Privacy Policy
What we collect, why we collect it, how long we keep it, and what you can make us do about it.
Who is responsible for your data
Proper Kit is a sole trader business in the United Kingdom, and is the data controller for everything described here. For anything at all about your data — a copy of it, a correction, a deletion — email support@properkit.store and say what you want. We are based in Bedford, MK42 0SP, United Kingdom. To post anything to us, including a return, email support@properkit.store first and we will reply with the address to use.
What we collect when you order
Your name, email address, delivery address, billing address, and a phone number if you give one. We keep the contents of the order, the prices at the time and the options you chose. We never see or store your card details: payment runs through Stripe, and the card number goes from your browser to them without passing through our systems.
What we collect if you open an account
Your name, email address, a hashed password, and any delivery addresses you save. Passwords are hashed with Argon2id, which means we cannot read them and cannot recover them — a forgotten password is reset, never retrieved. Everything in your account is visible and editable by you, and you can ask us to delete the whole thing.
What we collect when you contact us
Your name, email address, any phone number and subject you give, your message, and the IP address it came from. The IP address is kept only so that abuse of the form can be traced, and is not used to build any profile of you.
Photographs and files you send us
When you upload a photograph or a file for a quote we store the file, its dimensions, and what our measurements produced. A photograph of an animal often has a person in it too, so we treat these files as personal data whether or not you appear in yours. They are used for one thing: producing your quote and, if you order, your item. They are not used to train anything, not published, and not shown to anyone outside the people and services needed to make your order.
Cookies
Cookies that keep you signed in and keep your basket working are strictly necessary and need no consent. Analytics and marketing cookies are set only if you accept them, and you can change or withdraw that at any time through the "Cookie settings" link in the footer. Our cookie policy names every cookie individually.
Our lawful bases for using it
We process your order and account data because we need it to perform the contract you entered into when you bought something. We keep transaction records because the law requires it, principally for tax. We use analytics and marketing cookies only with your consent, and you can take that back. We rely on legitimate interests for fraud prevention and for keeping the site secure — for example the IP address stored against a contact form submission — having satisfied ourselves that this does not override your interests.
Who else sees it
Stripe processes payments and receives the amount and your billing details. Delivery carriers receive the name and address on the parcel. Our email provider transmits order confirmations and password resets. A specialist third-party service turns uploaded photographs into digital models and receives the photograph for that purpose only. Where you have consented to analytics, data goes to the providers named in the cookie policy. Every one of these acts on our instructions under a contract, and none of them is permitted to use your data for their own purposes. We do not sell your data, and we do not share it for anyone else’s marketing.
Where your data is held
Our site and database are hosted in the United Kingdom. Some of the services above process data outside the UK. Where that happens we rely either on UK adequacy regulations covering the country concerned, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so your data carries its protection with it. If you want to know which applies to a particular service, ask and we will tell you.
How long we keep it
Order and transaction records: six years after the end of the tax year they fall in, because HMRC requires it. Account data: until you ask us to delete the account. Contact form messages: twelve months. Photographs and files sent for a quote: twelve months from the quote if you do not order, and for the life of the order record if you do. Security and audit logs: twelve months. After those periods the data is deleted, not archived indefinitely.
Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop using it, object to us using it, and ask for it in a portable format. Where we rely on your consent you can withdraw it at any time, and withdrawing it is as easy as giving it. We answer within one month and we do not charge for it.
Decisions about you
We do not make any decision about you by automated means alone, and we do not profile you. A quote produced from your uploaded file is a measurement and a price, not a decision about you as a person, and a human looks at every custom order before it is accepted.
Children
This shop is not aimed at children and we do not knowingly collect data from anyone under 18. If you believe a child has given us their details, tell us and we will delete them.
Changes to this policy
If we change how we use your data we will update this page and change the date below. Where a change is significant we will tell customers with accounts by email rather than relying on you to notice.
Complaining
Please come to us first at support@properkit.store — most problems are a misunderstanding we can fix the same day. You do not have to, though. You can complain directly to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113, and doing so costs you nothing and does not affect anything else.