy.
6. Newsletter and Marketing
You receive our newsletter when you have signed up for it or when we are otherwise permitted by law to approach you.
You can unsubscribe at any time via the unsubscribe link in the email.
For personalized online advertising and tracking, we only use cookies, pixels or similar technologies once the required consent has been obtained.
7. Your Privacy Rights
You have, among others, the following rights:
- right of access to your personal data;
- right to rectification of inaccurate or incomplete data;
- right to erasure, to the extent no legal exception applies;
- right to restriction of processing;
- right to data portability where the GDPR grants this right;
- right to object to certain processing, including direct marketing;
- right to withdraw consent at any time without affecting the lawfulness of prior processing.
You can send a request to info@brayneco.com.
We may ask for additional information where reasonably necessary to verify your identity.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
8. Security
We take appropriate technical and organizational measures to protect personal data against loss, unauthorized access, alteration or disclosure.
Where possible, we choose service providers that apply appropriate security measures.
9. Minors
Our webshop is aimed at adult consumers.
We do not knowingly collect personal data from children for entering into a purchase agreement on their own.
If this nonetheless turns out to have happened and processing cannot lawfully continue, we will delete the relevant data where appropriate.
10. Changes
We may update this privacy policy when our services, suppliers or legal obligations change.
The most recent version is published on brayneco.com.
Version: 16 August 2026.
11. Return Costs and Depreciation
The direct costs of a standard return after withdrawal are borne by the consumer.
The consumer is only liable for any depreciation resulting from handling beyond what is necessary to establish the nature, characteristics and functioning of the product.