01Who is responsible
CRACK CARDS LTD (company number 16015643) is the controller of the personal data described here. We process it under the UK General Data Protection Regulation and the Data Protection Act 2018. There is no separate data protection officer; write to [email protected] and the owner of the workshop will deal with it personally.
02What we collect and why
When you place an order we collect:
- your name, delivery address, email address and telephone number, to deliver the order and to contact you if the courier needs help;
- the items ordered, prices paid and delivery choice, to fulfil the order and to keep the records the law requires;
- a record of the payment reference from the payment provider. We never see or store full card numbers.
When you email or call us we keep the correspondence for as long as the matter is open and for six months afterwards. If you book a repair, we record the make, model and the fault you describe so that the work can be quoted.
The website records the usual technical log entries (IP address, browser, pages requested) for security and to keep the service running. These logs are rotated after thirty days.
03The legal basis
- Performance of a contract: everything needed to take payment, deliver an order and handle returns.
- Legal obligation: keeping invoices and VAT records for six years as HM Revenue & Customs requires.
- Legitimate interests: preventing fraud, keeping the site secure and answering your enquiries.
- Consent: analytics cookies, which are set only if you accept them in the cookie notice, and any marketing email, which we send only if you have asked for it.
05How long it is kept
- Order and invoice records: six years from the end of the tax year of the order.
- Correspondence about an order or repair: six months after the matter is closed.
- Server logs: thirty days.
- Marketing preferences: until you withdraw consent, which you can do by replying to any email we send.
06Your rights
You can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it where we have no legal reason to keep it, object to processing based on legitimate interests, and ask for the data you gave us in a portable format. Write to the email address above; we respond within one calendar month and do not charge for a first request.
If you are not satisfied with how we have handled your data you have the right to complain to the Information Commissioner's Office, the UK supervisory authority. We would appreciate the chance to put things right first.
07Security
The site is served over an encrypted connection. Order data is held in a database that is not reachable from the public internet and is backed up daily. Access is limited to the people who pack and post orders.
If a breach ever puts your rights at risk we will tell the Information Commissioner's Office within seventy-two hours and tell you without undue delay.
08Changes to this policy
The date at the top of the page shows when this policy was last revised. Changes that affect how your data is used will be announced on the site before they take effect.
Company details
- Company:
- CRACK CARDS LTD
- Company Number:
- 16015643
- Registered address:
- 5 PARK AVENUE, THATCHAM, ENGLAND RG18 4NN
- VAT Number:
- 477585237