Privacy Policy

1. Who we are

r3crew.com is operated by Mario Wageman, trading as R3Crew, 11 The Foundry, Dacorum Way, Hemel Hempstead, HP1 1BF, United Kingdom. We are the data controller for the personal data described in this policy. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and, where they apply to you, the EU GDPR and other local laws.

2. What we collect

Information you give us

• Order and account details – name, email address, phone number, billing and delivery address, order history, and a password if you create an account (stored encrypted).
• Payment details – handled entirely by our payment provider. We never see or store your full card number.
• Messages – anything you send us by email, contact form or social media.
• Marketing preferences – whether you have signed up to our newsletter.
• Affiliate details – if you join our affiliate programme: your name, email, website or social profile, and payout details.

Information collected automatically

• Technical data – IP address, browser and device type, operating system, language, approximate country (used to show you the right language and currency).
• Usage data – pages viewed, products viewed or added to the basket, links clicked, referring site.
• Cookies and similar technologies – see section 7 and our Cookie Policy.

3. Why we use it

4. Who we share it with

We do not sell personal data. We share it only with service providers who need it to run the shop, and only for the purposes above:

• Production and fulfilment partners – the warehouses in China and the USA that make and ship your order receive your name, delivery address, phone number (for the courier) and the items ordered.
• Couriers and postal services – to deliver your parcel and provide tracking.
• Payment processing – WooPayments (powered by Stripe) processes card and wallet payments and fraud checks.
• Email – Brevo sends our order emails and newsletters.
• Analytics – Google Analytics (via Google Site Kit) and Jetpack Stats, only if you accept statistics cookies.
• Advertising – Meta Pixel and TikTok Pixel, only if you accept marketing cookies.
• Hosting and security – our website is hosted on servers in the European Union; Cloudflare provides DNS and security services; Sucuri and Jetpack provide security monitoring.
• Authorities – where the law requires it, or to protect our legal rights.

Each provider is bound by a contract to protect your data and use it only on our instructions.

5. International transfers

Because your order is produced and shipped from China or the USA, your delivery details are transferred to those countries. Some of our other providers (for example Google, Meta, Stripe) also process data in the United States. Where data leaves the UK or EU we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses or an adequacy decision (including the UK–US and EU–US Data Privacy Frameworks where the provider is certified), together with the provider’s own security measures.

6. How long we keep it

• Order records – 6 years after the order, as required for UK tax and accounting.
• Account data – while your account is active; you can ask us to delete it at any time.
• Customer support emails – up to 2 years after the last contact.
• Newsletter data – until you unsubscribe.
• Analytics data – up to 26 months, in aggregated form.
• Affiliate data – for the life of the affiliate account plus 6 years for payment records.

7. Cookies

We use strictly necessary cookies (basket, checkout, language, currency, cookie consent), and, only with your consent, statistics and marketing cookies. You can change your choice at any time using the Manage Consent link in the footer. Full details, including every cookie we set, are in our Cookie Policy.

8. Marketing

We only send newsletters if you have signed up. Every email contains an unsubscribe link, or you can contact us through the contact form. Even if you unsubscribe, we will still send emails that are needed to fulfil your orders, such as confirmations and shipping updates.

9. Security

The site uses HTTPS encryption, passwords are stored hashed, access to customer data is limited to the people who need it, backups are encrypted, and payments are handled by PCI DSS compliant providers. No online service can be completely secure, but we take reasonable and proportionate steps to protect your data. If a breach ever puts your rights at risk, we will inform you and the ICO as the law requires.

10. Your rights

Under UK and EU data protection law you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is wrong or incomplete;
• delete your data (unless we must keep it, for example for tax records);
• restrict or object to how we use it, including for direct marketing;
• give you your data in a portable format;
• withdraw consent at any time where we rely on consent.

To exercise any of these rights, use the contact form. We will respond within one month. There is no charge unless a request is clearly excessive.

11. Children

r3crew.com is not aimed at children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We update this policy when our practices or the law change. The date at the top shows the latest version. Significant changes will be highlighted on the site.

13. Contact & complaints

Write to us through the contact form or at . We reply within 2 business days.

If you are unhappy with how we handle your data you can complain to the UK Information Commissioner’s Office: ico.org.uk, phone 0303 123 1113. EU residents may also contact their local data protection authority.