Privacy Policy — Ravebook

At Ravebook ("we", "us", "our"), protecting your privacy is fundamental to how we operate. This Privacy Policy explains, in detail, what personal information we collect when you visit ravebook.shop or place an order with us, why we collect it, how we use and safeguard it, who we share it with, and the rights you have over it. It is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and the requirements of Google Merchant Center.

By using ravebook.shop or placing an order, you confirm that you have read and understood this policy.

1. Who we are and how to contact us

Ravebook is the data controller responsible for your personal information.

Trading name: Ravebook
Registered correspondence address: 190 Osmaston Rd, Derby DE23 8JU, United Kingdom
Email: support@ravebook.shop
Phone: +44 1332 265500 (Mon–Fri 9am–6pm)

For any privacy-related question, request, or complaint, please contact our privacy team at support@ravebook.shop with the subject line "Privacy Request".

2. The information we collect about you

We only collect information that is necessary to operate our store, deliver your order, comply with the law, and improve your experience. We group it into four categories:

2.1 Identity and contact data

Full name
Delivery address and, where different, billing address
Email address
Telephone number (used by Royal Mail for delivery)

2.2 Order and transaction data

The products you order, quantities, and the total amount due
Order number, order date, and order status
Delivery tracking information and proof-of-delivery records
Correspondence regarding returns, refunds, or complaints

We do not collect, process, or store any debit or credit card, banking, or digital wallet information on ravebook.shop. Our only payment method is Cash on Delivery — your payment is handed to the Royal Mail courier in cash when your parcel is delivered.

2.3 Technical and usage data

IP address and approximate location (country / city level)
Browser type, device type, operating system, and screen size
Pages visited, time on page, referring URL, and basic interaction analytics
Cookie identifiers strictly necessary for the cart and session

2.4 Communications data

Messages you send through our contact form, email, or phone
Feedback, reviews, and any voluntary information you provide

3. How and why we use your information

We process your personal information only when we have a valid lawful basis under UK GDPR. The table below summarises the main purposes:

To process and deliver your order — legal basis: performance of a contract.
To provide order updates and tracking information — legal basis: performance of a contract.
To respond to enquiries, complaints, and support requests — legal basis: legitimate interests (running a responsive customer service).
To prevent fraud, abuse, and refused-delivery loss — legal basis: legitimate interests.
To comply with our tax, accounting, and consumer-law obligations — legal basis: legal obligation.
To improve the website and product range — legal basis: legitimate interests, using aggregated, non-identifying analytics.

We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you.

4. Marketing communications

We do not send unsolicited marketing. If, in the future, we introduce a newsletter or promotional emails, you will only receive them after giving explicit opt-in consent, and you will be able to unsubscribe at any time using the link in every email or by emailing support@ravebook.shop.

5. Who we share your information with

We share the minimum information necessary with carefully selected partners who help us run the store. We never sell, rent, or trade your personal information.

Royal Mail — to deliver your parcel and collect the cash-on-delivery payment.
Hosting and infrastructure providers — to host ravebook.shop and our order database on secure, EU-located servers.
Email and communications providers — to send order confirmations, dispatch notifications, and respond to your messages.
Professional advisers — accountants, auditors, and legal counsel, bound by confidentiality.
HMRC, regulators, and law-enforcement bodies — only where required by law.

Every processor we use is contractually required to keep your data secure, use it only for the agreed purpose, and respect UK GDPR.

6. International transfers

Your data is stored on servers located within the United Kingdom or the European Economic Area (EEA). Where a service provider processes data outside the UK/EEA, we ensure that an appropriate safeguard is in place — such as the UK International Data Transfer Agreement (IDTA), the EU Standard Contractual Clauses, or an adequacy decision.

7. How long we keep your information

Order and tax records: 6 years from the end of the financial year — required by HMRC.
Customer service correspondence: 24 months from the last interaction.
Website analytics: aggregated and retained for a maximum of 14 months.
Marketing-consent records (if any): until you unsubscribe, plus 24 months for audit purposes.

When the retention period ends, your data is securely deleted or fully anonymised.

8. How we keep your information secure

All traffic between your browser and ravebook.shop is encrypted using TLS (HTTPS).
Our database enforces strict role-based access controls and row-level security.
Access to customer data is limited to authorised staff on a need-to-know basis.
We carry out regular backups, security reviews, and software updates.
Because we do not collect card data, there is no card information at Ravebook that could ever be exposed in a data breach.

9. Your rights under UK GDPR

You have the following rights in relation to your personal information:

Right of access — receive a copy of the personal data we hold about you.
Right to rectification — ask us to correct inaccurate or incomplete data.
Right to erasure — ask us to delete your data where there is no overriding legal reason to keep it.
Right to restrict processing — ask us to pause processing while a request is reviewed.
Right to data portability — receive your data in a machine-readable format.
Right to object — object to processing based on legitimate interests.
Right to withdraw consent — where processing is based on your consent.

To exercise any right, email support@ravebook.shop. We will respond within one calendar month. If you are unhappy with our response, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk, by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or by phone on 0303 123 1113.

10. Cookies

ravebook.shop uses only strictly necessary cookies — for example, to remember the items in your shopping cart and to keep your session secure. We do not use advertising or third-party tracking cookies by default. For full details, please see our Cookie Policy.

11. Children's privacy

ravebook.shop is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The "Last updated" date at the top of this page will always show the most recent revision. Material changes will be highlighted on the homepage for at least 14 days.