This Privacy Policy explains what personal data RozGamer.co.uk collects, why we collect it and what we do with it. It also sets out your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), which covers cookies and marketing emails. Please read it alongside our Terms & Conditions and Disclaimer.
Your privacy at a glance
- We don’t sell your dataYour details are used to run your orders and support, never sold or rented to other companies.
- Card details stay protectedPayments are handled by secure payment providers. We never see or store your full card number.
- Marketing is your choiceWe only email offers with your permission, or to existing customers who can opt out. Every email has an unsubscribe link.
- You stay in controlAsk to see, correct or delete your data at any time. Most requests are free and answered within a month.
Who we are
RozGamer.co.uk is an online store selling gaming accessories, consoles and video games for PlayStation, Xbox, Nintendo Switch and PC to customers across the United Kingdom. The website is operated by RozGamer, which is the data controller for the personal data described in this policy. That means we decide how and why your data is used, and we’re responsible for looking after it.
- Operator
- RozGamer
- Website
- RozGamer.co.uk
- Address
- United Kingdom
Questions about this policy or about your personal data can be sent to the email address above, and we’ll reply as quickly as we can.
The personal data we collect
We only collect what we need to sell and deliver your gaming gear, support you afterwards and run a safe, working website. Depending on how you use RozGamer.co.uk, that can include the following.
Information you give us
- Identity and contact details: your name, email address, phone number, and delivery and billing addresses.
- Order details: the products you buy, order numbers, delivery preferences and any gift messages or delivery instructions.
- Account details: your login email and password if you create an account, plus saved addresses and order history.
- Messages to us: what you tell us by email or our contact form, such as your console or device model, a description of a problem, or photos of a faulty item.
- Marketing preferences: whether you’ve chosen to receive offers and news from us.
Payment information
Card and other payments are processed by specialist payment service providers, who must meet the Payment Card Industry Data Security Standard (PCI DSS). We never see or store your full card number or security code. We receive only limited information from them, such as confirmation that a payment succeeded and, in some cases, the card type and last four digits so we can match refunds to the right payment.
Information collected automatically
When you visit our website we, and the providers that help run it, collect technical information such as your IP address, browser and device type, operating system, the pages you view, the site that referred you and the date and time of your visit. Some of this comes from cookies: see the Cookies section for the choices you have.
Information from other organisations
We may receive details from payment providers (for example the result of fraud checks) and from delivery companies (for example delivery updates, or notice that a delivery attempt failed) when they help us complete your order.
We don’t ask for sensitive information such as health details, and we don’t need it to help you. Please leave it out of messages to us, and never send passwords or full card numbers by email or phone. We will never ask for them.
How we use your data and our lawful bases
UK data protection law says we must have a valid reason, called a lawful basis, for each way we use personal data. The table below shows what we use your data for, the information involved and the lawful basis we rely on.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Taking, processing and delivering your order, including payment and delivery updates | Name, email, phone number, delivery and billing address, order details, payment status | Contract |
| Setting up and running your customer account, if you create one | Account login details, saved addresses, order history | Contract |
| Handling cancellations, returns, refunds and faulty item claims | Order details, contact details, your messages and any photos you send us | Contract and legal obligation (UK consumer law) |
| Answering questions you send by email or our contact form | Name, contact details, your message, order number and console or device model if you give them | Legitimate interests (helping customers), or contract where it’s about an order |
| Keeping tax and accounting records | Order, invoice and transaction records | Legal obligation |
| Preventing fraud and keeping our website and checkout secure | Technical data such as IP address and device information, order and payment status | Legitimate interests and, where applicable, legal obligation |
| Sending offers, new arrivals and news by email | Name, email address, marketing preferences | Consent, or for existing customers the PECR “soft opt-in” (legitimate interests), with an opt-out every time |
| Understanding how our website is used so we can improve it, if we add analytics and you accept optional cookies | Analytics cookie data, pages viewed, device and browser type | Consent (optional cookies) |
| Keeping a record of your marketing preferences, and of any cookie choices you make | Your consent and opt-out records | Legal obligation and legitimate interests |
If you cancel an order, return an item or report a fault, we use your details to process it in line with your statutory rights. Our Delivery & Returns page explains how that works.
