Privacy & Cookie Policy

Effective date: 10 June 2026

1. Who we are

Brain Bombs is operated by Neuro Nourish Limited, trading as Brain Bombs, a company registered in England and Wales (company number 15312294), with its registered office at 2 Reedholm Villas, London, England, N16 9LP ("we", "us", "our"). We are the data controller responsible for your personal data. You can contact us about anything in this policy at hello@brain-bombs.com.

This policy explains what personal data we collect when you visit brain-bombs.com, place an order, subscribe to our products or emails, or contact us — and how we use, share and protect it. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The data we collect

• Identity and contact data — your name, email address, phone number, billing and delivery address.
• Transaction data — details of products you have purchased, payment method and order history. We do not store full card details; payments are processed securely by our payment providers.
• Account data — login details and preferences if you create an account or manage a subscription.
• Marketing data — your preferences for receiving emails from us, and how you interact with our emails.
• Technical data — IP address, browser type, device information and how you use our website, collected via cookies and similar technologies.
• We do not knowingly collect data from anyone under 18, and our products are sold to adults only.

3. How and why we use your data

We only use your personal data where the law allows us to. Most commonly:

• To fulfil your order (legal basis: performance of a contract) — processing payment, arranging delivery, sending order and shipping confirmations, and providing customer service.
• To manage your subscription (contract) — taking recurring payments, sending renewal reminders and managing changes or cancellations.
• To send you marketing emails (consent, or soft opt-in for existing customers) — news, offers and content from Brain Bombs. You can unsubscribe at any time using the link in any email or by contacting us.
• To improve our website and products (legitimate interests) — analytics, troubleshooting and understanding how customers use our site.
• To meet our legal obligations (legal obligation) — including tax, accounting and food safety record-keeping.
• We do not use your personal data for automated decision-making or profiling that produces legal effects.

4. Who we share your data with

We never sell your personal data. We share it only with trusted service providers who help us run Brain Bombs, and only to the extent needed:

• Ecommerce platform — Shopify, which hosts our store and processes orders.
• Payment providers — such as Shopify Payments, PayPal and Apple Pay, who process your payment securely.
• Fulfilment and delivery partners — who pick, pack and deliver your order.
• Email marketing platform — Klaviyo, which manages our email communications.
• Analytics providers — who help us understand website performance.

All providers are required to keep your data secure and use it only on our instructions. Where a provider processes data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement / standard contractual clauses.

5. How long we keep your data

We keep your data only as long as necessary for the purposes it was collected. Order and transaction records are kept for six years to meet tax and accounting obligations. Marketing data is kept until you unsubscribe or ask us to delete it. You can request deletion of your data at any time (see section 6).

6. Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten"), where there is no overriding reason for us to keep it.
• Restrict or object to our processing of your data.
• Data portability — receive your data in a usable format.
• Withdraw consent at any time where we rely on consent (for example, marketing emails).

To exercise any of these rights, email hello@brain-bombs.com. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, although we would welcome the chance to resolve any concern with you first.

7. Cookies

Our website uses cookies and similar technologies:

• Essential cookies — required for the site to function, including your shopping basket and secure checkout. These cannot be switched off.
• Analytics cookies — help us understand how visitors use the site so we can improve it. Used only with your consent.
• Marketing cookies — used to measure the effectiveness of our marketing and show relevant content. Used only with your consent.

You can manage non-essential cookies through the cookie banner when you first visit the site, and at any time through your browser settings. Blocking essential cookies may affect how the site works.

8. Security

We use appropriate technical and organisational measures to protect your data, including encrypted (SSL) connections across the site and secure, PCI-compliant payment processing. No online transmission is ever completely secure, but we take protecting your data seriously.

9. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised effective date. If the changes are significant, we will let you know by email.

10. Contact us

Questions about this policy or your data: hello@brain-bombs.com