This policy explains how Brothercarp Ltd ("Brothercarp", "we", "us") collects, uses and protects your personal data when you visit brothercarp.com, join our mailing list, buy a product, or become an Academy member. We are committed to handling your data lawfully and transparently under the UK GDPR and the Data Protection Act 2018.
On this page
Who we areWhat we collectWhy & lawful basisMarketingWho we share withRetentionYour rightsContact1. Who we are
Brothercarp Ltd is the data controller for the personal data described here. Registered in England and Wales, Company No. [COMPANY NUMBER], registered office [REGISTERED OFFICE ADDRESS]. You can reach us at info@brothercarp.com.
2. What data we collect
- Contact and account data — your name and email when you join the mailing list, create an Academy account, or use the contact form.
- Order and payment data — what you bought and billing details. Card payments are processed by our payment provider; we do not store your full card details.
- Membership data — your Academy subscription status and activity.
- Usage and device data — pages visited, approximate location and device type, collected through cookies and analytics (see our Cookie Policy).
3. Why we use it, and our lawful basis
- To deliver what you bought or signed up for (orders, downloads, Academy access) — lawful basis: performance of a contract.
- To send marketing emails you have asked for — lawful basis: your consent, which you can withdraw any time.
- To run and improve the site and our business (security, analytics, responding to enquiries) — lawful basis: our legitimate interests, balanced against your rights.
- To meet legal and tax obligations — lawful basis: legal obligation.
4. Marketing emails
Our mailing list is run through MailerLite. New subscribers confirm by clicking a link in a confirmation email (double opt-in), so you only ever receive email you have actively asked for. Every email includes a one-click unsubscribe, and you can opt out at any time.
5. Who we share your data with
We never sell your data. We share it only with the trusted providers that help us run the business, each acting on our instructions:
- MailerLite — email marketing.
- Our payment provider ([Stripe / PayPal / Lemon Squeezy — confirm]) — processing payments.
- Our hosting and platform providers ([Netlify and others — confirm]) — serving the website.
- Analytics ([provider — confirm]) — understanding site usage.
Some providers are based outside the UK. Where data is transferred internationally, it is protected by appropriate safeguards (such as UK approved standard contractual clauses or an adequacy decision).
6. How long we keep it
We keep personal data only as long as needed for the purpose it was collected, or as long as the law requires. Order and tax records are kept for [6 years — confirm]; marketing data is kept until you unsubscribe or ask us to delete it.
7. Your rights
Under UK data protection law you have the right to: access your data; have it corrected or erased; restrict or object to its use; receive a copy in a portable format; and withdraw consent at any time. To exercise any of these, email info@brothercarp.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Security, children and changes
We use appropriate technical and organisational measures to protect your data. Our products and membership are intended for adults; we do not knowingly collect data from children under 16. We may update this policy from time to time, and the latest version will always live on this page.
9. Contact
Questions about your data or this policy: info@brothercarp.com, Brothercarp Ltd, [REGISTERED OFFICE ADDRESS].