Privacy Policy

1. Data Controller

• Company Name: thebanditcamp
• Jurisdiction: England and Wales
• Contact: support@thebanditcamp.com

2. What Information We Collect

• Account Information: Name, email address, password (hashed), phone number (optional).
• Order Information: Billing and delivery addresses, payment status, order contents.
• Session and Device Information: IP address, browser type, device type, operating system, session duration, and activity logs.
• Marketing Preferences: Newsletter subscription status.

3. How We Collect Information

• Information you provide during account creation, checkout, support requests.
• Automatically through cookies and similar tracking technologies.

4. Lawful Bases for Processing

• Contractual Necessity: To process orders and deliver Goods.
• Consent: For marketing emails (opt-in required).
• Legitimate Interests: For fraud prevention, analytics, and site improvement.
• Legal Obligation: Compliance with applicable law.

5. How We Use Your Information

• To process transactions and deliver orders.
• To communicate with you about orders, support requests, and promotional offers.
• To maintain and improve website functionality.
• To ensure legal compliance.

6. Sharing Information

• Stripe: For payment processing.
• Shipping Carriers: For delivering orders.
• Analytics Providers: For website usage analysis (cookie-based).
• We do not sell your personal data to third parties.

7. International Transfers

Some personal data may be processed outside the UK (e.g., Stripe). We ensure compliance using Standard Contractual Clauses or similar safeguards.

8. Cookies

• Essential Cookies: For authentication and secure sessions.
• Analytics Cookies: For tracking site usage and performance (consent required).
• Users will be prompted for cookie consent upon visiting the site.

For more details, see our Cookie Policy.

9. Marketing Communications

• We send marketing communications only with your explicit consent.
• You can withdraw consent at any time via an unsubscribe link in emails.

10. Your Rights

You have the right to:

• Access your data.
• Correct inaccurate data.
• Request deletion of your data.
• Object to processing.
• Data portability.

To exercise these rights, contact: support@thebanditcamp.com

11. Data Retention

• User accounts and order records are retained indefinitely unless a deletion request is submitted.
• Support inquiries are retained for business and legal purposes.

12. Data Security

We implement appropriate technical and organizational security measures including SSL encryption, secure databases, and access restrictions.

13. Children

We do not knowingly collect data from anyone under the age of 18.

14. Complaints

You have the right to lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/

15. Changes to This Policy

We may update this Privacy Policy. Significant changes will be notified to users at next login and require acceptance.