Privacy & Cookies

1. Who we are

The data controller is CLICKNBUY SHOP LTD, a company registered in England and Wales (company no. 17539134), 95 Melrose Avenue, Mitcham, England, CR4 2ED. Contact us about privacy at support@clicknbuyshop.uk or +44 7460 630113.

2. Data we collect

• Order details: email address, name, delivery address, phone number (if given), items bought, prices and order reference.
• Payment information: handled by Stripe on its secure page. We receive confirmation of payment, the amount and limited details (such as card brand and last four digits). We never see or store your full card number or security code.
• Communications: messages you send us by email, phone or post, including complaints and cancellation requests.
• Technical data: basic server logs (such as IP address, browser type and time of request) kept by our hosting provider for security and fault-finding.

3. How and why we use it (lawful basis)

We do not send marketing emails, and we do not sell your personal data. If we ever offer marketing, we will ask for your consent first.

4. Who we share it with

• Stripe Payments Europe Ltd / Stripe, Inc. — payment processing and fraud prevention. Stripe acts as an independent controller for some purposes; see stripe.com/privacy.
• Delivery couriers — your name, address and phone number, only to deliver your order.
• Website hosting, database and email providers — they store and process data on our behalf under contract.
• Professional advisers and authorities — accountants, HMRC, police or courts where required by law.

5. International transfers

Some providers (such as Stripe and our hosting providers) may process data outside the UK, including in the USA or EU. Where this happens, transfers are protected by UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or equivalent safeguards.

6. How long we keep it

• Order, payment and refund records: 6 years from the end of the financial year, for tax and accounting law.
• Customer service messages: up to 2 years after the matter is closed, or longer if needed for a legal claim.
• Unpaid or abandoned checkout records: deleted within 12 months.

7. Security

The website uses encrypted connections (HTTPS). Order data is stored in a database that only our server can access. Card payments are processed by Stripe, which is certified to PCI DSS Level 1.

8. Your rights

You have the right to: access your data; have it corrected; have it deleted; restrict or object to its use; and receive it in a portable format. Contact support@clicknbuyshop.uk. We will reply within one month. We may need to confirm your identity. Some data must be kept by law even if you ask us to delete it.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

9. Children

Our website is not aimed at children. You must be 18 or over to place an order.

10. Cookies and browser storage

We use only what is strictly necessary for the shop to work, so no consent banner is needed. We do not use analytics, advertising or tracking cookies.

You can clear browser storage at any time in your browser settings; your basket will then be emptied. If we add non-essential cookies in future, we will ask for your consent first.

11. Changes

We may update this notice. The date at the top shows when it last changed. See also our Terms & Conditions.