Privacy policy

Blush & Brush is a trading name of Blush & Brush Ltd. Our postal address is Suite A, 82 James Carter Road, Mildenhall, Suffolk IP28 7DE, and you can reach us at sash@blushbrush.co.uk.

We are the data controller for the information described here, which means we decide why and how it is used.

When you buy a box: the name, email address and delivery address you give at checkout, and what you ordered.

When you book a paint night:your name, email address, phone number if you give one, how many seats you booked, and whether you agreed to hear from us about future events. If you start booking a paint night and don’t finish, we may send you one reminder email about it — you can say no thanks on the form, or unsubscribe from the email.

If someone passes you a ticket:the name and email address they give us for you. We use them only to put the booking in your name, send you the ticket, and let you see it in your account. We don’t add you to any mailing list. We also keep a record of who passed the ticket on and to whom.

On the night: our venue staff note who attended and any drinks ordered, so the evening can be run and paid for.

If you work with us: the name, email address and password needed for a staff account.

We never see your card details. Payments are handled entirely by our payment provider. Your card number is given to them, not to us, and never touches our systems.

To give you what you paid for. We cannot post a box or hold a seat without knowing who you are and how to reach you. The legal basis is performance of our contract with you.

To email you about future nights. Only if you ticked the box. The legal basis is your consent, and you can withdraw it at any time — see below.

To keep proper business records. Tax law requires us to keep records of what we sold and to whom. The legal basis is our legal obligation.

To run and protect the business. Understanding which nights sell, and preventing fraudulent orders. The legal basis is our legitimate interests, and we keep this to what is reasonably necessary.

We do not sell your information, and we do not share it for anyone else’s marketing. We use a small number of suppliers to run the business, each of which handles data on our instructions:

• Our payment provider — takes payments and issues receipts.
• Our hosting providers — run the website and store your booking.
• Our email provider — sends your confirmations and, if you agreed, our emails about future nights.
• Our delivery partner — receives the name and address needed to deliver a box.
• The venue hosting a paint night — sees the guest list for that night so they can run it.

Some of these suppliers operate outside the UK. Where information is transferred abroad, it is protected by the safeguards UK data protection law requires, such as standard contractual clauses.

Order and booking records are kept for six years after the transaction, which is the period tax law requires.

If you have agreed to marketing emails, we keep your details until you unsubscribe or ask us to stop.

Staff accounts are removed when someone stops working with us.

We use a small number of strictly necessary cookies. One keeps you signed in if you have a staff account; another remembers what is in your basket. Without these the site cannot work, so they are not optional and we do not ask for consent to set them.

If you reach our shop from one of our ads or Pinterest pins, the link’s campaign tag (for example “meta, christmas boxes”) is kept in your browser for that tab only, for up to seven days, so that if you order a box we can see which ad it came from. It is not a cookie, is never sent anywhere on its own, holds nothing about you, and is not kept at all if you say no on our cookie banner.

Our payment provider sets cookies on its own payment pages to prevent fraud.

With your permission only, we use the Meta Pixel (Meta Platforms Ireland Ltd, which runs Facebook and Instagram) and the Pinterest tag (Pinterest Europe Ltd). They set cookies and tell Meta and Pinterest which pages you visit here and whether you book or buy a box, so we can see which of our posts and ads work and show our paint nights and boxes to people who have already visited. Meta and Pinterest may use this data under their own privacy policies. We ask before either loads, they stay off if you say no or ignore the banner, and you can change your mind at any time with “Cookie settings” at the bottom of every page.

You can ask us to:

• give you a copy of the information we hold about you
• correct anything that is wrong
• delete your information, where we are not required to keep it
• stop or limit how we use it
• send it to you, or to someone else, in a portable format
• stop emailing you, at any time and for any reason

Email sash@blushbrush.co.uk and we will respond within one month. There is no charge.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113. We would rather you came to us first so we can put it right.

Tickets are non-refundable and can’t be moved to another night, but can be passed on to someone else any time before the event. The full terms are on our terms page.

If we change how we use your information we will update this page and change the date at the top. If the change is significant we will tell you directly.