Privacy Policy

---

Privacy Policy

Ralbru Fun & Games

Effective Date:12.01.2024
Last Updated:  19.02.2026

1. Who We Are

Ralbru Fun & Games (“we”, “us”, “our”) is the data controller responsible for your personal data.

We are committed to protecting your personal data and complying with:

• The UK General Data Protection Regulation (UK GDPR)
• The EU General Data Protection Regulation (EU GDPR)
• The Data Protection Act 2018

If you have any questions about this Privacy Policy or your data protection rights, you can contact us at:

Ralbru Fun & Games
Email: enquiries@ralbru.com
Address: Ralbru Fun & Games, Rawling Street, Sittingbourne, Kent, ME9 0RT
Phone: 07871 913415

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

A. Identity Data

• First name and surname
• Date of birth
• Gender
• Place of birth (if required for age verification)

B. Contact Data

• Billing address
• Delivery address
• Email address
• Telephone number

C. Account Data

• Username and password
• Purchase history
• Account preferences

D. Technical Data

• IP address
• Browser type and version
• Device information
• Operating system
• Time zone setting

E. Usage Data

• Website activity
• Pages viewed
• Interaction with advertisements
• Browsing behaviour where consent is provided

F. Marketing and Communications Data

• Your preferences in receiving marketing
• Communication history

We do not intentionally collect special category data (such as health or biometric data).

3. Lawful Basis for Processing

Under UK/EU GDPR, we must have a lawful basis to process your personal data. We rely on:

Performance of a Contract

To:

• Create and manage your account
• Process payments
• Deliver products
• Provide customer support

Legal Obligation

To:

• Comply with tax and accounting regulations
• Respond to lawful requests from authorities

Legitimate Interests

To:

• Improve our website and services
• Prevent fraud
• Maintain network security
• Analyse website usage

We ensure that our legitimate interests do not override your fundamental rights.

Consent

Where required, we rely on consent for:

• Email marketing
• Non-essential cookies
• Advertising tracking

You may withdraw consent at any time.

4. How We Use Your Data

We use your personal data to:

• Provide and manage our services
• Process transactions
• Deliver goods
• Communicate about orders
• Provide promotional offers (with consent)
• Improve website performance
• Ensure website security
• Prevent fraud and misuse

We do not sell personal data.

5. Data Retention

We retain personal data only as long as necessary:

• Account data: Retained while your account is active
• Transaction data: Retained for up to 6 years (for tax/legal compliance)
• Marketing data: Retained until consent is withdrawn
• Technical data: Retained according to analytics and security requirements

After retention periods expire, data is securely deleted or anonymised.

6. Your Rights Under UK/EU GDPR

You have the following rights:

• Right of access – Request a copy of your personal data
• Right to rectification – Correct inaccurate data
• Right to erasure (“right to      be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent
• Rights relating to automated decision-making and profiling

To exercise your rights, contact us at [Insert Email].

You also have the right to lodge a complaint with:

• The UK Information Commissioner’s Office (ICO) (if you are in the UK)
• Your local EU Data Protection Authority (if you are in the EU)

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Ensure website functionality
• Analyse traffic
• Improve performance
• Deliver relevant advertising

We use a cookie consent mechanism allowing you to accept or reject non-essential cookies.

You may also control cookies through your browser settings.

Third-party service providers (such as analytics or advertising networks) may place cookies on your device. We require these providers to comply with GDPR.

8. Data Sharing

We may share your personal data with:

• Payment processors
• Shipping providers
• IT hosting and website providers
• Marketing service providers (with consent)
• Legal or regulatory authorities

All third parties process data under written agreements and must implement appropriate security measures.

We do not transfer personal data outside the UK or EEA unless:

• The country has been deemed adequate by the UK/EU authorities, or
• We use Standard Contractual Clauses (SCCs) or equivalent safeguards.

9. Data Security

We implement appropriate technical and organisational security measures including:

• SSL encryption
• Access controls
• Secure servers
• Password protection
• Staff training
• Breach response procedures

If a personal data breach occurs that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

10. Children’s Privacy

Ralbru Fun & Games provides products that may be of interest to children; however:

• We do not knowingly collect personal data from children under the age of 13 (UK) or under 16 (EU) without verified parental consent.
• Where required by law, parental consent will be obtained before processing a child’s personal data.
• If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information promptly.

Parents or guardians may contact us at any time to:

• Request access to their child’s data
• Request deletion of their child’s data
• Withdraw consent

We encourage parents to supervise their children's online activity.

11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing personal data.

13. Changes to This Policy

We may update this Privacy Policy periodically. The updated version will be published on this page with a revised “Last Updated” date.