PACKRATA Leoniveygames Company

Privacy Policy

Last updated: February 2026

1. Data Controller

LEONIVEYGAMES LTD is the data controller responsible for your personal data.

  • Address: [REGISTERED_ADDRESS]
  • Email: [EMAIL]

2. What Data We Collect

We may collect and process the following personal data:

  • Identity data: name, email address
  • Contact data: postal address, phone number, email
  • Transaction data: order history, payment references (we do not store card details — these are processed by Stripe)
  • Account data: login credentials (password is stored in hashed form only)
  • Technical data: IP address, browser type and version, device information
  • Usage data: pages visited, products viewed (only with your cookie consent)
  • Marketing data: newsletter subscription preferences

3. How We Use Your Data

We use your personal data for the following purposes:

  • To fulfil orders (legal basis: contract performance) — processing payments, arranging delivery, sending order confirmations
  • To manage your account (legal basis: contract performance) — maintaining login, order history, saved addresses
  • To send marketing communications (legal basis: consent) — newsletter emails about new products and offers. You can unsubscribe at any time
  • To improve our website (legal basis: legitimate interests) — analysing usage patterns to improve user experience
  • To comply with legal obligations (legal basis: legal obligation) — tax records, fraud prevention

4. Third Parties

We share your data with the following third parties as necessary:

  • Stripe — payment processing (see Stripe's Privacy Policy)
  • Vercel — website hosting
  • Neon — database hosting
  • Royal Mail / courier services — order delivery

We do not sell your personal data to any third party.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

  • Account data: retained until you delete your account
  • Order data: retained for 6 years for tax and accounting purposes
  • Marketing data: retained until you unsubscribe

6. Your Rights (UK GDPR)

Under the UK GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your personal data (subject to legal retention requirements)
  • Restriction — request we limit processing of your data
  • Portability — request your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interests
  • Withdraw consent — where processing is based on consent, you can withdraw at any time

To exercise any of these rights, contact us at [EMAIL].

7. Cookies

Please see our Cookie Policy for details on how we use cookies.

8. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.