This privacy notice explains how Northrn Arb (“we”, “us”, “our”) collects, uses, shares and protects your personal data when you visit https://runtheplay.shop, place an order or contact us. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, including your right to complain to the Information Commissioner’s Office (ICO).
1. Who we are (data controller)
The data controller responsible for your personal data is:
Northrn Arb
Woodlands, Stainton
Penrith
CA11 0ES
United Kingdom
- Email: contact@runtheplay.shop
- Phone: 01539292259
- Website: https://runtheplay.shop
If you have any questions about this notice or how we handle your personal data, please contact us using the details above.
2. Personal data we collect
Information you give us
- Identity and contact data: your name, email address, phone number, billing address and delivery address.
- Order data: the products you buy, order value, order history, and details of any returns, exchanges or refunds.
- Account data: if you create a customer account, your login details and account preferences.
- Communications: the content of messages you send us by email, phone or post, and any related correspondence.
- Marketing preferences: whether you have agreed to receive marketing emails from us.
Payment data
Payments are processed securely by our payment providers. We do not store your full card details. We accept American Express, Apple Pay, Diners Club, Discover, Google Pay, Maestro, Mastercard, Shop Pay, UnionPay and Visa. We receive confirmation of payment and limited transaction information (such as payment method type and the last digits of a card) needed to process your order, refunds and to prevent fraud.
Information collected automatically
- Technical and device data: IP address, browser type and version, device type, operating system, time zone setting and approximate location derived from your IP address.
- Usage data: pages viewed, products viewed, items added to your basket, referring website and how you interact with our website.
This information is collected using cookies and similar technologies (see section 8).
3. How we use your personal data and our lawful bases
Under the UK GDPR we must have a lawful basis for each use of your personal data. We use your data as follows:
- To process and deliver your order (including taking payment, sending order and delivery confirmations, and delivering your goods) – Lawful basis: performance of a contract with you (Article 6(1)(b) UK GDPR).
- To handle returns, exchanges, refunds and cancellations – Lawful basis: performance of a contract and compliance with legal obligations, including the Consumer Contracts Regulations 2013 and the Consumer Rights Act 2015 (Article 6(1)(b) and (c)).
- To manage your customer account – Lawful basis: performance of a contract (Article 6(1)(b)).
- To respond to your enquiries and provide customer service – Lawful basis: performance of a contract or, where no contract exists, our legitimate interest in answering your questions (Article 6(1)(b) and (f)).
- To keep accounting and tax records – Lawful basis: compliance with legal obligations (Article 6(1)(c)).
- To prevent fraud and keep our website secure – Lawful basis: our legitimate interests in protecting our business and customers (Article 6(1)(f)).
- To operate, maintain and improve our website and shop – Lawful basis: our legitimate interests (Article 6(1)(f)) and, where non-essential cookies are used, your consent (Article 6(1)(a)).
- To send you marketing emails – Lawful basis: your consent (Article 6(1)(a)) or, where you are an existing customer and did not opt out, our legitimate interest in promoting similar products, as permitted by the Privacy and Electronic Communications Regulations 2003 (PECR). You can unsubscribe at any time using the link in each email or by contacting us.
- To establish, exercise or defend legal claims – Lawful basis: our legitimate interests (Article 6(1)(f)).
Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms. You can ask us for more information about this assessment.
4. Returns and refunds
If you return an item, we use your name, contact details, order details and payment information to process your return, exchange or refund.
30-day return window (voluntary return guarantee): you may return items within 30 days from the date of delivery, for both defective and non-defective products. Items must be new and unused, in their original condition (and original packaging where possible). Returns are made by mail to Woodlands, Stainton, Penrith, CA11 0ES, United Kingdom. Return shipping costs are always paid by the customer, and the customer is responsible for arranging the return label and postage. There is no restocking fee. You may choose an exchange instead of a refund. Refunds are issued within 14 days of receiving the returned item.
Statutory right to cancel: under the Consumer Contracts Regulations 2013 you have a statutory right to cancel within 14 days. This 14-day period is included in our 30-day return window, and your statutory rights remain unaffected. Faulty or wrongly delivered items remain covered by your statutory rights under the Consumer Rights Act 2015.
