Privacy

BRUTAL is operated from Dublin, Ireland. This page is a plain account of what we collect and why. We follow the GDPR.

What we collect

• Waitlist: your email, and the time you joined. Stored so we can tell you about drops and codes. You can ask to be taken off at any time.
• Orders: your name, email, phone if you gave one, shipping address, the pieces and sizes you ordered, any promo code, and the amount. We need this to make the order, take payment, ship it, and handle returns.
• Payment: we never collect card details on our own forms. When Stripe is switched on, Stripe is the payment controller for your card data, under their own privacy policy.
• Technical: our host, Vercel, receives standard server logs (IP address, browser, pages requested) to run and secure the site. We do not run advertising cookies or a marketing pixel on this site today.

Where it is stored

Order and waitlist records are stored in a private Vercel Blob store. They are not public. We keep order records for as long as tax and consumer-law rules require, and waitlist emails until you ask us to delete them or we close the list.

Who we share it with

Only people and services who need it to do the job: our production partner, the courier, Vercel (hosting and storage), and Stripe (payments, when connected). We do not sell your data. We will share it if the law requires us to.

Your rights

You can ask for a copy of your data, ask us to correct it, delete it (where we do not have to keep it), or restrict or object to our use of it. You can also complain to the Irish Data Protection Commission at dataprotection.ie. To use any of these rights, write to us from the email on your order or waitlist.

Last updated 12 November 2026.