We collect the minimum needed to take your order, deliver it and answer your emails. Here is exactly what that means.
DATA CONTROLLER
The data controller is COOKE'S RETAIL LTD, trading as Cookes Games, of 4 King Square, Bridgwater, Somerset, United Kingdom, TA6 3YF. Contact us about anything in this policy at contact@cookesgames.co.uk.
WHAT WE COLLECT AND WHY
| Data | When | Purpose | Lawful basis |
|---|---|---|---|
| Name, email, phone, delivery and billing address | At checkout | Taking payment, dispatching your order, sending order emails, handling returns | Performance of a contract |
| Payment card details | At checkout | Processing payment. Collected and stored by Stripe only; we never receive your card number. | Performance of a contract |
| Order history and correspondence | After an order or an email | Customer service, fraud prevention, accounting and tax records | Legal obligation; legitimate interests |
| Name, email and message | Contact form | Replying to you | Legitimate interests |
| Email address | Newsletter sign-up | Sending occasional stock and preorder news | Consent (withdraw at any time) |
| Basket contents | Browsing | Remembering what you've added. Stored only in your browser's local storage; never sent to us until checkout. | Legitimate interests |
| Aggregated page views and web vitals | Browsing | Understanding which pages are used and whether the site performs well | Legitimate interests |
WHO WE SHARE IT WITH
We use a small number of processors, each bound by contract to use your data only on our instructions:
- Stripe Payments Europe Ltd processes payments and collects your card and address details on its hosted checkout page. Stripe is an independent controller for fraud prevention. See stripe.com/gb/privacy.
- Vercel Inc. hosts the website and provides privacy-focused, cookieless analytics that do not identify individuals. Vercel operates servers in the UK, EU and USA under standard contractual clauses.
- Resend Inc. delivers our transactional emails (order confirmations, contact form messages) where email sending is enabled.
- Delivery carriers receive your name, address and phone number to deliver your parcel.
We do not sell personal data, and we do not share it with advertisers. We may disclose data where the law requires it, for example to HMRC or in response to a court order.
INTERNATIONAL TRANSFERS
Some processors store data outside the UK. Where they do, transfers are protected by the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
HOW LONG WE KEEP IT
- Order records: 6 years after the end of the financial year of the order, as required for tax and accounting.
- Contact form messages: 12 months after the last reply, unless they relate to an order.
- Newsletter addresses: until you unsubscribe or ask us to delete them.
- Basket contents: held in your own browser until you clear them.
COOKIES AND LOCAL STORAGE
We use only essential storage. See the cookie policy for the full list.
YOUR RIGHTS
Under UK GDPR you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have data erased where there is no longer a lawful reason to keep it
- restrict or object to processing based on legitimate interests
- receive your data in a portable format
- withdraw consent at any time, where consent is the basis
To exercise any of these, email contact@cookesgames.co.uk. We respond within one month. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
SECURITY
The site is served over HTTPS. Payment pages are hosted by Stripe, which is certified to PCI DSS Level 1. Access to order data is limited to the people who need it to fulfil orders.
CHILDREN
The site is not aimed at children under 16, and we don't knowingly collect their data. If you believe a child has placed an order, contact us and we'll cancel it.
CHANGES
We'll post any changes to this policy here, with a new “last updated” date.
CONTACT
Cookes Games is a trading name of COOKE'S RETAIL LTD.Company number: 15215210
VAT number: GB515351122
Registered office: 4 King Square, Bridgwater, Somerset, United Kingdom, TA6 3YF
Email: contact@cookesgames.co.uk