Privacy Policy
Privacy Policy
How Pure Defiance collects, uses, and protects your personal data.
Last Updated: 08 March 2026
ICO Registration Number: ZC101536
This Privacy Policy explains how Pure Defiance collects, uses, stores, and protects personal information when you use our website, purchase products, or engage with our services.
1. Who We Are
Pure Defiance is operated by Brett Cooke, a sole trader based in the United Kingdom.
Email: info@puredefiance.co.uk
Pure Defiance acts as the data controller for the purposes of applicable UK data protection legislation including the UK GDPR and Data Protection Act 2018.
2. Data Minimisation
Pure Defiance only collects personal data that is necessary to provide our services, process orders, communicate with customers, and comply with legal obligations.
We do not collect unnecessary personal information and limit data collection to what is relevant for the intended purpose.
3. What Data We Collect
- Name
- Email address
- Delivery and billing address
- Phone number (if provided)
- Order history and purchase information
- Payment confirmation details (processed securely through payment providers)
- Website usage data through analytics tools
4. Lawful Basis for Processing
We process personal data under the lawful bases defined in UK GDPR, including:
- Contract: to process and deliver orders placed through our website.
- Legal obligation: to comply with accounting, tax, and regulatory requirements.
- Legitimate interests: to operate and improve our services and website.
- Consent: where you have opted in to receive marketing communications.
5. How We Use Your Data
Your data may be used to:
- Process and fulfil orders
- Provide customer support
- Send order confirmations and delivery updates
- Improve website functionality and performance
- Comply with legal obligations
- Prevent fraud or misuse of our services
6. Email Marketing & PECR Compliance
If you subscribe to our newsletter or marketing communications, we may send emails about promotions, products, or updates.
Marketing communications are sent only where:
- You have provided explicit consent, or
- You are an existing customer and communications relate to similar products or services.
This is in accordance with the UK Privacy and Electronic Communications Regulations (PECR).
You can unsubscribe from marketing emails at any time using the unsubscribe link included in all marketing communications.
7. Third-Party Data Processors
Pure Defiance may share limited personal data with trusted third-party service providers where necessary to operate our business.
Examples include:
- Payment processors (such as PayPal or Stripe)
- Delivery couriers
- Website hosting providers
- Email marketing platforms
- Analytics providers
These providers process personal data only on our behalf and are required to comply with applicable data protection regulations.
8. International Data Transfers
Some third-party services used by Pure Defiance may process data outside the United Kingdom or European Economic Area.
Where this occurs, appropriate safeguards are implemented, such as Standard Contractual Clauses or equivalent legal mechanisms to ensure personal data remains protected.
9. Data Security
Pure Defiance takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.
This includes secure website hosting, encrypted payment processing through third-party providers, and restricted access to customer information.
10. Data Breach Procedures
If a data breach occurs that may pose a risk to individuals, Pure Defiance will investigate the incident and take appropriate action.
Where required by law, we will notify the Information Commissioner’s Office (ICO) and affected individuals in accordance with UK GDPR requirements.
11. Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes outlined in this policy or to comply with legal obligations such as accounting or tax requirements.
12. Your Data Protection Rights
Under UK data protection law, you have the right to:
- Request access to your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict processing of your data
- Object to data processing
- Request transfer of your data to another provider
Requests relating to these rights can be submitted by contacting us using the details below.
13. Right to Complain
If you believe your data protection rights have been breached, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
Website: https://ico.org.uk
14. Contact
If you have questions about this Privacy Policy or how we handle your personal data, please contact: