Privacy Policy

This policy explains what personal information Ninja Shark Outlet collects, why we collect it, what we do with it and what rights you have over it.

We are the data controller for the information described here.

Ninja Shark Outlet 1st/2nd Floor, Building 3150, Thorpe Park, Century Way, Leeds, England LS15 8ZB, United Kingdom sales@ninjasharkoutlet.com · 0800 862 0452

What we collect

When you visit the site. Device and browser information, IP address, time zone, cookies on your device, the pages and products you view, referring sites and search terms, and how you interact with the site.

When you order. Name, billing address, delivery address, email address, telephone number and order details.

Payment information. Card payments are processed by Shopify Payments and other providers. We do not receive or store your full card number. We see the last four digits, the card type and whether the payment succeeded.

When you contact us. Whatever you put in your message, and our reply.

When you make a warranty claim. The model, serial number, purchase date and a description of the fault, which we pass to the manufacturer.

When you subscribe. Your email address, and whether you open and click our emails.

Why we use it, and our lawful basis

Where we rely on legitimate interests we have considered whether our interest is overridden by your rights. You can object at any time.

Cookies

Cookies that are strictly necessary to run the site, keep your basket and log you in do not require consent.

Analytics and advertising cookies are only set if you consent, through the cookie banner. You can change or withdraw your consent at any time through the cookie settings link in the footer, or by clearing cookies in your browser.

Who we share it with

• Shopify, which hosts the store and processes orders
• Payment providers, for payments, refunds and chargebacks
• Couriers, to deliver your order
• US customs authorities, for orders shipped to the United States
• Manufacturers, where you make a warranty claim or where a product safety issue arises
• Our accountant, for bookkeeping and tax
• Email and marketing providers, if you subscribe
• Law enforcement or regulators, where we are legally required to disclose

We do not sell your personal information.

Warranty claims and manufacturers

To handle a warranty claim we have to pass your details to the manufacturer — usually your name, contact details, the model and serial number, the purchase date and the fault.

The manufacturer becomes a data controller in its own right for what it does with that information, under its own privacy policy. We only send what the claim requires.

If you would rather deal with the manufacturer directly, tell us and we will give you the route instead.

Customs data on US orders

To ship to the United States we must give customs authorities the recipient's name, delivery address and contact details, along with a description and value of the contents. This is a legal requirement of importing goods and we cannot ship without it.

International transfers

Some of our providers, including Shopify, process data outside the United Kingdom. Where personal data is transferred out of the UK, it is protected by a UK adequacy decision, or by the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, along with any additional safeguards needed.

Shipping an order to the United States necessarily involves transferring the delivery details there.

You can ask us for details of the safeguards applying to a particular transfer.

How long we keep it

• Order and transaction records: six years from the end of the accounting period, because HMRC requires it.
• Warranty and repair records: six years, so we can look up what has happened to a machine.
• Customer service correspondence: two years from the last contact.
• Marketing consent and subscriber data: until you unsubscribe, then a suppression record so we do not email you again.
• Website analytics: as set by the tool, typically 14 to 26 months.

We delete or anonymise data once the retention period ends.

Security

We use encrypted connections across the site and access controls on our systems. No system is perfectly secure, but if a breach happens that is likely to result in a risk to your rights, we will report it to the ICO within 72 hours and tell you where the law requires it.

Your rights

If you are in the United Kingdom, under UK GDPR you have the right to:

• be informed about how we use your data — this policy
• access the personal data we hold about you
• have inaccurate or incomplete data corrected
• have your data erased in certain circumstances
• restrict processing in certain circumstances
• receive your data in a machine-readable format
• object to processing based on legitimate interests, and to direct marketing at any time
• not be subject to solely automated decision-making with legal or similarly significant effects, which we do not carry out

To exercise any of these, email sales@ninjasharkoutlet.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect processing carried out before you withdrew it.

If you are in the United States

Several US states give residents rights over their personal information, including the right to know what is collected, to access it, to correct it, to delete it, and to opt out of sale or sharing for targeted advertising.

We do not sell personal information. To make a request, email sales@ninjasharkoutlet.com stating which state you live in and what you want. We will not discriminate against you for exercising these rights.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right.

You also have the right to complain to the Information Commissioner's Office:

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF 0303 123 1113 · ico.org.uk

Marketing

We only send marketing emails if you asked for them, or if you bought from us and we told you at the time that you could opt out.

Every marketing email has an unsubscribe link. It works immediately. You can also email us and we will remove you.

We do not send marketing by SMS.

Children

Our store is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has given us their information, contact us and we will delete it.

Changes

We may update this policy. The date at the top of the page shows when it last changed. Where a change is significant we will make it obvious rather than relying on you noticing.