5. Who we share your personal data with
We only share your personal data where necessary for the purposes described above. Recipients include:
- Shopify: our e-commerce platform provider, which hosts our website and processes order, customer and payment data on our behalf.
- Payment providers: to process payments and refunds made by card, Apple Pay, Google Pay, Shop Pay and other accepted payment methods, and to help prevent fraud.
- Delivery companies: to deliver your order, we share your name, delivery address and, where needed, your contact details.
- IT, email and service providers: who help us run our business, communicate with you and send marketing emails (where you have agreed or not opted out).
- Professional advisers: such as accountants and legal advisers, where necessary.
- Authorities: such as HMRC, the police or regulators, where we are legally required to do so or to protect our rights.
Our service providers act as data processors on our behalf and may only use your data in line with our instructions and applicable data protection law. We do not sell your personal data.
6. International transfers
Some of our service providers (including our e-commerce platform and payment providers) may process your personal data outside the United Kingdom. Where personal data is transferred outside the UK, we ensure it is protected by appropriate safeguards required by UK data protection law, such as transfers to countries covered by UK adequacy regulations, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. You can contact us for more information about these safeguards.
7. How long we keep your personal data
We keep your personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting and reporting requirements:
- Order, payment and transaction records: for as long as required by UK tax and accounting law (generally up to six years).
- Customer account data: for as long as your account is active, or until you ask us to delete it, subject to any legal retention requirements.
- Customer service correspondence: for as long as needed to deal with your enquiry and any related claims.
- Marketing data: until you unsubscribe or withdraw your consent, after which we keep a record of your opt-out so we can respect your choice.
When personal data is no longer needed, we securely delete or anonymise it.
8. Cookies and similar technologies
Our website uses cookies and similar technologies. Some cookies are strictly necessary for the website to function (for example, to remember items in your basket and to complete checkout). These do not require your consent.
Other cookies, such as those used for analytics, personalisation or marketing, are only placed with your consent, in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR. You can accept or reject non-essential cookies through our cookie banner and change your preferences at any time. You can also manage or delete cookies in your browser settings, although blocking some cookies may affect how the website works.
9. Your rights
Under the UK GDPR you have the following rights regarding your personal data:
- Right to be informed about how your personal data is used (this notice).
- Right of access – to request a copy of the personal data we hold about you.
- Right to rectification – to have inaccurate or incomplete data corrected.
- Right to erasure – to ask us to delete your personal data in certain circumstances.
- Right to restrict processing – to ask us to limit how we use your data in certain circumstances.
- Right to data portability – to receive the data you provided to us in a structured, commonly used, machine-readable format, or to have it transferred to another organisation, where processing is based on consent or contract and carried out by automated means.
- Right to object – to processing based on our legitimate interests and, at any time, to direct marketing.
- Rights relating to automated decision-making – we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
- Right to withdraw consent – where we rely on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at contact@runtheplay.shop, by phone on 01539292259, or by post to the address in section 1. Exercising your rights is normally free of charge. We may need to verify your identity before responding. We will respond within one month of receiving your request, as required by law; this may be extended by up to two further months for complex or numerous requests, in which case we will tell you.
10. Your right to complain to the ICO
If you are unhappy with how we have handled your personal data, we would appreciate the chance to resolve your concern first, so please contact us. You also have the right to lodge a complaint at any time with the UK supervisory authority for data protection, the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire
SK9 5AF
Website: https://ico.org.uk/make-a-complaint/
11. Data security
We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, use, alteration or disclosure. Our website uses encrypted (HTTPS) connections, and payments are handled by secure payment providers. Access to your personal data is limited to those who need it to carry out their duties. If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you and the ICO where required by law.
12. Children
Our website and products are not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
13. Is providing your data required?
Providing your name, contact details, delivery address and payment information is necessary to enter into and perform a purchase contract with you. If you do not provide this information, we will not be able to process your order. Providing data for marketing purposes is entirely voluntary.
14. Changes to this privacy notice
We may update this privacy notice from time to time to reflect changes in our practices or in the law. The current version will always be available on this page. Where changes are significant, we will take reasonable steps to let you know.
15. Contact us
For any questions about this privacy notice or your personal data, please contact Northrn Arb:
- Email: contact@runtheplay.shop
- Phone: 01539292259
- Post: Woodlands, Stainton, Penrith, CA11 0ES, United Kingdom