What the lawful bases mean
- Contract: we need the data to fulfil our agreement with you, such as delivering an order you’ve paid for, or to take steps you’ve asked for before buying.
- Legal obligation: the law requires it, for example keeping financial records for HMRC or handling your statutory consumer rights.
- Legitimate interests: the use is necessary for our reasonable business interests, such as preventing fraud or answering questions, and doesn’t override your rights and interests. You can object to these uses; see Your rights.
- Consent: you’ve given clear permission, for example ticking a box to receive marketing emails or accepting optional cookies. You can withdraw consent at any time.
Marketing emails
If you sign up for emails, or you’re an existing customer who didn’t opt out when you ordered, we may email you about gaming accessories and games similar to those you’ve bought, along with offers and new arrivals. Every email includes an unsubscribe link, and you can also opt out by emailing support@rozgamercouk.com. We don’t send marketing texts or make marketing calls without your consent.
Who we share your data with
We share personal data only where it’s needed to run our store and serve you, and we don’t sell your personal data. The types of organisation we may share it with are:
- Payment service providers, to take payments, issue refunds and help prevent fraud.
- Delivery and courier companies, who need your name, address and sometimes your phone number or email to deliver your parcel and send delivery updates.
- Website, hosting and e-commerce platform providers, and other IT services that store and process data on our behalf.
- Email and customer service tools we use to send order confirmations and reply to your messages.
- Analytics providers, only if you’ve accepted optional analytics cookies.
- Professional advisers such as accountants, lawyers and insurers, where needed.
- Manufacturers or their authorised repair agents, where needed to handle a warranty or fault claim. We’ll let you know before we do this.
- HMRC, the police, courts and other authorities, where the law requires it or to prevent or detect crime and fraud.
- A buyer of our business, if RozGamer or its assets are ever sold, in which case your data would continue to be protected in line with this policy.
Service providers that handle data on our behalf act as our processors. They may only use it on our instructions, must keep it secure and are bound by written contracts, as UK GDPR requires.
International transfers
Some of our service providers, or their own suppliers, may store or access data outside the UK. When that happens we make sure your data gets the same level of protection it would have in the UK, using one or more of the safeguards UK law allows:
- transfers to countries the UK has confirmed provide adequate protection (known as UK adequacy regulations), which include the countries of the European Economic Area;
- the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses;
- for US organisations certified to it, the UK Extension to the EU-US Data Privacy Framework.
Contact us if you’d like more information about the safeguards used for a particular transfer.
How long we keep your data
We keep personal data only for as long as we need it for the purposes above, including meeting legal, tax and accounting requirements. When it’s no longer needed, we securely delete it or anonymise it so it can no longer identify you.
| Type of record | How long we keep it | Why |
|---|---|---|
| Orders, invoices, payments and refunds | Six years from the end of the financial year the order falls in | UK tax rules require businesses to keep accounting records, usually for six years. We may also need them to deal with legal claims. |
| Customer account | While your account is open. When you close it, we delete or anonymise your account details | Order records linked to the account are kept for the tax period above. |
| Customer service messages, returns and fault claims | Normally up to two years after your query is resolved | So we can help with follow-up questions. Kept longer only if linked to an open claim or dispute. |
| Marketing preferences | Until you unsubscribe or ask us to delete them | After you unsubscribe we keep your email address on a “do not contact” list so we don’t email you again. |
| Cookie data | For the lifetime of each cookie | We only use strictly necessary cookies at the moment, and these usually expire when you close your browser or soon after. |
Your data protection rights
Under UK GDPR you have the following rights over your personal data. Some apply only in certain circumstances, and we’ll explain if one doesn’t apply to your request.
- Right of accessAsk for a copy of the personal data we hold about you (a “subject access request”).
- Right to rectificationAsk us to correct information that is wrong or complete anything that is missing.
