Privacy Policy

Brauer Limited last updated: 19/08/2026

This Privacy Policy explains how Brauer Limited collects, uses and protects your personal data when you visit www.brauer.co.uk (the “Site”), buy from us, or otherwise deal with us. It is provided in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please also read our Cookie Policy, which explains how we use cookies and similar technologies.

1. Who we are (data controller)

Brauer Limited is the “controller” responsible for your personal data.

Company: Brauer Limited, registered in England & Wales, company number 05980295 Registered/trading address: Dawson Road, Mount Farm Estate, Milton Keynes, MK1 1JP 

VAT number: GB 932549217 

Email: sales@brauer.co.uk 

Telephone: +44 (0)1908 374022

If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. The personal data we collect

Depending on how you interact with us, we may collect:

  • Account data — name, email address, telephone number, business name, billing and delivery addresses, and login details when you register or log in to a customer account.
  • Order and transaction data — products ordered, order value, delivery details, and records of correspondence. Card payments are processed by our payment provider; we do not store full card details on the Site.
  • Enquiry data — the name, email address, telephone number, address, message, and any file you provide through our contact or enquiry forms.
  • Technical and usage data — IP address, browser type and device information, and (if you consent to analytics cookies) information about how you use the Site. See our Cookie Policy.
  • Communications — emails, calls and other correspondence between you and us.
  • Live chat data — if you use the chat window on the Site, we collect the name, email address and telephone number you enter before starting a chat, the content of your chat messages, and any files you choose to attach. Our chat provider also collects technical information automatically, including your IP address, approximate country and city derived from it, browser and operating system, device and screen details, language and time zone, the pages you view on the Site, the page that referred you, and a chat identifier stored in your browser. If no one is available to answer, your message is kept so that we can reply to you by email.

We collect this data directly from you, and automatically through cookies and similar technologies when you use the Site.

3. How and why we use your data (and our lawful bases)

Under the UK GDPR we must have a lawful basis for using your personal data. We rely on the following:
What we do Why Lawful basis
Create and manage your account; process and deliver your orders; provide customer service To perform our contract with you Contract (Art. 6(1)(b))
Respond to enquiries you send us To answer your request and run our business Legitimate interests / steps prior to a contract
Answer questions and provide support through our live chat To respond to your request and help you find the right product Legitimate interests (Art. 6(1)(f)), or steps prior to a contract where you are asking about an order
Keep records of orders, invoices and tax information To meet our legal and accounting obligations Legal obligation (Art. 6(1)(c))
Protect our Site and forms from spam, fraud and abuse (e.g. reCAPTCHA) To keep our business and customers secure Legitimate interests (Art. 6(1)(f))
Measure and improve how the Site performs using analytics To understand and improve our Site Consent (Art. 6(1)(a)) — via the cookie banner
Send marketing or product updates (only if applicable) To keep you informed Consent, or legitimate interests for existing customers where permitted by PECR
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and you can object at any time (see section 8). Where we rely on consent, you can withdraw it at any time without affecting processing already carried out.

4. Who we share your data with

We do not sell your personal data. We share it only where necessary, with:

  • Payment providers — to process payments securely. We use Stripe to process card payments.
  • Delivery and logistics partners — to fulfil and deliver your orders. We work with a range of trusted couriers, depending on product type, weight and delivery location.
  • IT, hosting and website service providers — including our web host and the providers that keep the Site running and secure.
  • Google — Google Analytics (if you consent) and Google reCAPTCHA, which process limited technical data on our behalf or as a separate controller. See https://policies.google.com/privacy
  • Tidio — our live chat provider. Tidio Poland sp. z o.o., Szczecin, Poland processes chat messages and the related visitor information on our behalf so that the chat service works. See https://www.tidio.com/privacy-policy/
  • X (Twitter) — if you choose to load our social feed, X may process your data as described in our Cookie Policy.
  • Professional advisers, regulators and authorities — where required by law, or to establish, exercise or defend legal claims.

We do not share personal data within the JSH Engineering Group.

We require all our service providers to keep your data secure and to use it only for the purposes we specify.

5. International transfers

Some of our providers (for example Google) may process data outside the UK. Where personal data is transferred outside the UK, we ensure an appropriate safeguard is in place — such as a UK “adequacy” decision, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses — so that your data remains protected.

Chat data collected through our live chat is stored by our provider on servers within the European Economic Area. Some of our provider’s personnel are located outside the EEA and may access data where necessary to support the service; where that happens, the transfer is covered by Standard Contractual Clauses and, where applicable, the UK Addendum.

6. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out above:

  • Account data — for as long as your account is active, then deleted or anonymised on request.
  • Order, invoice and tax records — normally 6 years after the end of the relevant financial year, to meet HMRC and accounting requirements.
  • Enquiry, contact and live chat data — for as long as needed to deal with your enquiry and a reasonable period afterwards.
  • Analytics data — in line with the retention period set in Google Analytics (currently 14 months).

When data is no longer needed, we securely delete or anonymise it.

7. How we protect your data

We use appropriate technical and organisational measures to protect your personal data, including secure (HTTPS) connections, access controls, and reputable hosting and payment providers. No method of transmission over the internet is completely secure, but we take reasonable steps to safeguard your information.

8. Your rights

Under the UK GDPR you have the right to:

  • Be informed about how we use your data (this policy)
  • Access a copy of the personal data we hold about you
  • Rectification of inaccurate or incomplete data
  • Erasure of your data in certain circumstances (“right to be forgotten”)
  • Restrict our processing in certain circumstances
  • Data portability — receive your data in a portable format
  • Object to processing based on legitimate interests, and to direct marketing at any time
  • Withdraw consent at any time where we rely on consent

To exercise any of these rights, contact us using the details in section 1. We will respond within one month. There is normally no charge.

9. Cookies

We use cookies and similar technologies as described in our Cookie Policy. You can manage your preferences at any time via the “Cookie settings” link in the Site footer.

10. Children

The Site is intended for business customers and is not directed at children. We do not knowingly collect personal data from anyone under 16.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date shows when it was last revised. Significant changes will be highlighted on the Site where appropriate.

12. Complaints and the ICO

If you have a concern about how we handle your data, please contact us first so we can try to resolve it.

You also have the right to complain to the UK’s data protection regulator:

Information Commissioner’s Office (ICO) www.ico.org.uk Telephone: 0303 123 1113