Privacy Policy

Last updated: 4 October 2026

At Broken Planet Market Ltd (“Broken Planet Market”, “we”, “us”, or “our”), we respect your privacy and are committed to handling your personal information responsibly.

This Privacy Policy explains what personal information we collect when you visit our website, browse our products, create an account, place an order, contact us, or otherwise interact with our services. It also explains why we use your information, when we may share it, how long we keep it, and the rights available to you under applicable data protection law.

Our website is referred to in this Privacy Policy as the “Site.”

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Broken Planet Market Ltd is generally the data controller responsible for your personal information.

If you have any questions about this Privacy Policy or how we handle your information, please contact us using the details provided in the Contact Us section below.

1. Information We Collect

We collect information that you provide directly to us, information generated when you use our Site, and, in some circumstances, information provided by third-party service providers.

1.1 Information You Provide

Depending on how you interact with our Site, we may collect:

Personal and contact information

• First and last name
• Email address
• Telephone or mobile number
• Billing address
• Shipping or delivery address

Order and transaction information

• Products purchased
• Order numbers and order history
• Payment and transaction information
• Returns, refunds, exchanges, and related correspondence

Account information

• Account username
• Password credentials
• Saved preferences and account settings

We do not ordinarily store complete payment card numbers. Payment information is generally handled by our third-party payment processors, which process payments on our behalf using appropriate security measures.

Communications and customer service information

• Emails and messages you send to us
• Customer support enquiries
• Product reviews or feedback
• Information you provide when reporting an issue with an order or product

Please avoid sending sensitive personal information to us unless it is genuinely necessary for your enquiry.

2. Information Collected Automatically

When you browse or use our Site, certain information may be collected automatically through cookies, pixels, tags, logs, and similar technologies.

This information may include:

• IP address
• Browser type and version
• Device type
• Operating system
• Screen size or resolution
• General geographic location based on your IP address
• Pages and products viewed
• Links or buttons interacted with
• Search or browsing activity on our Site
• Referring website or URL
• Date and time of visits
• Information about how you navigate and use our Site

Some of this information may be combined with information you provide directly to us where permitted by applicable law.

3. Information We Receive from Other Sources

We may receive information about you from third parties where this is necessary to provide our services or operate our business.

These sources may include:

• Shopify or other e-commerce technology providers
• Payment service providers
• Shipping and delivery companies
• Fraud prevention providers
• Customer service platforms
• Email and communication providers
• Analytics providers
• Advertising and marketing platforms
• Social media platforms, where you interact with us through those services

The information we receive depends on the services you use and the permissions or choices you have made.

4. How We Use Your Personal Information

We only use personal information where we have a lawful basis to do so under applicable data protection law.

Depending on the circumstances, we may use your information for the following purposes.

4.1 Processing and Delivering Orders

We use your information to:

• Process and confirm purchases
• Take or facilitate payment
• Arrange shipping and delivery
• Process returns, refunds, and exchanges
• Send order confirmations and delivery updates
• Provide customer support relating to your purchase

The primary legal basis for this processing is that it is necessary to perform our contract with you.

4.2 Customer Service

We may use your contact and order information to respond to enquiries, investigate problems, resolve complaints, and provide assistance.

Where necessary, this processing may be based on contractual necessity, our legitimate interests, or another lawful basis permitted by applicable law.

4.3 Website Operation and Improvement

We use information about how visitors interact with our Site to understand how our website performs and identify areas where we can improve the shopping experience.

Depending on the technology involved, certain analytics or tracking technologies may require your consent before they are used.

4.4 Marketing

If you have provided the appropriate consent, or where another lawful basis for marketing applies, we may send you information about:

• New product launches
• New collections or drops
• Promotions and offers
• Brand announcements
• Other products or services that may be relevant to you

You can unsubscribe from marketing communications at any time by using the unsubscribe option included in our messages or by contacting us.

Withdrawing marketing consent does not affect processing that took place lawfully before your withdrawal.

4.5 Fraud Prevention and Security

We may process information to detect, investigate, and prevent:

• Fraudulent transactions
• Payment abuse
• Unauthorised activity
• Account misuse
• Security incidents
• Other activities that could harm our customers, Site, or business

This may be based on our legitimate interests and, where applicable, our legal obligations.

