Privacy Policy
What data we collect, why we collect it, who we share it with, and how to get it deleted.
The short version. We collect what we need to sell you a saber and get it to your door. We do not sell your data. You can ask us to show you what we hold, correct it, or delete it — and we will.
1. Who We Are
Replica Sabers is the data controller for the personal data described here. Contact us at jedimaster@replicasabers.co.uk for any privacy matter.
2. What We Collect
| Data | Why | Lawful basis |
|---|---|---|
| Name, email, delivery address, phone | To process and deliver your order, and to contact you about it | Contract |
| Payment details | Handled entirely by our payment provider — we never see or store your full card number | Contract |
| Order history | Warranty claims, returns, and support | Contract / legal obligation |
| Email address (marketing) | To send you updates, if you opted in | Consent |
| Website usage & cookies | To keep the site working and understand what people find useful | Consent / legitimate interests |
| Age confirmation | Legal requirement for bladed items | Legal obligation |
3. Who We Share It With
We share only what is necessary, only with parties who need it:
- Couriers (including DPD) — your name, address and phone number, so they can deliver.
- Payment processors — they handle your card details directly. We receive confirmation of payment, not the card number.
- Email providers — to send order confirmations and, if you opted in, marketing.
- Our hosting provider — which stores the site and its database.
- Suppliers — where an item ships directly, your delivery address only.
We do not sell your personal data. We do not share it with advertisers or data brokers.
In the event of a chargeback or evidence of fraud, we may share relevant transaction details with payment processors and fraud prevention services, as permitted by data protection law.
4. How Long We Keep It
- Order and transaction records: 6 years, as required by UK tax law.
- Marketing consent: until you withdraw it.
- Support correspondence: 2 years.
- Website analytics: typically 14 months.
5. Your Rights
Under UK GDPR you have the right to:
- Access — ask for a copy of the data we hold about you.
- Rectify — have inaccurate data corrected.
- Erase — ask us to delete your data (though we must keep order records for 6 years for tax purposes).
- Restrict or object to processing.
- Portability — receive your data in a portable format.
- Withdraw consent at any time, where consent is the basis.
Email jedimaster@replicasabers.co.uk and we will respond within one month. There is no charge.
6. Cookies
We use cookies to keep the site working (your basket, your login) and to understand how the site is used. You can control cookies through your browser settings or our cookie banner. Blocking essential cookies will break the checkout.
7. Marketing
We only send marketing email if you opted in. Every email has an unsubscribe link, and it works immediately. You can also just email us and ask to be removed.
8. Security
The site runs over HTTPS. Card data is handled by our payment provider and never touches our servers. Access to customer data is limited to those who need it to do their job.
No system is perfectly secure. If a breach occurs that is likely to risk your rights and freedoms, we will notify the ICO within 72 hours and tell you without undue delay.
9. International Transfers
Some of our providers operate outside the UK. Where data is transferred, it is protected by adequacy regulations or standard contractual clauses.
10. Children
Our site is not directed at children under 13, and we do not knowingly collect their data. If you believe we have, contact us and we will delete it.
11. Complaints
If you are unhappy with how we have handled your data, please tell us first — we would like the chance to fix it.
You also have the right to complain to the Information Commissioner's Office: ico.org.uk, or 0303 123 1113.
12. Changes
We may update this policy. The “last updated” date at the top will always tell you when. Material changes will be flagged on the site.