Privacy policy
This policy explains what personal information The Tackle Vault collects when you use www.thetacklevault.uk, buy from us or contact us. It also explains why we collect it, who we share it with and what your rights are. We've kept it in plain English.
1. Who we are
The website and shop are run by Lloyd Wightman trading as The Tackle Vault UK ("we", "us"), a sole trader. We are the "controller" of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
- Address: Unit 12 Blackbrook Place, Warrington, WA4 1PH
- Email: [email protected]
- Phone: 07833 109166
If you have any questions about this policy or your data, please email us.
2. What information we collect
When you place an order:
- your name, delivery and billing address, email address and phone number
- what you ordered, the price, delivery choice and order history
- any notes you add to your order
Payment details: payments are taken by Stripe. That includes debit and credit cards, Apple Pay, Google Pay, Klarna and Clearpay. Stripe handles your card details directly, and we never see or store your full card number. We only see limited details, such as the card type and last four digits. If you take out a monthly tackle box subscription, Stripe securely stores your payment method so it can take each monthly payment. We keep a record of your subscription, its status and payment dates. You can update your card, pause or cancel using the "Manage subscription" link in your payment email, or by contacting us.
If you create a customer account: your login email, your contact details, saved addresses, order history, gift cards linked to your account, and (when Rewards are on) your loyalty points balance.
When you use our contact form, email or call us: your name, email address, phone number and your message, plus anything else you tell us.
When you sign up to our newsletter: your email address, and a record of when and how you signed up.
If you leave a product review: your name or display name, your rating and your review.
When you browse the website: technical information such as your IP address, browser and device type, pages viewed and cookie identifiers (see section 6).
3. Why we use your information and our lawful basis
| What we use it for | Lawful basis under UK GDPR |
|---|---|
| Processing and delivering your order, taking payment, handling returns, refunds and complaints | Performance of a contract with you |
| Running your customer account, gift cards and loyalty points | Performance of a contract |
| Answering your enquiries (contact form, email, phone) | Our legitimate interests in responding to customers, or steps before entering a contract |
| Sending our newsletter and offers | Your consent. You can unsubscribe at any time using the link in every email |
| Keeping accounting and tax records | Legal obligation |
| Preventing fraud and spam | Our legitimate interests in keeping the site and our customers safe |
| Publishing product reviews | Our legitimate interests (and your choice to post the review) |
| Non-essential cookies (e.g. analytics), if we use them | Your consent |
We don't sell your personal information, and we don't make decisions about you using fully automated processing.
4. Who we share your information with
We only share what's needed, with:
- Stripe. Stripe provides our checkout and payment processing (including cards, Apple Pay, Google Pay, Klarna and Clearpay). For payment processing and fraud prevention, Stripe also acts as a separate controller under its own privacy notice: stripe.com/gb/privacy.
- Cloudflare, which hosts our website and online shop.
- Delivery companies, so they can deliver your order: DPD. They receive your name, address and sometimes your email or phone number for delivery updates.
- Google: we use Gmail to handle customer emails.
- Klarna or Clearpay, if you choose to pay with them — they receive the details needed to process that payment under their own privacy notices.
- Our accountant or other professional advisers, where needed.
- HMRC, the police or other authorities, where the law requires it.
5. International transfers
Some of these providers (for example Stripe, Cloudflare and Google) may process data outside the UK, including in the United States. Where this happens, the transfer is protected by safeguards recognised under UK law. These include the UK Extension to the EU–US Data Privacy Framework, or the UK International Data Transfer Agreement/Addendum.
6. Cookies
We use cookies and similar technology that are needed to run the shop — for example to keep items in your basket, keep you logged in to your account, and complete checkout. These are strictly necessary.
If we add optional analytics or marketing cookies in future, we'll only set them with your consent and you'll be able to change your choice.
7. How long we keep your information
- Orders, invoices and payment records: 6 years from the end of the financial year they relate to, to meet tax and accounting rules.
- Customer accounts: until you ask us to close the account, or after 3 years of inactivity.
- Enquiries (contact form, emails, calls) not linked to an order: up to 2 years.
- Newsletter list: until you unsubscribe. We then keep a record of the unsubscribe so we don't email you again.
- Product reviews: for as long as the product listing is live, or until you ask us to remove the review.
- Cookies: for as long as needed for the purpose described above (session cookies end when you close the browser; login cookies last longer so you stay signed in).
8. Your rights
Under UK GDPR you have the right to:
- access a copy of the personal information we hold about you
- ask us to correct inaccurate information
- ask us to delete your information
- ask us to restrict how we use it
- object to us using it based on legitimate interests, and to stop direct marketing at any time
- data portability: receive the information you gave us in a usable format
- withdraw consent at any time (for example newsletter consent), without affecting what we did before
To use any of these rights, email [email protected]. We'll reply within one month. It's normally free of charge. We may need to confirm your identity first.
9. Complaints
If you're unhappy with how we've handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:
- Website: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
10. Children
Our website isn't aimed at children under 13. We don't knowingly collect their personal information.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.