Privacy Policy

The aim of the Privacy Policy (“Policy”) is to provide you with information on how we collect and process your personal data. It sets out how we use and protect any information you give to us and which is collected by us in relation to your use of this website (the “Site”) including any online facilities, tools, services or information that we make available through the Site which form part of the Site.

References in this Policy to the Site include www.ancientandbrave.earth and www.ancientandbrave.com and all associated web pages for both sites. This Site and any other means of collecting personal data are controlled by Made By Brave Limited (trading as Ancient + Brave) and this includes all references to our subsidiary company Made by Brave Ireland Limited) together referred to as “we”, “us” or “our” throughout this Policy.

Made by Brave Limited is a company registered in England with company registration number 10778325 and whose registered office is at Riverside Centre, Railway Lane, Lewes, BN7 2AQ, United Kingdom. Made By Brave Ireland Limited is a company registered in Ireland with company registration number 685197 and whose registered office is 1 Castlewood Avenue, Rathmines, Dublin 6, D06 H685.

Made By Brave Limited is the data controller of your personal data and is responsible for the collection, use, disclosure, retention, and protection of your personal information in accordance with the General Data Protection Regulation (GDPR).

We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this Site then you can be assured that it will only be used in accordance with this Policy.

DATA PROTECTION CONTACT

Made by Brave Limited has appointed a Data Protection Contact responsible for overseeing questions in relation to this Policy. If you have any questions about this Policy, including requests to exercise your legal rights, please contact:

Made by Brave Limited (trading as Ancient + Brave) Riverside Centre, Railway Lane, Lewes, BN7 2AQ, United Kingdom. Email: hello@ancientandbrave.eu

You should read this Policy carefully before using the Site so that you are fully aware of how and why we are using any data. By visiting the Site or purchasing something from us you agree to be bound by this Policy and the documents referred to in them. This Privacy Policy replaces all previous versions. We may update this Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. The latest version will always be available at https://ancientandbrave.earth/privacy-policy.

This Policy describes our collection, use, disclosure, retention and protection of your personal data. By navigating to the Site using the Site, by transacting and registering an Account, you are agreeing to the terms of this Policy.

We collect, process and retain personal information from you and any devices you may use when you navigate to the Site, by transacting, by registering an account and otherwise interacting with us.

We capture customer data, purchase data, browsing behaviour so we can fulfil any orders placed, optimise and personalise your experience and tailor any emails we may send you if you consent.

The personal information we collect includes the following:

• Personal information including payment related information you give us when you register or purchase through the Site;
• Content that you generate when interacting with any of our team including details we require to contact you and verify your identity;
•  Device identifiers such as IP addresses, cookie IDs, IDFAs and other device identifiers as well as geo location information, loT technologies and connection information such as statistics on your page views, traffic to and from the sites, referral URL, ad data, your browsing history, hashed email addresses and your web log info.

If you provide us with personal data about someone else you must only do so with their explicit and prior consent.

We use the personal information for purchases, payments and customer support, fulfilment and to contact you about your account to enable us to perform our contract with you.

We also use personal information to provide you with more personalised customer service, provide you with personal advertising and marketing and detect, prevent and investigate fraudulent or illegal activities.

To help us personalise your experience, we process personal information relating to your interaction with the Site. This processing constitutes profiling under GDPR and we process your personal data in this way to provide you with personalised advertising and marketing.

We retain your personal information for as long as it is necessary and relevant for our operations. In addition we may retain personal information from closed accounts to comply with legal requirements, prevent fraud and resolve disputes. Where a legal requirement obliges the retention of personal data for a specific minimum period we will retain data for at least that period. When we determine the maximum retention duration of any personal data we hold we do so with regard to our legitimate interests to retain data, the potential risk of harm from unauthorised use of that data, the sensitivity of the personal data and our obligations under GDPR.

When you place an order with us we will require your name, email address, credit or debit card, phone and address details and you may be asked to create an Account (please see our Terms and Conditions for further information). An Account means the personal information and payment information used by you on our Site. We will only use this information for the purposes of managing your order or your usage of the Site.

We may also be required to enter your personal information for competitions so that we can notify you of results, to email you with updates, news and special offers or to respond to your questions or comments.

LAWFUL BASIS FOR PROCESSING

Under the UK GDPR, we must have a lawful basis for processing your personal information. The table below explains how we use your data and our lawful bases:

HEALTH - GOALS QUIZ 

We offer a short quiz to help determine which of our health-goals and product options may be most relevant to you. When you complete the quiz, we collect your answers (which may include information about your wellness, lifestyle or health goals) and use them to generate personalised product or content recommendations. To help us improve our quiz tool, user experience and website (analytics). Where you have opted in, to send you marketing communications relevant to your health-goals.

We collect your responses to the quiz questions along with any identifiers (such as a user account, email address if you are logged in, device identifiers). Our lawful basis for processing is legitimate interests (to provide you with a better, personalised service).

Where your quiz responses include health-related information (which is special category data under the UK GDPR) we rely on explicit consent. You will be asked to give your consent before submitting any such health-related responses. We use your quiz responses to generate tailored products and recommendations. These recommendations are intended to assist you in your health goals only. We retain your quiz responses in identifiable form in accordance with legal requirements and in line with our retention schedule. After this period, data is anonymised or deleted.

