Privacy Policy

Last Updated: 6-1-2026.

This Privacy Policy explains what personal data we collect from you, why we collect it, how we use it, and your rights as a data subject under the UK General Data Protection Regulation (UK GDPR). Data Controller: Sensationplay. Business Address. Mill Cottage, Cwmbach, Whitland, UK. SA340DR. Email. sensationplay@outlook.com

The Data We Collect About You

We only collect the minimum amount of personal data required to process and ship your order, and to manage the functionality of our website.

  • Identity Data. We collect first name and last name. This enables us to identify you and process your order.

  • Contact Data. We collect your billing address, shipping address, email and telephone number. This enables us to ship your order, send you an order confirmation and contact you if there is an issue.

  • Transaction Data. We record the details of products you have purchased from us. This enables us to fulfil your order and manage efficient accounting & record keeping.

The approach we have adopted for (Identity Contact/Transaction) data is informed by the Lawful Basis for Processing (UK GDPR) and specifically, Performance of a Contract.

  • Technical Data. We record IP address, browser type, operating system, and pages viewed. This information is collected automatically by our platform provider, Squarespace for analytics, security and for site functionality. This approach to data collection is informed by Lawful Basis for Processing (UK GDPR) and specifically, Legitimate Interests (to run and secure a website)

How Your Data is Collected

We use different methods to collect data from and about you, including:

  • Direct Interactions. You provide this data when you place an order on our website or when you contact us via email.

  • Automated Technologies: As our website is hosted on Squarespace, technical data is collected automatically using cookies and server logs to help the website function securely and effectively.

Please refer to Squarespace’s Privacy Policy for full details on their technical data processing. The privacy policy can be accessed at: https://www.squarespace.com/privacy

How We Share Your Personal Data

We only share your personal data with essential third parties necessary to run our business and fulfil your order. We require all third parties to respect the security of your personal data and treat it in accordance with the law.

  • Payment processors. We share user data relating to identity and transaction data (but we do not store full credit card details). This enables us to securely process your payment.

  • Shipping/courier services. We share user data relating to identity, shipping address, email and phone number. This enables the service to deliver your order and provide delivery updates.

  • Squarespace. We share identity, contact, transaction, and technical data. This enables the service to deliver a secure and stable experience and to aid the process of your order.

  • Legal/regulatory bodies. We share user data as required by law. This enables us to comply with our legal obligations (HMRC as an example)

International Transfers

We use Squarespace, a US-based company, and certain third parties (such as payment processors) that may transfer and store your data outside the UK or the European Economic Area (EEA). When this occurs, we ensure a high degree of protection is afforded to your data by relying on mechanisms approved under the UK GDPR, such as Standard Contractual Clauses (SCCs), or by ensuring the third party is certified under a relevant framework.

Data Security and Retention

  • Data Security. We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. This includes using a secure, reputable platform (Squarespace) and ensuring all our payment processing is handled by secure third-party providers.

  • Data Retention. We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we will keep basic customer data (Identity, Contact, and Transaction Data) for six years after your last order for tax and warranty purposes.

Your Legal Rights (UK GDPR)

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These rights include:

  • The Right to Be Informed. To be informed about how your data is being used. We have produced this privacy policy to respond specifically to this right.

  • The Right of Access. To request a copy of the personal data we hold about you.

  • The Right to Rectification. To request we correct any incomplete or inaccurate data we hold about you.

  • The Right to Erasure ('Right to be Forgotten'). To request that we delete or remove your personal data where there is no good reason for us to continue processing it.

  • The Right to Restrict Processing. To request that we suspend the processing of your personal data.

  • The Right to Data Portability. To request a transfer of your personal data to you or a third party.

If you wish to exercise any of these rights, please contact us: sensationplay@outlook.com

Complaining to the Regulator

If you have any concerns about our use of your personal information, we would appreciate the chance to deal with your concerns. Please contact us. If we are unable to satisfy your query or concerns, you are able to make a complaint to the ICO (Information Commissioner's Office), the UK regulator for data protection issues. The ICO contact details are: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Website: ico.org.uk