Privacy Policy

We are committed to protecting your personal data and respecting your privacy rights.

Last updated: 10 August 2025
Data Controller
W3 Sports Devil Ltd
Company Registration: [To be added]
VAT Number: [To be added]
Privacy Contact: privacy@sportsdevil.co.uk
General Contact: info@sportsdevil.co.uk
ICO Registration: [To be added when registered]
1. What Information We Collect

Personal Information You Provide

  • Name, email address, phone number
  • Billing and delivery addresses
  • Payment information (processed securely by Stripe)
  • Account preferences and communication settings
  • Product reviews and ratings
  • Customer service correspondence

Information Collected Automatically

  • Device information (browser, operating system)
  • Usage data (pages visited, time spent, clicks)
  • IP address and location data
  • Cookies and similar tracking technologies
  • Shopping behavior and preferences
2. How We Use Your Information

Contract Performance

We process your data to fulfill our contract with you:

  • Process and fulfill orders
  • Provide customer support
  • Manage your account
  • Send order confirmations and updates

Consent-Based Processing

With your consent, we use your data for:

  • Marketing communications
  • Personalized recommendations
  • Analytics and website optimization
  • Social media integration

Legitimate Interests

We may process your data for our legitimate business interests:

  • Fraud prevention and security
  • Website performance monitoring
  • Business analytics and improvements
  • Legal compliance and dispute resolution
3. Cookies and Tracking Technologies

We use cookies to improve your browsing experience and provide personalized services. Our cookie categories include:

Essential Cookies

Required for basic website functionality

Always Active
Performance Cookies

Help us understand website usage

Optional
Marketing Cookies

Enable targeted advertising

Optional

You can manage your cookie preferences at any time through our cookie settings banner or by contacting us directly.

4. How We Share Your Information

We do not sell your personal data. We may share information with:

Service Providers

  • Stripe (payment processing)
  • Royal Mail / DPD (shipping)
  • Google Analytics (website analytics)
  • Sentry (error monitoring)
  • Email service providers

Legal Requirements

We may disclose information when required by law or to protect our rights, property, or safety.

Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred as part of the transaction.

5. Your Rights Under GDPR

As a UK/EU resident, you have the following rights regarding your personal data:

Right of Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate or incomplete data

Right to Erasure

Request deletion of your personal data

Right to Restrict Processing

Limit how we use your data

Right to Data Portability

Receive your data in a portable format

Right to Object

Object to certain types of processing

Right to Withdraw Consent

Withdraw consent at any time

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@sportsdevil.co.uk or use our online data request form in your account dashboard. We will respond within 30 days of receiving your request.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

Account DataUntil account deletion
Order History7 years (tax requirements)
Marketing Consent3 years from last interaction
Analytics Data2 years
Session Data30 days
7. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • SSL/TLS encryption for data transmission
  • Secure password hashing (bcrypt)
  • Regular security audits and monitoring
  • Access controls and staff training
  • Secure payment processing via Stripe
  • Regular data backups and disaster recovery
8. International Data Transfers

Some of our service providers may be located outside the UK/EU. When we transfer your data internationally, we ensure adequate protection through:

  • Adequacy decisions by the UK/EU authorities
  • Standard Contractual Clauses (SCCs)
  • Provider certification schemes
  • Other appropriate safeguards as required by law
9. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

privacy@sportsdevil.co.uk
info@sportsdevil.co.uk

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data properly. You can contact the ICO at ico.org.uk or call their helpline on 0303 123 1113.