Privacy Policy

Effective Date: 25th June 2026
Last Updated: 25th June 2026

1. Who we Are

This privacy policy explains how Group Gear Ltd (“we”, “us”, “our”) collects and uses personal data when you use our website groupgear.co.uk, purchase products, contact us, or otherwise interact with our services.

Company details:
Group Gear Ltd
Company number: 07822851
Registered office: Unit 1 Antler Buildings, Bromsgrove Road, Halesowen, West Midlands, B63 3HJ

We are the data controller for your personal data under UK GDPR.

Contact:
Email: admin@groupgear.co.uk

2. Personal Data We Collect

We collect and process the following categories of personal data:

Identity Data

• Name
• Username or identifier

Contact Data

• Billing and delivery address
• Email address
• Telephone number

Financial Data

• Payment-related information (processed via secure third-party providers)
• Refund-related bank details where required
  (We do not store full card details.)

Transaction Data

• Order history
• Payment records
• Products purchased

Technical Data

• IP address
• Device, browser, and operating system details
• Login data
• Time zone and access data

Profile Data

• Account details
• Purchase history
• Preferences
• Feedback

Usage Data

• Website interaction and navigation data

Marketing & Communications Data

• Marketing preferences
• Communication preferences

3. How We Collect Your Data

We collect data using:

Direct interactions
When you:

• Place an order
• Create an account
• Contact us
• Subscribe to marketing
• Participate in surveys or promotions

Automated technologies

• Cookies
• Analytics tools
• Website logs

Third parties

• Payment processors
• Delivery providers
• Fraud prevention services
• Analytics providers

4. How we Use Your Personal Data

We only process your personal data where a lawful basis under UK GDPR applies.

Performance of a Contract

We use your data to:

• Process and fulfil orders
• Take payments and issue refunds
• Deliver products
• Provide customer support

Legitimate Interests

We process data where necessary to:

• Improve and secure our website and services
• Prevent fraud and misuse
• Analyse website performance
• Manage business operations

Legal Obligation

We process data to:

• Comply with tax and accounting laws
• Respond to lawful requests from authorities
• Meet regulatory obligations

Consent

We rely on consent for:

• Non-essential cookies
• Certain marketing communications

You may withdraw consent at any time.

5. Marketing

We may send marketing communications where permitted under UK GDPR and PECR.

You may opt out at any time by:

• Clicking “unsubscribe” in emails
• Contacting us directly

Marketing opt-out does not affect service or order-related communications.

6. Cookies and Tracking

We use cookies and similar technologies to:

• Enable core website functionality
• Remember preferences
• Analyse website performance and usage
• Improve user experience

Cookies are classified as:

• Strictly necessary cookies (required for the website to function)
• Analytics cookies
• Marketing cookies

Non-essential cookies are only used with your consent. You can manage or withdraw consent at any time via our cookie settings tool or browser settings.

For full details, see our Cookie Policy (where applicable).

7. Sharing Your Personal Data

We may share your personal data with trusted third parties only where necessary:

Service Providers (Processors)

Including:

• Payment processors (e.g., Stripe, PayPal)
• Delivery services (e.g., Royal Mail, DPD)
• Hosting and IT providers
• Fraud prevention services

All processors act under written contracts and may only process data according to our instructions.

Professional Advisers

• Accountants
• Legal advisers
• Auditors
• Insurers

Legal and Regulatory Bodies

• HM Revenue & Customs
• Law enforcement agencies
• Regulators where required by law

We do not sell your personal data or share it for third-party marketing purposes.

8. International Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations, or
• International Data Transfer Agreements (IDTAs), or
• Equivalent lawful safeguards under UK GDPR

9. Data Security

We use appropriate technical and organisational measures to protect personal data against:

• Loss
• Misuse
• Unauthorised access
• Alteration or disclosure

Access to personal data is restricted to authorised personnel and service providers who require it for legitimate business purposes.

10. Data Retention

We retain personal data only for as long as necessary for the purposes collected, including legal, tax, and regulatory requirements.

Typical retention periods:

• Order and transaction data: up to 6 years (tax and accounting requirements)
• Customer support records: up to 3 years after resolution
• Marketing data: until consent is withdrawn or inactivity threshold is reached

When no longer required, data is securely deleted or anonymised.

11. Your Rights