Privacy Policy

We collect only what we need to run the shop and support you:

• Order & account details — name, email address, phone number, and shipping/billing address.
• Account credentials — if you create an account, a securely hashed password (we never store it in plain text).
• Order history — the products, amounts, and status of orders you place.
• Marketing preferences — whether you have opted in to our marketing emails.
• Payment information — card payments are handled entirely by Stripe and crypto payments by our payment gateway; we do not receive or store your full card number.
• Technical & usage data — basic analytics (via Google Analytics) such as pages visited and device/browser type, used to understand and improve the site.

• To process, fulfil, and deliver your orders and provide customer support — this is necessary to perform our contract with you.
• To manage your account and keep your order history — performance of our contract.
• To send you marketing emails about new products and offers — only where you have opted in (consent), and you can withdraw this at any time.
• To operate, secure, and improve the website and prevent fraud — our legitimate interests.
• To meet legal and accounting obligations — compliance with a legal obligation.

We do not sell your personal data. We share it only with the service providers needed to run the business:

• Payment processors — Stripe (card) and our crypto payment gateway, to take payment securely.
• Delivery partners — couriers such as Royal Mail, to deliver your order.
• Email & hosting providers — to send transactional and (opted-in) marketing emails and to host the site.
• Analytics — Google Analytics, to measure site usage.
• Authorities or advisers where we are legally required to do so.

Some of our providers (for example Stripe and Google Analytics) may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK Addendum to the EU Standard Contractual Clauses or an adequacy decision, so your data remains protected to UK standards.

We keep order and transaction records for as long as needed to fulfil the order and to meet legal, tax, and accounting requirements (typically six years). Account data is kept while your account is active; marketing data is kept until you unsubscribe or ask us to delete it.

Under UK data protection law you have the right to:

• Access the personal data we hold about you;
• Have inaccurate data corrected;
• Ask us to delete your data (where we are not required to keep it);
• Object to or restrict certain processing;
• Withdraw consent to marketing at any time;
• Request a copy of your data in a portable format.

To exercise any of these, email support@retapro.net. You can also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.

We only send marketing emails to customers who have opted in. Every marketing email includes a one-click unsubscribe link, and you can also change your preference in your account settings or by emailing us. Unsubscribing from marketing does not stop essential emails about an order you have placed.

We use a small number of cookies and Google Analytics to keep the site working and to understand how it is used. You can control cookies through your browser settings; blocking some may affect how the site works.

We take reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS), hashed passwords, and restricting access to personal data. No method of transmission or storage is completely secure, but we work to protect your information and to respond quickly to any issue.

We may update this policy from time to time. The “last updated” date above shows when it last changed. Significant changes will be reflected here.

For any privacy question or request, email support@retapro.net.