Privacy Policy
DREWETT BREAKS LTD, trading as Drewett Breaks Sports Cards (company number 15786651, registered address 2a Hill Street, Kingswood, Bristol, England, BS15 4EP), is the data controller responsible for your personal data collected through https://drewettsportscardsandtcg.co.uk. This policy explains what personal data we collect, why, and your rights under the UK GDPR and Data Protection Act 2018.
Last updated 2 September 2026
1. Who We Are
- Data controller: DREWETT BREAKS LTD
- Contact email: Drewettbreaks@outlook.com
- Data Protection lead (if applicable): Not applicable — small business
2. What Data We Collect
We may collect:
- Order/account data: name, delivery address, billing address, email, phone number, order history.
- Payment data: processed by our payment provider, Revolut; we do not store full card details.
- "Notify me" requests: email address submitted when you ask to be notified about sold-out or pre-order products.
- Marketing data: email address, if you opt in to marketing communications, and your engagement with those emails.
- Technical data: IP address, browser type, device information, collected automatically via cookies/analytics — see our Cookies Policy.
- Communications: records of correspondence if you contact us (e.g. via the contact form or email).
3. How We Use Your Data and Our Legal Basis
| Purpose | Legal basis |
|---|---|
| Processing and fulfilling your order | Performance of a contract |
| Sending order confirmations and delivery updates | Performance of a contract |
| Responding to customer service enquiries | Performance of a contract / legitimate interests |
| Sending "notify me" alerts for sold-out/pre-order items | Consent |
| Sending marketing emails (if opted in) | Consent |
| Fraud prevention and order verification | Legitimate interests |
| Complying with tax, accounting, and legal obligations | Legal obligation |
| Site analytics and performance monitoring | Consent (via cookie banner) / legitimate interests |
4. Sharing Your Data
We share personal data only where necessary, with:
- Delivery/courier partners, to fulfil your order (e.g. [COURIER NAME(S)]).
- Payment processor, Revolut, to process payment securely.
- IT and hosting providers, who store data on our behalf (e.g. [HOSTING PROVIDER]).
- Email service provider, to send transactional and marketing emails (e.g. [EMAIL PROVIDER]).
- Regulators or law enforcement, where required by law.
We do not sell your personal data.
5. International Transfers
Where we use providers based outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision.
6. How Long We Keep Your Data
- Order and transaction records: 6 years (for UK tax/accounting purposes).
- Marketing consent records: until you unsubscribe, plus a record of the withdrawal.
- "Notify me" requests: until the notification is sent or you unsubscribe.
- Account data: for as long as your account remains active.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (e.g. unsubscribe from marketing/notify-me emails)
- Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled
To exercise any of these rights, contact us at Drewettbreaks@outlook.com.
8. Cookies
We use cookies and similar technologies as described in our Cookies Policy.
9. Security
We use appropriate technical and organisational measures to protect your data, including HTTPS/SSL encryption, secure hosting, and restricted staff access.
10. Children
This Site is not intended for use by anyone under 18, and we do not knowingly collect data from children.
11. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent changes.
12. Contact Us
For privacy queries or to exercise your rights, contact us at Drewettbreaks@outlook.com or 2a Hill Street, Kingswood, Bristol, England, BS15 4EP.