top of page

Privacy Policy

1. Who We Are

The Kit Drop (“we”, “us”, “our”) is a UK-based small business that resells clothing and football shirts through our online platform. We are committed to protecting your personal data and your privacy rights.

Business Name: The Kit Drop
Business Address: 
Data Controller: The Kit Drop

2. Personal Data We Collect

We may collect and process the following personal data when you use our services:

  • Identity Data: name, username, or similar identifiers

  • Contact Data: email address, phone number, shipping/billing address

  • Transaction Data: order history, payment method (note: we do not store full payment card details)

  • Technical Data: IP address, browser type, operating system, device identifiers

  • Usage Data: how you use our website and services

  • Marketing Data: preferences for receiving marketing communications

3. How We Use Your Personal Data

We use your data to:

  • Fulfil your orders and provide customer service

  • Manage your account and process payments

  • Communicate with you (e.g. order confirmations, support)

  • Send marketing communications (only with your consent)

  • Improve our website and customer experience

  • Comply with legal obligations

We process your personal data lawfully based on one or more of the following grounds:

  • Performance of a contract (e.g. when you place an order)

  • Legal obligation (e.g. record-keeping for HMRC)

  • Consent (e.g. for marketing)

  • Legitimate interests (e.g. fraud prevention)
     

4. Sharing Your Data

We do not sell your personal data. We may share it with:

  • Payment processors (e.g. Stripe, PayPal)

  • Delivery companies (e.g. Royal Mail, Evri)

  • Website hosting and IT providers

  • Professional service providers (e.g. accountants, legal advisors)

  • Government or law enforcement agencies when legally required

All third-party providers are required to respect the security of your data and treat it in accordance with the law.
 

5. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. Access is limited to employees and service providers with a business need.
 

6. Data Retention

We keep your personal data only as long as necessary to fulfil the purposes for which we collected it, including legal, accounting, or reporting requirements.

By law, we must keep basic information (e.g. contact, order, transaction data) for six years for tax purposes.
 

7. Your Rights

Under the UK GDPR and Data Protection Act 2018, you have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request erasure of your data

  • Object to processing or request restriction

  • Data portability (in certain cases)

  • Withdraw consent at any time (for marketing)

  • Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, contact us at [Insert Contact Email].
 

8. Cookies and Tracking

Our website uses cookies to improve your experience and analyse traffic. You can manage your cookie preferences via your browser settings. For more information, see our [Cookie Policy].
 

9. Children’s Privacy

We do not knowingly collect data from children under the age of 13. If you believe we have collected data from a child, please contact us immediately.
 

10. International Transfers

If we transfer your personal data outside the UK or EEA, we ensure appropriate safeguards are in place (e.g. adequacy decisions or standard contractual clauses).
 

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and where appropriate, we will notify you by email.
 

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact:

The Kit Drop
Email: info@thekitdrop.com

 

bottom of page