Privacy Policy
Last updated: 01-Aug-2026
sp5der.co.uk (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or purchase from us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
sp5der.co.uk is operated by SP!DER LTD , registered in England and Wales under company number 02521831 , with a registered address at Leonard House, 7 Newman Road, Bromley, Kent, BR1 1RJ (“the Data Controller” for the purposes of this policy).
If you have any questions about this policy or how we handle your data, you can contact us at [email protected].
1. What Information We Collect
We only collect the information we need to run our store and serve you properly.
Information you give us directly:
- Name, email address, delivery and billing address, and phone number when you place an order or create an account
- Payment details, processed securely by our payment providers (see Section 4 — we do not store your full card details ourselves)
- Any information you send us when contacting customer support, such as order queries or returns requests
- Your email address if you subscribe to marketing updates or a newsletter
Information collected automatically:
- IP address, browser type, and device information
- Pages viewed, products browsed, and how you navigate our site
- Approximate location (derived from IP address, not GPS)
- Cookie and tracking data, as set out in our Cookie Policy below
We do not knowingly collect any special category data (such as health information, religious beliefs, or political opinions).
2. How We Use Your Information and Our Legal Basis
Under UK GDPR, we must have a valid legal basis for every use of your personal data. Here is how we use your data and why:
| Purpose | What we do | Legal basis |
| Order fulfilment | Processing payments, arranging delivery, handling returns | Performance of a contract with you |
| Customer service | Responding to enquiries, resolving issues | Performance of a contract / legitimate interests |
| Marketing emails | Sending offers, new drops, and updates if you’ve opted in | Consent |
| Site performance | Analytics, fixing bugs, improving the shopping experience | Legitimate interests |
| Fraud prevention | Screening orders and protecting against chargebacks | Legitimate interests |
| Legal compliance | Keeping records for tax, accounting, and consumer law purposes | Legal obligation |
Where we rely on consent (for example, marketing emails or non-essential cookies), you can withdraw that consent at any time — see Section 7.
3. Cookies
Cookies are small text files stored on your device when you visit our site. We use them to keep the site working properly and to understand how it’s used.
Strictly necessary cookies — required for the site to function (e.g. keeping items in your basket, remembering you’re logged in). These cannot be switched off, as the site won’t work correctly without them.
Analytics cookies — help us understand how visitors use the site so we can improve it (e.g. Google Analytics). These only run with your consent.
Marketing cookies — used to show you relevant adverts on other platforms and measure ad performance (e.g. Meta Pixel). These only run with your consent.
When you first visit sp5der.co.uk, you’ll be shown a cookie banner where you can accept or reject non-essential cookies, and change your preferences at any time via [link to cookie settings, if you have one]. You can also block or delete cookies through your browser settings, though this may affect how parts of the site work.
4. Who We Share Your Data With
We don’t sell your personal data. We share it only with trusted third parties who help us run the business, and only to the extent necessary:
- Payment processors (e.g. Stripe, PayPal) — to process your payment securely. We never see or store your full card details.
- Delivery and courier partners — to get your order to you.
- Email and marketing platforms (e.g. Klaviyo, Mailchimp) — if you’ve opted in to marketing.
- Analytics providers (e.g. Google Analytics) — to understand site usage.
- IT and hosting providers — to keep the website running securely.
- Regulatory or legal bodies — where we’re required to by law, such as HMRC for tax purposes.
Each of these third parties is only permitted to use your data for the purpose we’ve specified, and we have agreements in place requiring them to protect your data properly.
5. International Data Transfers
Some of the third-party services we use (such as certain payment or analytics providers) may store or process data outside the UK, including in the United States or EEA. Where this happens, we ensure appropriate safeguards are in place, such as the UK’s International Data Transfer Agreement (IDTA) or a finding of adequacy, so your data remains protected to UK standards wherever it’s processed.
6. How Long We Keep Your Data
We keep personal data only as long as necessary for the purpose it was collected:
- Order and transaction records: typically 6 years, to meet HMRC and accounting obligations
- Account information: for as long as your account is active, plus a reasonable period afterwards
- Marketing data: until you unsubscribe or withdraw consent
- Customer service correspondence: typically up to 2 years, to help resolve any follow-up issues
After these periods, data is securely deleted or anonymised.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data (“right to be forgotten”), where applicable
- Restrict how we use your data
- Object to certain processing, including direct marketing
- Data portability — receive your data in a portable format
- Withdraw consent at any time, where we rely on consent (e.g. unsubscribing from marketing)
To exercise any of these rights, email us at [SUPPORT EMAIL]. We’ll respond within one month, as required by law.
If you’re unhappy with how we’ve handled your data, you also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO) Website: ico.org.uk Helpline: 0303 123 1113
8. Security
We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse, including secure (SSL-encrypted) checkout and restricted access to personal data within our business. No online system is 100% secure, but we work to keep your information safe and review our practices regularly.
9. Children’s Privacy
sp5der.co.uk is not intended for children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the law or our business practices. Any changes will be posted on this page with an updated “Last updated” date. We’d encourage you to check back periodically.
11. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please get in touch:
Email: [email protected] Address: Leonard House, 7 Newman Road, Bromley, Kent, BR1 1RJ