You can access, correct or delete your quiz responses. If you submitted health-related answers and gave consent, you can withdraw that consent at any time (this will not affect the lawfulness of processing before you withdraw). To exercise any of these rights, please contact us at hello@ancientandbrave.eu. 

Any personal data you submit will be retained by us for as long as you use the services provided on the Site. Unless we are obliged or permitted by law to do so, we will not disclose any information processed by us to any third party (apart from our subsidiary company Made By Brave Ireland Limited). We do not, and never will, disclose your personal information to third parties for marketing purposes.

If you register on the Site or you make a purchase we may also contact you by email or text with further information or updates concerning our products.

It is our policy to allow users to unsubscribe from our regular emails at any time. You can do this by sending an email to hello@ancientandbrave.eu requesting your information to be removed from the mailing list.

In addition if you do not wish to receive marketing communications from us or you wish to change the marketing communications you are subscribed to you can do so from the link in the footer of the email you received or by contacting us at hello@ancientandbrave.eu.

If you have any questions, wish to access, update or delete information, wish to opt out of receiving future communications please get in touch and send us an email to hello@ancientandbrave.eu.

If you have asked us to stop sending emails and this hasn’t happened it may be because the email address to which we are sending them is not the same as the address you sent your request from. Please check the address we are using and include this information in your request

Made By Brave Limited and those people or companies employed by us who help build and run this Site and its contents and services will process and use your personal information in order to respond to feedback such as sorting out problems and improving our services.

In addition we may employ the services of other parties for dealing with matters that include, but not limited to, payment handling, supply and fulfilment, delivery of purchased items, search engine facilities, advertising and marketing. The providers of such services may have access to certain personal data provided by Users of this Site. Any data used by such parties is used only to the extent required by them to perform the services that we request. Any use for other purposes is strictly prohibited.

In addition we may need to share data with our professional service providers in order to comply with our legal obligations.

Beyond this, we will not share your information with any other company (apart from Permitted Third Party) without your consent unless we are required to do so by law, if you have won a prize or if you have made a request for specific information. By entering competitions on the Site where you can receive third party prizes you give your consent to share your details with the provider of the third party prize. We will never sell your information to any other company.

You may access certain areas of the Site without providing any data at all. However, to use all of the services available on the Site you may be required to submit account information or other data.

Data security is of great importance to us and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure data collected online.

We protect your information using measures that reduce the risks of loss, misuse, unauthorised access, disclosure and alteration. We minimise the amount of personal information we disclose to what is directly relevant and necessary for that purpose.

Our on-line store is hosted on Shopify Inc. They provide us with the online ecommerce platform that allows us to sell our products to you. Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.

If you choose a direct payment gateway to complete your purchase then Shopify stores your credit card details. It is encrypted through the Payment Card Industry Data Security Standard. Shopify is Level 1 PCI compliant and uses 128 bit SSL certificates to keep your details secure. Your purchase transaction is stored only as long as is necessary to complete your purchase transaction. Once completed your purchase transaction is deleted.

We use cookies to collect information about the pages you view, the links you click and other actions you take on our services or e-mail content. The main objective is for us to provide you with a better Site and service by enabling us to monitor which pages you fine useful and which you do not. For further information please see our Cookie Policy.

We may, from time to time, expand or reduce our business and this may involve the sale of certain divisions or the transfer of control of certain divisions to other parties. data provided by you will, where it is relevant to any division so transferred, be transferred along with that division and the new owner or newly controlling party will, under the terms of this Policy, be permitted to use the data for the purposes for which it was supplied by you.

We reserve the right to change this Policy as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the Site and you are deemed to have accepted the terms of the Policy on your first use of the Site following the alterations.

IF YOU ARE UNDER 18

If you are under the age of 18 and want to receive news from Ancient + Brave then we ask that a parent or guardian register their details on your behalf. We ask this so that as a child, your personal details are protected and also to ensure that you have parental consent to take part.

Our Site may contain links to other websites of interest. Once you have used these links to leave our Site you should note that we do not have any other control over the other Site (apart from our sister company Made By Noble (www.madebynoble.earth). Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this Policy. We recommend you review the privacy statement applicable to the website in question.

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights in relation to your personal data: 

• Right to be informed – to receive clear information about how we use your personal data.
• Right of access – to request a copy of the personal data we hold about you. 
• Right to rectification – to have incomplete or inaccurate personal data corrected. 
• Right to erasure – to request that we delete your personal data in certain circumstances.
• Right to restrict processing – to request that we stop using your personal data while retaining a copy. 
• Right to object – to object to processing of your personal data, including for direct marketing. 
• Right to data portability – to request your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller. 
• Right to withdraw consent – where we rely on consent to process your personal data, you may withdraw your consent at any time. This does not affect the lawfulness of processing carried out before withdrawal. 
• Rights relating to automated decision-making – to request human review of decisions made solely by automated means (if applicable).

If you wish to exercise any of your rights, please contact us at hello@ancientandbrave.eu

You also have the right to raise a complaint with the Local Data Protection Authority, the list can be found here.