4.6 Legal and Regulatory Requirements

We may use and retain information where necessary to:

• Comply with applicable laws and regulations
• Maintain accounting and financial records
• Respond to lawful requests from authorities
• Establish, exercise, or defend legal claims
• Protect our legal rights and business interests

5. Our Legal Bases for Processing

Where the UK GDPR applies, we rely on one or more lawful bases for processing your personal information.

These may include:

Contractual necessity
Where processing is necessary to enter into or perform a contract with you, such as processing and delivering an order.

Consent
Where you have freely given consent, such as for certain marketing communications or non-essential cookies and similar technologies.

Legitimate interests
Where processing is reasonably necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining website security, preventing fraud, improving our services, and managing our business.

Legal obligation
Where processing is necessary for us to comply with a legal or regulatory requirement.

Where we rely on legitimate interests, we consider the potential impact of the processing on your privacy and take appropriate steps to protect your rights.

6. Cookies and Similar Technologies

Our Site uses cookies and similar technologies to operate essential features, remember preferences, understand website usage, and, where permitted, support marketing and advertising activities.

Cookies are small files or pieces of information stored on your device when you visit a website.

6.1 Types of Cookies We May Use

Strictly necessary cookies

These cookies are required for essential Site functions, such as shopping cart functionality, secure checkout, account access, fraud prevention, and other features necessary to provide services you have requested.

Because these technologies may be necessary for the operation of the Site or an online service you have requested, they may not require consent in every circumstance.

Analytics and performance cookies

These technologies help us understand how visitors use our Site, including which pages are visited, how users navigate the website, and how the Site performs.

Where consent is required, we will only use these technologies after obtaining the appropriate consent.

Functional cookies

These technologies may remember choices such as your preferred region, language, or other settings and can help provide a more convenient experience.

Where consent is required, these cookies will only be activated after you have provided the appropriate consent.

Marketing and advertising technologies

These technologies may help us measure advertising performance, understand campaign effectiveness, or deliver more relevant advertising.

Where required by applicable law, we will obtain consent before placing or using these technologies.

6.2 Your Cookie Choices

When you first visit our Site, you may be presented with a cookie consent mechanism allowing you to manage optional cookies.

You can choose whether to accept or reject non-essential cookies where the applicable consent rules require this choice.

You can also change or withdraw your cookie preferences where the relevant consent mechanism allows you to do so.

You may additionally control or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality or performance of parts of our Site.

We may update our cookie practices as the technologies used on our Site change.

7. How We Share Personal Information

We do not sell your personal information.

We may share personal information with trusted third parties where this is necessary to operate our business, provide our services, comply with legal requirements, or protect our rights.

These third parties may include:

E-commerce and technology providers

We may use providers such as Shopify to host and operate our online store and support functions such as checkout, order management, accounts, and related services.

Payment providers

Payment service providers may process payment information to securely authorise and complete transactions.

Shipping and delivery providers

We may provide relevant information, such as your name, delivery address, telephone number, and order details, to carriers and fulfilment partners so that your purchases can be delivered.

Marketing and communication providers

Where applicable, we may use email, SMS, customer communication, or marketing service providers to send communications and manage customer preferences.

Analytics and technology providers

We may use analytics, website optimisation, security, fraud prevention, and other technology providers to help us operate and improve the Site.

Professional advisers

We may share information with professional advisers such as lawyers, accountants, auditors, insurers, or other advisers where reasonably necessary.

Authorities and legal parties

We may disclose information where required by law, regulation, court order, or lawful governmental request, or where disclosure is reasonably necessary to establish, exercise, or defend our legal rights.

Business transactions

If our business is reorganised, sold, merged, acquired, or transferred, personal information may be disclosed or transferred as part of that transaction, subject to applicable legal requirements.

Third parties that process personal information on our behalf are expected to handle that information appropriately and only for authorised purposes.

8. International Transfers

Some companies and service providers we work with may process personal information outside the United Kingdom.

Where your personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is made in accordance with applicable data protection law.

Depending on the circumstances, appropriate safeguards may include:

• A UK adequacy decision
• Appropriate contractual safeguards
• The UK International Data Transfer Agreement
• The UK Addendum to EU Standard Contractual Clauses
• Other lawful transfer mechanisms recognised under applicable data protection legislation

The safeguards used will depend on the specific recipient, location, and circumstances of the transfer.

9. How Long We Keep Your Information

We do not keep personal information indefinitely. We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including where necessary to meet legal, accounting, tax, regulatory, fraud prevention, or dispute-resolution requirements.

