Privacy policy
KILLABRUSH® | Last updated: June 2026
Introduction
KILLABRUSH® operates killabrush.com and all related information, content, features, tools, products and services (the "Services"). The Services are hosted by Shopify Inc., which enables us to provide them to you.
This Privacy Policy explains how KILLABRUSH® collects, uses, stores and discloses your personal information when you visit, use, or make a purchase using the Services or otherwise communicate with us. It is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in it.
Who We Are — Data Controller
For the purposes of applicable data protection laws, KILLABRUSH® is the data controller of your personal information.
KILLABRUSH HOLDINGS LIMITED
Registered in England and Wales. Company number: 15677457
Registered office: 2 Greenwood Avenue, Chester, CH4 7HH, United Kingdom
Email: customerservice@killabrush.com
Personal Information We Collect or Process
When we use the term "personal information", we are referring to information that identifies or can reasonably be linked to you. Personal information does not include information that is anonymous or has been de-identified so it cannot reasonably be linked to you.
Depending on how you interact with the Services, we may collect or process the following categories of personal information, including inferences drawn from this personal information:
• Contact details — name, address, billing address, shipping address, phone number, and email address
• Financial information — payment card information, financial account information, transaction details, form of payment, payment confirmation, and other payment details. We do not store full card numbers; payment processing is handled securely by our payment providers.
• Account information — username, password, security questions, preferences and settings
• Transaction information — items you view, add to your cart, purchase, return, exchange or cancel, and your past transaction history
• Communications — information you include when contacting us, for example, customer support enquiries or trade account applications
• Device information — browser type, operating system, device information, IP address, and other unique identifiers
• Usage information — how and when you interact with or navigate the Services, including pages visited and time spent on site
Personal Information Sources
We may collect personal information from the following sources:
• Directly from you — when you create an account, visit or use the Services, place an order, submit a trade account application, communicate with us, or otherwise provide us with your personal information
• Automatically through the Services — from your device when you use our Services or visit our website, and through the use of cookies and similar technologies (see our Cookie Policy for details)
• From our service providers — when we engage them to enable certain technology and when they collect or process your personal information on our behalf
• From our partners or other third parties — for example, payment processors or advertising platforms
How We Use Your Personal Information
We use your personal information for the following purposes. Where required by UK GDPR, we identify the lawful basis on which we rely.
To provide, fulfil and improve the Services
Lawful basis: Contractual necessity (performance of a contract with you); legitimate interests.
We use your personal information to process and fulfil your orders, process payments, arrange shipping and returns, send order confirmations and account notifications, remember your preferences, and create a personalised shopping experience. This includes recommending products related to your purchases.
Marketing and advertising
Lawful basis: Consent (for direct marketing emails); legitimate interests (for on-site personalisation where no consent is required).
With your consent, we send marketing, advertising and promotional communications by email. We may also show you online advertisements for our products on other websites, including based on your purchase history and activity on the Services. You can withdraw your consent at any time — see "Managing Communication Preferences" below.
Security and fraud prevention
Lawful basis: Legitimate interests; legal obligation.
We use your personal information to authenticate your account, provide a secure payment and shopping experience, and detect, investigate or take action regarding possible fraudulent, illegal, unsafe or malicious activity. If you register an account, you are responsible for keeping your credentials safe. We strongly recommend you do not share your username or password with anyone.
Communicating with you
Lawful basis: Contractual necessity; legitimate interests.
We use your personal information to respond to your enquiries, provide customer support, and maintain our business relationship with you.
Legal compliance
Lawful basis: Legal obligation.
We use your personal information to comply with applicable law, respond to valid legal process (including requests from law enforcement or government agencies), investigate or participate in civil or legal proceedings, and enforce or investigate potential violations of our terms or policies.
How We Disclose Personal Information
We do not sell your personal information. In certain circumstances, we disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy:
Service providers and fulfilment partners
We share information with the following third parties solely to operate and fulfil orders placed through our Services:
• Shopify Inc. — our e-commerce platform and website host (order data, customer accounts, payment processing infrastructure). See "Relationship with Shopify" below.
• Cleopatra Logistics — our fulfilment and warehousing partner, who receives order and delivery address information to pick, pack and despatch your order
• Royal Mail — standard domestic delivery; receives your name and delivery address
• DPD — express domestic delivery; receives your name, delivery address and contact details for delivery notifications
• DHL — international delivery; receives your name, delivery address and contact details
• Klaviyo Inc. — our email marketing platform. If you have consented to marketing emails, your email address and purchase history may be shared with Klaviyo to personalise communications
• Payment processors (Stripe / Shopify Payments / PayPal) — to process payments securely. We do not store payment card details
Business and marketing partners
We may share your information with business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalised advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices.
