Privacy Policy

Last Updated: June 2025

At ControllerVault UK, we are fully committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under UK GDPR. Our registered address is 19 West Arbour Street, London, E1 0PQ, United Kingdom.

🏢 1. Who We Are

ControllerVault UK is the data controller responsible for your personal information. We operate an online gaming controller store based in London, United Kingdom.

Business Name: ControllerVault UK
Address: 19 West Arbour Street, London, E1 0PQ, UK
Email: ultrashoppings786@gmail.com
Phone / WhatsApp: +44 7495 974557

📋 2. What Data We Collect

We only collect data that is necessary to process and fulfil your order or to improve your shopping experience.

Full name and billing/shipping address
Email address and phone number
Payment information (processed securely — we never store card details)
Order history and product preferences
IP address, browser type, and device information
Cookies and website usage data (see Cookie Policy below)
Any messages or enquiries you send us

⚙️ 3. How We Use Your Data

Your data is used only for legitimate business purposes related to your purchase and our services.

Processing and fulfilling your orders
Sending order confirmations and delivery updates
Handling returns, refunds, and warranty claims
Providing customer support via email and WhatsApp
Improving our website and product listings
Sending marketing emails only if you have opted in
Complying with UK legal and tax obligations

We will never sell, rent, or trade your personal data to third parties for marketing purposes.

⚖️ 4. Legal Basis for Processing

Under UK GDPR, we process your data based on the following legal grounds:

Contract — to fulfil your order and provide our services
Legal Obligation — to comply with UK tax and consumer law
Legitimate Interests — to improve our website and prevent fraud
Consent — for marketing emails (you can unsubscribe anytime)

🤝 5. Who We Share Your Data With

We only share your data with trusted third parties who help us operate our business. All third parties are GDPR compliant.

Shopify — our e-commerce platform (data stored securely)
Payment processors — Stripe, PayPal, Klarna (for secure payments)
Delivery couriers — Royal Mail, DPD, Evri (for order fulfilment)
Google Analytics — anonymous website usage statistics only
HMRC — as required by UK tax law

We do not share your data with advertisers, data brokers, or any unauthorised third parties.

🍪 6. Cookie Policy

We use cookies to make our website work properly and to improve your experience.

Essential Cookies — required for the website and shopping cart to function
Analytics Cookies — anonymous data to understand how visitors use our site
Marketing Cookies — only if you have given consent

You can manage or disable cookies at any time through your browser settings. Disabling essential cookies may affect website functionality.

🗓️ 7. How Long We Keep Your Data

We retain your personal data only for as long as necessary:

Order and transaction data — 7 years (UK tax law requirement)
Customer account data — until you request deletion
Marketing preferences — until you unsubscribe or request deletion
Support messages — up to 2 years

🛡️ 8. Your Rights Under UK GDPR

You have the following rights regarding your personal data. Contact us at any time to exercise them.

Right to Access

Request a copy of all personal data we hold about you.

Right to Erasure

Request deletion of your personal data ("right to be forgotten").

Right to Rectification

Ask us to correct any inaccurate or incomplete data.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing of your data for marketing purposes.

Right to Restrict

Ask us to pause processing of your data in certain circumstances.

To exercise any of these rights, email us at ultrashoppings786@gmail.com. We will respond within 30 days as required by UK GDPR.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data rights have been violated.

🔒 9. Data Security

We take the security of your data seriously and implement appropriate technical and organisational measures:

All data transmitted via SSL/TLS encryption (HTTPS)
Payment data processed by PCI-DSS compliant providers only
We never store full credit or debit card numbers
Access to customer data is restricted to authorised personnel only
Regular security reviews and updates to our systems

📝 10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or UK law. When we make significant changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.