Privacy policy

This policy explains what personal data StinkyZ collects, why, and what rights you have. We are the data controller for that information.

Who we are

StinkyZ, a sole trader, 58 Fernieside Crescent, Edinburgh, EH17 7HR. For any privacy question, contact info@stinkyz.co.uk.

What we collect

• When you order: your name, email address, delivery address, phone number if you give one, and what you bought. Your card details go directly to Stripe and never reach us.
• When you enquire about a club order: your club name, contact name, email, phone, sizes, and any badge artwork you upload.
• When you subscribe to our newsletter: your email address and the date you consented.
• Automatically: basic technical data such as your IP address and pages visited, used to keep the site working and secure.

Why we use it, and our lawful basis

• To take payment, send your order and handle returns. Lawful basis: performance of a contract.
• To answer club enquiries and produce a quote. Lawful basis: steps at your request before entering a contract.
• To send marketing emails, only if you have subscribed. Lawful basis: consent, which you can withdraw at any time.
• To keep accounting records and prevent fraud. Lawful basis: legal obligation and legitimate interests.

Who we share it with

We use a small number of processors, each of which handles data on our instructions:

• Stripe for payments and payment related fraud checks.
• Supabase for our database and file storage, hosted in the United Kingdom (London region).
• Vercel for website hosting.
• Resend for transactional email such as dispatch notices and club quotes.
• Royal Mail, our delivery partner, which receives your name and delivery address.

We do not sell your data. Some of these providers may process data outside the UK, in which case appropriate safeguards such as the UK International Data Transfer Agreement apply.

How long we keep it

• Order and transaction records: six years, for tax and accounting.
• Club enquiries that do not become orders: 12 months.
• Newsletter subscribers: until you unsubscribe.
• Club artwork: kept while we may reasonably need to reprint, then deleted.

Cookies

We use only the cookies needed to make the site work, such as keeping your bag between pages and letting Stripe complete a secure checkout. We do not use advertising cookies.

Your rights

Under UK data protection law you can ask us for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Where we rely on consent you can withdraw it at any time. Email info@stinkyz.co.uk and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Children

Our products are often bought for children, but the site is intended for purchases by adults. We do not knowingly collect data directly from children.