Depending on where you reside, you may have a right to direct us not to share information about you for targeted advertising based on your online activity with different merchants and websites.
Analytics
• Google Analytics — anonymised website analytics data. We use IP anonymisation; data is not shared with Google for advertising purposes
• Shopify Analytics — built-in analytics for purchases, conversions and site performance
Other disclosures
We may also disclose your personal information:
• When you direct, request or otherwise consent to disclosure to a third party
• With our affiliates or otherwise within our corporate group
• In connection with a business transaction such as a merger or acquisition
• To comply with legal obligations, respond to subpoenas, search warrants or similar requests
• To enforce our Terms of Service or other policies, or to protect the rights of our users or others
Relationship with Shopify
The Services are hosted by Shopify Inc., which collects and processes personal information about your access to and use of the Services in order to provide and improve them for you. Information you submit to the Services will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than where you reside.
To help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants and with Shopify.
In these circumstances, Shopify is an independent data controller responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes.
To learn more about how Shopify uses your personal information and to exercise any rights you may have in relation to Shopify's processing, please visit the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
Third-Party Websites and Links
The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on those sites.
Information you share on third-party social networking platforms may be viewable by other users of the Services and/or users of those platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not imply endorsement of the content on those platforms or of their owners or operators.
Children's Data
The Services are not intended to be used by children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the details below and we will take steps to delete it.
We do not knowingly sell or share (as those terms are defined in applicable law) the personal information of individuals under 16 years of age.
Security and Retention of Your Information
We implement appropriate technical and organisational measures to protect your personal information. However, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee absolute security. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.
We retain your personal information for as long as necessary to fulfil the purposes set out in this Privacy Policy, and in accordance with our legal obligations. Our standard retention periods are:
• Order and transaction records — 7 years (required by HMRC for tax compliance)
• Customer accounts — for the duration of the account plus 2 years following closure
• Marketing data — until you unsubscribe or withdraw consent, plus 2 years
• Customer service and communications records — 3 years following resolution
• Legal and compliance records — as required by applicable law
How long we retain personal information may also depend on whether we need it to resolve disputes, enforce contracts, or comply with legal obligations.
International Transfers
We may transfer, store and process your personal information outside the United Kingdom. Some of our third-party service providers (including Shopify, Google and Klaviyo) operate outside the UK.
Where we transfer personal information out of the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the ICO, or transfers to countries with an adequacy decision from the UK Secretary of State. In some cases, Shopify handles these transfers on our behalf; see the Shopify Consumer Privacy Policy for details.
Your Rights and Choices
Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and in certain cases we may decline your request as permitted by law.
Rights available to everyone
• Right of access — to request a copy of the personal information we hold about you
• Right to delete — to request that we delete personal information we hold about you
• Right to correct — to request that we correct inaccurate personal information
• Right of portability — to receive a copy of your personal information in a structured, machine-readable format and, in certain circumstances, to have it transferred to another organisation
• Managing communication preferences — you may opt out of marketing emails at any time by clicking "unsubscribe" in any email we send. If you opt out, we may still send non-promotional emails such as order confirmations and account notifications
Additional rights for UK and EEA residents (UK GDPR / GDPR)
• Right to object — to object to our processing of your personal information for purposes based on legitimate interests or for direct marketing
• Right to restriction — to request that we restrict our processing of your personal information in certain circumstances
• Right to withdraw consent — where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal
• Right to appeal — if we decline to act on a rights request, you may appeal that decision by contacting us using the details below
To exercise any of these rights, please contact us at hello@killabrush.com. We will respond within one calendar month as required by UK GDPR.
We will not discriminate against you for exercising any of your rights.
We may need to verify your identity before processing your request. You may also designate an authorised agent to make requests on your behalf; we will require the agent to provide proof of authorisation, and we may ask you to verify your identity directly with us.
Rights in relation to Shopify's processing
To exercise rights in relation to data processed by Shopify as an independent data controller, please visit the Shopify Privacy Portal.
Complaints
If you have any concerns about how we process your personal information, please contact us in the first instance using the contact details below. We will investigate and respond promptly.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk, by calling 0303 123 1113, or by writing to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
If you reside in the EEA, you may also lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available here.
Cookies
We use cookies and similar tracking technologies on our website to improve functionality, analyse site performance and deliver personalised content and advertising. Please refer to our separate Cookie Policy for full details of the cookies we use, why we use them, and how you can manage your preferences. Our Cookie Policy is available in the footer of our website.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this page, update the "Last updated" date, and provide notice as required by applicable law. We encourage you to review this policy periodically.
Contact Us
Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us:
KILLA HOLDINGS LIMITED
2 Greenwood Avenue,
Chester
CH4 7HH
United Kingdom
Email: customerservice@killabrush.com