Privacy Policy

Gameday Fits (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. 

We operate as an online retailer based in the United Kingdom and are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

Please read this policy carefully. By using our website or placing an order, you acknowledge that you have read and understood this Privacy Policy. 

Gameday Fits is the data controller for personal information collected through this website. This means we decide how and why your personal data is used. 

If you have any questions about how we handle your data, please contact us via the contact form on our website. 

Information You Give Us 

When you place an order, create an account, or contact us, we may collect: 

• Your full name 

• Email address 

• Delivery and billing address 

• Phone number (if provided) 

• Payment information — processed securely by our payment provider; we do not store full card details 

• Any messages or enquiries you send us 

​

Information We Collect Automatically 

When you visit our website, we may automatically collect: 

• IP address and browser type 

• Pages visited and time spent on site 

• Referring website or search terms used to find us 

• Device type (mobile, desktop, tablet) 

This data is collected via cookies and similar technologies. Please see Section 9 (Cookies) for more detail. 

​

Information from Third Parties 

If you use a third-party payment provider (such as PayPal or Stripe) or log in via a social platform, we may receive limited information from those providers in accordance with their own privacy policies. 

We use your personal data for the following purposes: 

• To process and fulfil your orders, including arranging delivery and handling returns 

• To communicate with you about your order, including dispatch and delivery updates 

• To respond to your enquiries and provide customer support 

• To send you marketing emails, if you have opted in to receive them (you can unsubscribe at any time) 

• To improve our website and understand how customers use it 

• To comply with our legal obligations 

• To prevent fraud and protect the security of our website and customers 

Under UK GDPR, we rely on the following legal bases to process your personal data: 

• Contract - processing is necessary to fulfil your order and manage your account 

• Legitimate interests - to operate and improve our business, prevent fraud, and provide customer service 

• Consent - for marketing communications, where you have opted in 

• Legal obligation — where we are required to retain or share data by law 

We do not sell your personal data to third parties. We may share your data with trusted third parties only where necessary: 

• Delivery and courier companies - to fulfil your order (e.g. your name and address) 

• Payment processors - to handle transactions securely (e.g. Stripe, PayPal) 

• Website platform providers - such as Wix, which hosts our website 

• Email marketing tools - only if you have opted in to our newsletter 

• Legal or regulatory authorities - where required by law 

All third parties we work with are required to handle your data in accordance with applicable data protection law. 

We retain your personal data only for as long as necessary for the purposes it was collected, or as required by law. As a general guide: 

• Order data is retained for up to 7 years for accounting and legal compliance purposes 

• Marketing consent records are kept until you withdraw consent 

• Website analytics data is typically retained for up to 26 months 

When data is no longer needed, it is securely deleted or anonymised. 

Under UK GDPR, you have the following rights in relation to your personal data: 

• Right of access - you can request a copy of the personal data we hold about you 

• Right to rectification - you can ask us to correct inaccurate or incomplete data 

• Right to erasure - you can request that we delete your data in certain circumstances 

• Right to restrict processing - you can ask us to limit how we use your data 

• Right to data portability - you can request your data in a structured, machine-readable format 

• Right to object - you can object to processing based on legitimate interests or for direct marketing 

• Rights related to automated decision-making - we do not use automated decision-making or profiling 

To exercise any of these rights, please contact us via the contact form on our website. We will respond within one month of receiving your request. There is no charge for making a request unless it is unfounded or excessive. 

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Generally speaking, a Privacy Policy often addresses these types of issues: the types of information the website is collecting and the manner in which it collects the data; an explanation about why is the website collecting these types of information; what are the website’s practices on sharing the information with third parties; ways in which your visitors an customers can exercise their rights according to the relevant privacy legislation; the specific practices regarding minors’ data collection; and much much more. 

To learn more about this, check out our article “Creating a Privacy Policy”.

We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse. Our website is hosted on a secure platform and all payment transactions are encrypted. 

However, no method of transmission over the internet is completely secure. While we do our best to protect your data, we cannot guarantee absolute security. 

Our website may contain links to third-party websites (such as social media platforms or payment providers). These sites have their own privacy policies and we are not responsible for their content or practices. We encourage you to review the privacy policy of any site you visit.

Our website is not intended for children under the age of 13, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly. 

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date at the top. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us via the contact form on our website.