Privacy policy
Privacy Policy
bostoncone.com · Scotland Loves Boston · Version 1.0 · August 2026
1. Who we are
At MadeBrave, we respect your privacy, and we want to be as transparent as possible about how we collect and use your information when you visit bostoncone.com (the “Site”), buy from our shop, share your photos and stories, or follow the Boston Cone's adventures.
The Site is operated by Made Brave Ltd, a company registered in Scotland (company number SC414313) with its registered office at The Social Hub, 15 Candleriggs Square, Glasgow G1 1TQ, United Kingdom. We are the “data controller” for personal information collected through the Site.
We will never sell your data. If you have any questions about this policy or your information, contact us at data@madebrave.com.
This policy sits alongside our Cookie Policy, which explains the cookies used on the Site, and our Terms & Conditions, which cover purchases.
2. The information we collect
Information you give us
– When you place an order: your name, email address, delivery address, phone number and order details.
– When you pay: your payment is handled by Shopify and its payment providers. We never see or store your full card details.
– When you create an account: your login details and order history.
– When you join our mailing list: your email address.
– When you contact us or use the contact form: your name, contact details and whatever you choose to tell us.
– When you share photos, videos or stories with the campaign: the content you submit, and any personal information it contains.
Information we collect automatically
When you browse the Site, we collect some information through cookies and similar technologies — such as your IP address, device and browser type, and how you move around the Site. Our Cookie Policy explains what's used and the choices you have.
3. How and why we use your information
We only use your information where the law allows us to. In practice, that means:
– To fulfil your order (our contract with you) — processing payment, making your items, delivering them, and handling returns, refunds and customer service.
– Because you've consented — sending you email updates about the Boston Cone if you've signed up (you can unsubscribe at any time), setting non-essential cookies, and using the photos and videos you share with the campaign.
– Because we have a legitimate interest — understanding how the Site is used so we can improve it, preventing fraud, protecting the security of the Site, and telling the story of the campaign.
– Because the law requires it — keeping records of sales for tax and accounting purposes.
4. Who we share your information with
To run the shop and the campaign, we share limited information with a small number of partners, each of which is only given what it needs to do its job:
– Printful — our fulfilment partner. We share your name, delivery address and order details so your items can be printed and shipped to you.
– Shopify — the platform the Site runs on. Shopify processes orders, payments and Site data on our behalf.
– Payment providers and delivery carriers — to take payment and deliver your order.
– Our email platform — to send campaign updates to people who've signed up.
– Professional advisers, and public or regulatory authorities — where we're legally required to, or to protect our legal rights.
Direct donations are made through JustGiving on its own website — we don't collect or hold donation data. Donations go to SAMH and MAMH.
We may share information that has been anonymised and aggregated — for example, how many orders came from Boston — as this is no longer personal data.
5. Where your information is held
Some of our partners — including Shopify and Printful — process data in the United States and other countries outside the UK. Where that happens, we make sure appropriate safeguards required by UK data protection law are in place, such as recognised international data transfer agreements.
6. How long we keep it
We keep your information only as long as we reasonably need it. Order and transaction records are kept for six years to meet tax and accounting requirements. Mailing list details are kept until you unsubscribe. Photos and videos shared with the campaign are kept for as long as we're using them in campaign materials — and you can ask us to stop using yours at any time.
7. Your rights
You have rights over your information under UK data protection law.
In particular, you can:
– Ask us to confirm whether we're processing your information, and ask for a copy of it.
– Ask us to correct it if it's wrong.
– Ask us to delete it.
– Ask us to restrict how we use it, or object to us using it.
– Ask us to provide it to you or another organisation in a portable format.
– Withdraw consent at any time, where consent is what we rely on — including unsubscribing from emails or asking us to stop using content you've shared.
To use any of these rights, email data@madebrave.com and we'll respond within one month. These rights apply in most, but not all, circumstances — for example, we can't delete order records we're legally required to keep.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. If you live outside the UK, you may also have rights under the privacy laws of the country or state where you live, and you can contact us about those in the same way.
8. Children
The Site sells youth-sized products, but it is intended for use by adults. We don't knowingly collect personal information from children — orders and submissions should be made by someone aged 16 or over.
9. Security
We're committed to keeping your information safe, and we use physical, technical and administrative measures to prevent unauthorised access or use — including the security built into the Shopify platform, which handles payments to recognised industry standards (PCI DSS).
10. Changes to this policy
We keep this policy under review and will update it from time to time — for example if we add new tools or partners. The current version, with its date, will always be published on the Site.
11. Contact
Made Brave Ltd (trading as Scotland Loves Boston)
The Social Hub, 15 Candleriggs Square, Glasgow G1 1TQ, United Kingdom
Company number: SC414313 (registered in Scotland)
Privacy queries: data@madebrave.com · General queries: traffic@madebrave.com