Privacy Policy
Who we are
Locked In Fightwear is a UK-based business selling combat apparel, run by [Owner’s full name – to follow] as a sole trader. We are committed to protecting your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the controller of the personal data described in this policy.
Our website address is: https://lockedinfightwear.co.uk
What data we collect
We collect the following information when you use this website:
- Your account: your name, email address, password (stored encrypted) and the delivery details you save. An account is needed to place an order.
- Orders: your billing and delivery addresses, phone number if you give one, the items you order, and your order and payment history.
- Loyalty Club: your total spend, your current belt and the reward codes issued to your account and whether they have been used.
- Enquiries: what you send us through our forms, such as a custom gear enquiry (name, email, fight date, the items you need, your message and any reference image you upload).
- Newsletter: your email address, if you sign up.
- Technical information: your IP address, browser type and the pages you visit, which our hosting and security services use to run and protect the site.
- Cookies: see “Cookies” below.
Payment information
Payments are processed securely by Stripe. Your card details go directly to Stripe; we never see or store your full payment details.
How we use your data
We use your data to:
- process, deliver and support your orders, including returns and refunds;
- run your account and the Loyalty Club, including issuing your reward codes;
- reply to your enquiries;
- send you our newsletter, if you have signed up (you can unsubscribe at any time);
- keep the website secure and prevent spam, fraud and unauthorised activity;
- keep the records the law requires.
Legal basis for processing
- Contract: to provide your account, process your orders and run the Loyalty Club.
- Consent: for the newsletter and optional cookies. You can withdraw your consent at any time.
- Legitimate interests: to answer enquiries, keep the site secure and prevent spam.
- Legal obligation: to keep order and tax records.
Cookies
This website uses cookies that are needed for it to work, for example to keep your basket, keep you signed in to your account and remember your cookie choices. We do not currently use analytics or advertising cookies. If we add any optional cookies in future, we will only set them with your consent, which you can give or withdraw at any time through our cookie banner (powered by CookieYes) or your browser settings.
Who we share data with
We do not sell your personal data. We share it only with the services that help us run the shop, under contracts that protect it:
- Cookster Creative, who build, host and maintain this website;
- Cloudflare, which delivers and protects the website;
- Stripe, which processes payments;
- CleanTalk, which checks form submissions and account registrations for spam (it receives the details entered, such as your email and IP address);
- Zoho, which provides our email mailbox, and the email services that deliver order and account emails;
- our delivery couriers, who receive your name, delivery address and contact details to deliver your order.
We may also share data where the law requires it.
How long we keep your data
- Account and Loyalty Club data: while your account is open. You can ask us to close it at any time.
- Order and transaction records: six years, as required by UK tax law.
- Enquiries: as long as needed to deal with them and any follow-up, then deleted.
- Newsletter: until you unsubscribe.
Your rights
You may request:
- access to the personal data we hold about you;
- correction or deletion of your information;
- withdrawal of your consent;
- a copy of your data.
To exercise your rights, contact [email protected].
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO) at https://ico.org.uk.
Data transfers
Some of our providers (for example Stripe, Cloudflare and CleanTalk) may process data outside the UK. Where they do, safeguards are in place, such as the UK Data Bridge or the UK’s International Data Transfer Agreement and Standard Contractual Clauses.
How we protect your data
We use technical and organisational measures to protect your data, including encryption, limited access and secure hosting. Only authorised people have access to it.
Changes to this policy
We may update this policy from time to time. The effective date at the top shows when it last changed.
Contact
If you have any questions about this policy or your data, please email [email protected] or write to us at [Business address – to follow].