Who is responsible
The controller is Leighton Hepworth trading as RetroReplay UK. 65 Coronation Road, Stainforth, Doncaster, South Yorkshire, DN7 5EU, United Kingdom. Email: info@retroreplay.uk. Contact us to ask a privacy question or exercise a data right.
What we use & why
Orders: your name, contact details, delivery address, purchased items, payment status and order history are used to fulfil our contract. Payment details are collected by Stripe; we receive transaction references and payment results, not full card numbers.
Availability requests: we store your selected item, name, email, requested quantity, optional notes, request reference and status so we can check sourcing and reply. This takes steps you request before a possible contract. No payment or reservation is created. Other enquiries and returns are used to answer you and administer an order or legal claim. Our legitimate interests include customer support, preventing abuse and keeping the shop secure. Financial records are kept to meet legal obligations.
Hosting providers process technical connection and security information such as IP addresses and request logs. The private owner area uses ChatGPT sign-in. You can browse the public store without creating an account. We do not sell personal information or run advertising profiles.
Community stories and private messages
Console Hunts and contact messages collect your name, email, subject and message to respond to your request. They are private and cannot be published as community stories. Community contributions additionally collect your chosen public display name and express permission to publish your original text after review. Your email remains private and is used only to discuss the contribution; submitting does not subscribe you to marketing.
Private requests may also include the selected shopping route and a short campaign label supplied with the link. These help us understand and respond to your request; we do not add browsing history or create advertising profiles. The private owner pipeline records the reply stage, next action, owner notes and any follow-up date. Submitting does not subscribe you to marketing.
Personal shopping-help requests also record the budget range, shopping purpose, setup and item names you choose to include. A product link can preselect the item you are asking about. Your saved list is included only when you select that option. These details are used to answer your private request and are not a mailing-list subscription. The same private-request retention schedule applies.
We rely on your permission to publish an optional story. You can withdraw it and request removal or correction by emailing info@retroreplay.uk with the reference or URL. Stories remain displayed while published and permission continues. Private requests and unpublished submissions are kept while active, then normally removed twelve months after closure. Only authorised owner moderation can publish a consented story. Do not submit sensitive personal information or private details about others.
How long we keep it
Our normal retention schedule is six years after the relevant financial year for completed order and accounting records, and twelve months after closure for an enquiry that does not become an order. Active disputes, legal obligations or fraud investigations may justify longer retention, with access restricted.
Unpaid checkout records are removed or anonymised after 90 days once reconciled. Operational logs are retained only as needed for hosting security and fault investigation. We review records and remove information that is no longer needed. Accepted transactional queue messages have their address and message content cleared after 30 days; minimal identifiers remain to prevent repeat sends. The underlying order and accounting record follows the schedule above.
Cookies & device storage
The basket uses a necessary rruk_cart cookie for up to 30 days and local storage named rruk-basket-v1 to remember item IDs and quantities. The optional saved-items list uses rruk-saved-v1 local storage on this device. Session storage keeps a checkout request reference to prevent duplicate attempts. The availability form holds a temporary request reference in the open page’s memory so retrying the same submission does not create duplicate enquiries. These support the shopping function you request; they do not contain card details.
Hosting, sign-in and Stripe may use necessary security or session cookies during their services. We have not added analytics or advertising trackers. You can clear browser storage to reset your basket; blocking necessary storage may prevent checkout. Any future optional tracking will require its own notice and, where required, prior consent.
Your choices & rights
You may ask for access, correction, erasure, restriction or portability of your information, and object to processing based on legitimate interests, where those rights apply. Email info@retroreplay.uk. We may need to verify your identity. We normally respond within one month; we explain any lawful extension.
Where processing relies on your consent, including optional public stories, you may withdraw it. We make no solely automated decisions with legal or similarly significant effects on you. Payment fraud checks may be carried out by Stripe; contact us if you need help with an affected order.
You can complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/. Providing contact and delivery details is necessary to fulfil an order; without them we cannot deliver. We do not knowingly market directly to children.
Last updated 20 October 2026 · Policy version 2026-10-19-source-orders