- Right to erasureAsk us to delete your data where we no longer have a good reason to keep it.
- Right to restrict processingAsk us to pause using your data, for example while we check it is accurate.
- Right to data portabilityAsk for data you gave us in a common digital format, or sent to another organisation.
- Right to objectObject to uses based on legitimate interests. You can always object to direct marketing.
- Right to withdraw consentWhere we rely on consent, change your mind at any time, for example by unsubscribing.
- Rights over automated decisionsIf a significant decision about you is made solely by automated means, you can be told about it, make representations, ask for a person to review it and challenge the decision.
We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. Our payment providers may use automated checks to help detect fraud; if you think a payment was declined in error, contact us and we’ll look into it.
How to make a request
Email support@rozgamercouk.com and tell us which right you’d like to use. You don’t have to use any particular wording. We may ask you to confirm your identity before we act, to protect your data from anyone pretending to be you. There’s normally no fee, and we’ll respond within one month of receiving your request (or of confirming your identity). If a request is complex, or you’ve made several, we may extend this by up to two further months and will tell you why.
Cookies and similar technologies
Cookies are small text files a website stores on your device. Under PECR we can use cookies that are strictly necessary for the website to work without asking first. For all other cookies we ask for your consent, and you can refuse them without it affecting your ability to shop with us.
| Type | What it does | Needs your consent? |
|---|---|---|
| Strictly necessary | Keeps items in your basket, runs a secure checkout and keeps you logged in. If we ever add optional cookies, one of these would also remember your cookie choices. | No, the site can’t work without them |
| Analytics | Would tell us which pages are popular and where visitors get stuck, so we can improve product pages and navigation. | Not currently used. We’ll ask first if this changes |
| Marketing | Would help measure advertising and show you relevant RozGamer offers on other websites. | Not currently used. We’ll ask first if this changes |
Managing your cookie choices
We don’t currently set any optional analytics or marketing cookies, so there’s nothing for you to opt out of. If we add them, we’ll ask for your consent first, with equally clear options to accept or reject, and add a “Cookie settings” link to every page so you can change your mind at any time.
You can block or delete cookies in your browser settings at any point; most browsers explain how in their help pages. If you block strictly necessary cookies, parts of the site such as the basket and checkout may not work.
Children’s privacy
We sell plenty of gear that younger players enjoy, but our website and checkout are intended for adults. Orders must be placed by someone aged 18 or over, and we don’t knowingly collect personal data from children under 13, who can’t give their own consent to online services under UK data protection law. If you’re a parent or guardian and think your child has given us their details, please contact us and we’ll delete them.
Buying a game for a younger player? Check the PEGI age rating first. Our disclaimer explains how ratings work, and PEGI.info has guidance for parents.
Keeping your data secure
We use appropriate technical and organisational measures to protect your personal data from loss, misuse and unauthorised access. These include encrypted HTTPS connections across our website, secure payment processing through our providers, access to customer data limited to people who need it, and choosing service providers that meet recognised security standards.
No website or internet transfer can be guaranteed 100% secure, so please use a strong, unique password for your account and keep it private. If a personal data breach happens that is likely to put your rights at risk, we’ll report it to the Information Commissioner’s Office within 72 hours where the law requires, and tell you directly without undue delay if there is a high risk to you.
Changes to this policy
We may update this Privacy Policy from time to time, for example if we add a new service provider, change how we use cookies or the law changes. The “Last updated” date at the top shows when it was last revised. If we make significant changes, we’ll highlight them on our website and, where appropriate, let customers know by email.
Contact us and how to complain
If you have a question about this policy or how we handle your data, or you want to use any of your rights, email support@rozgamercouk.com or use our contact page.
If you’re unhappy with how we’ve used your data, please tell us first so we can try to put things right. We’ll acknowledge your complaint within 30 days and let you know the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection. You can reach the ICO through its website or on its helpline, 0303 123 1113. The government’s data protection guide on GOV.UK also gives a useful overview of your rights.