Retention periods may vary depending on the type of information.

For example:

Order and transaction information
We may retain records relating to purchases, payments, refunds, and transactions for the period required to comply with applicable legal, tax, accounting, and record-keeping obligations.

Customer account information
If you create an account, we may retain relevant information while your account remains active. You may request deletion of your account information, subject to information that we are legally required or otherwise permitted to retain.

Marketing information
Marketing preferences may be retained so that we can respect your decision to subscribe or unsubscribe. If you withdraw marketing consent, we will stop using your information for the relevant marketing purpose, subject to applicable law.

Cookie and similar technology information
Retention periods vary depending on the technology and its purpose. Some information may last only for the duration of a browsing session, while other technologies may remain for longer periods.

We periodically review the information we hold and delete or anonymise information when it is no longer reasonably necessary.

10. Your Privacy Rights

Depending on your circumstances and applicable law, you may have rights concerning your personal information.

These may include:

Right of access

You can ask for a copy of the personal information we hold about you.

Right to correction

You can ask us to correct information that is inaccurate or incomplete.

Right to deletion

In certain circumstances, you can ask us to delete your personal information.

Right to restriction

In certain circumstances, you can ask us to restrict how we process your information.

Right to data portability

Where applicable, you may request certain personal information in a structured, commonly used, and machine-readable format.

Right to object

You may have the right to object to certain processing, including processing based on legitimate interests and direct marketing.

You can object to direct marketing at any time.

Right to withdraw consent

Where we rely on your consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew your consent.

These rights are not absolute and may be subject to legal exceptions or conditions.

11. How to Exercise Your Rights

If you would like to exercise a privacy right or ask a question about how we use your personal information, please contact us using the details in the Contact Us section.

When appropriate, we may need to verify your identity before completing a request. This is a security measure designed to prevent personal information from being disclosed to someone who is not authorised to receive it.

We generally aim to respond to valid data protection requests within the timeframe required by applicable law.

If you are unhappy with how we have handled your personal information, you are also entitled to complain to the relevant data protection supervisory authority.

For UK data protection matters, you can contact the Information Commissioner’s Office (ICO).

12. Data Security

We take reasonable technical and organisational measures designed to protect personal information against accidental loss, misuse, unauthorised access, alteration, disclosure, or destruction.

Depending on the information and circumstances, security measures may include:

• Encryption of information during transmission
• Secure payment processing through appropriate payment providers
• Access controls
• Authentication and account security measures
• Security monitoring and fraud prevention
• Restricted access to personal information
• Appropriate security measures provided by our technology and hosting partners

However, no website, online service, or method of transmitting information over the internet can be guaranteed to be completely secure.

For this reason, while we work to protect your information, we cannot guarantee absolute security.

13. Children’s Privacy

Our Site is intended for a general audience and is not deliberately directed towards children.

We do not knowingly collect personal information from children in circumstances where applicable law prohibits such collection.

If you believe that a child has provided personal information to us inappropriately, please contact us. Where we are legally required to do so, we will take reasonable steps to investigate and delete the information.

14. Third-Party Websites and Services

Our Site may contain links to websites, applications, social media platforms, or other services operated by third parties.

If you follow a third-party link, that third party may collect and use information about you according to its own privacy policy.

We are not responsible for the privacy practices, security, content, or policies of third-party websites or services that we do not control.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, technology, services, legal requirements, or data processing practices.

When we make changes, we will update the “Last updated” date at the top of this page.

Where appropriate, we may also provide additional notice of significant changes.

We recommend reviewing this Privacy Policy periodically so that you remain informed about how we handle personal information.

16. Contact Us

If you have questions about this Privacy Policy, want to exercise your data protection rights, or have concerns about how your personal information is being handled, please contact us.

Broken Planet Market Ltd

Email: support@brokenplanetclothing.co.uk

Website: https://brokenplanetclothing.co.uk/

Registered address: 2nd Floor National House, 60-66 Wardour Street, London, United Kingdom, W1F 0TA 

We aim to handle privacy enquiries fairly, transparently, and within the timeframes required by applicable law.

Your Privacy Matters

We want shopping with Broken Planet Market to be a straightforward and trusted experience. We therefore aim to collect only the information we reasonably need, use it responsibly, protect it appropriately, and respect the privacy choices available to you under applicable law.