Privacy Policy & Data Sovereignity

Last Updated: May 12, 2026

Welcome to the BRIRISH LIMITED (the "Company", "We", "Us", "Our") Privacy Policy. This document is a comprehensive declaration of our commitment to the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). As a leading provider of food delivery logistics based in Northern Ireland (Unit 1 Fbic 45 Tullywiggan Road, Cookstown BT80 8SG), the security of your personal information is paramount.

1. Data Collection Categories

We process several types of data necessary for the execution of logistics contracts. This includes:
• Identifiers: Name, IP address, device ID, and delivery address.
• Commercial Information: Transaction history, services purchased, and financial metadata.
• Geolocation Data: Real-time location during active delivery tracking (only with explicit user consent).
• Biometric Data: Only applicable to delivery personnel for secure hub access.

2. Legal Basis for Processing

Under Article 6 of the GDPR, we process data based on:
A) Performance of a Contract: To deliver food and manage logistics.
B) Legal Obligation: To comply with UK tax and safety regulations.
C) Legitimate Interests: To improve our delivery algorithms and security protocols.
D) Consent: For marketing and non-essential tracking.

3. Data Retention and Deletion

We do not store data longer than necessary. Commercial transaction records are retained for 7 years to satisfy HMRC requirements. Geolocation data is obfuscated within 24 hours of delivery completion and deleted after 30 days unless subject to a legal hold or incident investigation. You have the "Right to Erasure" (Article 17 GDPR) which you may exercise by contacting dpo@legacywealth.sbs.

4. International Data Transfers

While our primary operations are in Cookstown, Northern Ireland, we may utilize cloud service providers based in the EEA or USA. All such transfers are protected by Standard Contractual Clauses (SCCs) as approved by the Information Commissioner's Office (ICO). We ensure that third-party jurisdictions provide an 'adequate level of protection' for your rights.