Privacy Policy

Last updated: 2026-06-03

Who we are

SwissBrush is operated by Elhussini Limited, company number 16379598, registered office Lytchett House, North Walls, Wareham, England, BH20 4QN. We are the data controller for the personal data you give us when you use this site or buy from us. You can reach us at privacy@swiss-brush.com.

What we collect, and why

• Order details — name, email, shipping address, phone number, and the items you bought. We need these to fulfil and deliver your order (lawful basis: performance of a contract).
• Payment information — entered directly on Stripe and never received by us. We only receive a tokenised reference and the last 4 digits of your card. (Lawful basis: performance of a contract.)
• Email address for marketing — only if you voluntarily enter it into our 10%-off popup or subscribe via the footer. (Lawful basis: consent. You can unsubscribe at any time.)
• Technical data — IP address and basic server logs, retained for up to 30 days for security and abuse detection. (Lawful basis: legitimate interest.)

What we don't do

We don't sell or rent your data to anyone. We don't use third-party advertising trackers. We don't profile you.

Who we share data with

• Stripe Payments Europe Limited — to process card payments. See stripe.com/gb/privacy.
• Royal Mail — to deliver your parcel. We share your name, shipping address, and email (for tracking notifications).
• Hetzner Online GmbH — our cloud hosting provider, on whose servers our application and database run. See hetzner.com/legal/privacy-policy.
• HMRC and other authorities — where we are required by law (for example, to keep accounting records).

How long we keep your data

Order records are retained for 6 years to satisfy UK accounting and tax requirements. Marketing-list subscriptions are kept until you unsubscribe.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to ask us to correct or delete it, to object to processing, and to data portability. Email privacy@swiss-brush.com and we'll respond within 30 days. If you're unhappy with how we handle your request, you can complain to the Information Commissioner's Office at ico.org.uk.

International transfers

Our servers are located in Germany (Hetzner). Stripe may process payment data in the EEA, the UK, and the United States under appropriate UK GDPR safeguards.