Privacy

Who looks after your details

Spragg’s Games is the trading name of Natalie Spragg, Midway Place, Treflach, Oswestry, SY10 9HF. We decide how your details are used and we’re responsible for looking after them. If you have any question about your details, email us at hello@spraggsgames.co.uk or write to us at that address.

When you order

We keep your name, email address, phone number, delivery address and what you bought, so we can send your order and keep you posted on how it’s going. The law calls this using your details to carry out a contract with you.

If you send a gift straight to someone, you give us their name and address, and we use them only to deliver it, along with any message you write for the card. We never add them to our mailing list or contact them about anything else. If they send the gift back for credit, we use the email address they give us to send it.

When you buy a gift card, we keep your name and email address so we can send you the card number and answer any question about it.

Your card details go straight to Square, who take the payment. We never see or keep your full card number. Square uses your payment details, including to check for fraud, under its own privacy notice. If you pay with Google Pay or Apple Pay, Google or Apple handles that part under its own privacy notice too.

We keep order records for six years from the end of the tax year they fall in, because tax law says we have to.

The weekly email

If you sign up, we keep your email address and the date you joined, and send you a weekly email with new arrivals and offers, and news of the shop opening. We only do this because you asked us to, and we don’t track whether you open the emails or click their links.

Every email has an unsubscribe link. Use it whenever you like and the emails stop straight away. We then keep your address on a do-not-send list, so we never email you again by mistake.

When you send us a message

The contact form sends your name, email address and message to our inbox so we can reply, because answering people who get in touch is part of running a shop. We keep the conversation for as long as it’s useful, and delete it if you ask.

When you visit the website

Like every website, ours receives your IP address, browser and the pages you ask for. Our hosting company keeps these in short-lived logs so the site keeps working and stays safe from misuse. We don’t use them to work out who you are.

Some games have a video. It comes from YouTube, and nothing is sent to YouTube until you press play. Once you do, Google receives your IP address and what you watch, under its own privacy notice.

How we count visits

To see which pages people use and how quickly they load, so we can make the website better, we use Cloudflare Web Analytics. When a page loads, a small script from Cloudflare sends the page’s address, the page you came from, your browser, operating system and type of device, the country you’re visiting from, and how long the page took to load.

It sets no cookies and stores nothing in your browser. Cloudflare says it doesn’t use this to follow you from site to site or to recognise you on a later visit. Your IP address reaches Cloudflare as part of the connection; Cloudflare says it throws it away at its nearest data centre and doesn’t store it. We only ever see totals, never one visitor.

Cloudflare does this for us, on our instructions. We rely on our legitimate interest in knowing how the website is used. You can turn it off for this browser here, and it stays off until you turn it back on.

Who else handles your details

We use a few companies to help run the shop. They act on our instructions and only use your details to do that job for us.

• Resend: sending order emails, your messages from the contact form, and the weekly email. Sent from Ireland; Resend is a US company.
• Zoho: our email inbox, where your messages and replies arrive. Held in the EU.
• Neon: the database that holds the mailing list. Held in London.
• Cloudflare: counting visits to the website, as above. A US company; it handles the data at its data centre nearest to you.
• Vercel: hosting this website. A US company with servers around the world.
• Evri: your name and address, to deliver your parcel. In the UK.

Square (payments and orders) uses your details under its own privacy notice, as above.

We also share details when we have to: with HMRC and our accountant for tax, with the police or courts where the law requires it, or with a buyer if the shop is ever sold, who would have to look after them in the same way.

Where a company holds details outside the UK, they stay protected in one of the ways UK law allows: the country is approved by UK regulations (this covers the EU, and US companies certified under the UK Extension to the EU-US Data Privacy Framework), or the company signs the UK’s standard data transfer terms. Ask us if you’d like to know which applies to a particular company.

We never sell your details or share them for advertising, and we don’t make decisions about you by computer alone.

Cookies and your browser

We don’t use advertising, tracking or analytics cookies. The website stores only what it needs to work:

• Your basket, kept in your own browser (not a cookie) until you check out, so it’s still there if you come back.
• At checkout, the card form comes from Square, which sets the cookies it needs to take a payment safely and spot fraud.
• If you turn off visit counting, a note of that, kept in your browser (not a cookie), so it stays off.

None of these need your consent, because the site can’t work without them.

Visit counting uses no cookies. The law lets us run it without asking first, because it only counts how the website is used, as long as we tell you about it and you can turn it off, which you can above.

Your rights

You can ask us to:

• give you a copy of what we hold about you;
• correct anything that’s wrong;
• delete your details;
• limit how we use them, for example while we check they’re right;
• stop using them where we rely on our own interests, and stop emailing you at any time;
• send details you gave us to you or someone else, in a file a computer can read.

Where we rely on your consent (the weekly email), you can withdraw it at any time. Just email hello@spraggsgames.co.uk. It’s free. We’ll reply within a month, and may ask you to prove who you are first. If a request is complicated we can take up to two months more, and we’ll tell you if we do. Some rights have limits, such as the order records tax law makes us keep; if we can’t do what you ask, we’ll tell you why.

Complaints

If you’re unhappy with how we’ve used your details, please tell us first, by email to hello@spraggsgames.co.uk or through our contact form. We’ll let you know we’ve got it within 30 days, look into it properly and tell you what we found.

You can also complain to the Information Commissioner’s Office, the UK regulator: ico.org.uk/make-a-complaint, 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Children

We sell games for all ages, but buying from us is for grown-ups. We don’t knowingly collect details from children under 13.

Changes

We update this page when what we do changes, and the date at the top shows the latest version. If a change matters to you, we’ll tell you before it takes effect.