{"id":2507,"date":"2025-10-19T08:31:13","date_gmt":"2025-10-19T08:31:13","guid":{"rendered":"https:\/\/modelcrate.shop\/?page_id=2507"},"modified":"2025-10-19T08:31:13","modified_gmt":"2025-10-19T08:31:13","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/modelcrate.shop\/index.php\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<h1>Privacy Policy (EU &amp; UK)<\/h1>\n<p><strong>Effective date:<\/strong> 19 October 2025<br \/>\n<strong>Controller:<\/strong> GLOBAL SHIP AND SERVICE LTD (\u201cwe\u201d, \u201cour\u201d, \u201cus\u201d)<br \/>\n<strong>Registered in:<\/strong> United Kingdom<br \/>\n<strong>Registered office:<\/strong> Ground Floor, Radley House, Richardshaw Road, Leeds, LS28 6LE<br \/>\n<strong>Company number:<\/strong> 16789042<br \/>\n<strong>Email:<\/strong> dmytro@modelcrate.shop<\/p>\n<hr \/>\n<h2>1) Who this policy applies to<\/h2>\n<p>This policy applies when you visit our website(s), place an order, create an account, contact customer support, sign up for marketing, participate in promotions, request warranty\/repair services, or otherwise interact with us. It covers individuals in the <strong>United Kingdom<\/strong> and the <strong>European Economic Area (EEA)<\/strong>.<\/p>\n<hr \/>\n<h2>2) What data we collect<\/h2>\n<p><strong>a) Identity &amp; contact data<\/strong><br \/>\nName, billing\/shipping address, email, telephone, account credentials.<\/p>\n<p><strong>b) Order &amp; support data<\/strong><br \/>\nCart contents, orders, invoices, delivery status, RMA\/warranty\/repair records (e.g., model, serial, fault description), communications with us.<\/p>\n<p><strong>c) Payment data<\/strong><br \/>\nPayment method, transaction identifiers and status. <strong>We do not receive or store full card numbers<\/strong>; these are processed by our payment provider(s) [insert, e.g., Stripe\/PayPal\/Adyen].<\/p>\n<p><strong>d) Device &amp; usage data<\/strong><br \/>\nIP address, device\/browser type, pages viewed, clicks, referring\/exit pages, approximate location (city\/country), session identifiers, error logs.<\/p>\n<p><strong>e) Marketing &amp; cookie preferences<\/strong><br \/>\nYour choices about newsletters, profiling for recommendations, and cookie consent settings.<\/p>\n<p><strong>f) User\u2011generated content<\/strong><br \/>\nProduct reviews, questions, images or videos you submit.<\/p>\n<p>We do not intentionally collect special category data. Please do not provide it to us.<\/p>\n<hr \/>\n<h2>3) Why we use your data (legal bases)<\/h2>\n<table>\n<thead>\n<tr>\n<th>Purpose<\/th>\n<th>Examples<\/th>\n<th>Legal basis (EU\/UK GDPR)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Fulfilling orders &amp; delivering products<\/td>\n<td>Processing payments, arranging delivery, customer updates<\/td>\n<td><strong>Contract<\/strong><\/td>\n<\/tr>\n<tr>\n<td>Customer service &amp; warranty\/repairs<\/td>\n<td>Diagnostics, replacements, returns, recalls<\/td>\n<td><strong>Contract<\/strong>; <strong>Legal obligation<\/strong> (product safety)<\/td>\n<\/tr>\n<tr>\n<td>Account &amp; site functionality<\/td>\n<td>Authentication, preventing abuse, remembering preferences<\/td>\n<td><strong>Legitimate interests<\/strong>; <strong>Contract<\/strong> (for accounts)<\/td>\n<\/tr>\n<tr>\n<td>Analytics &amp; performance<\/td>\n<td>Measuring pages that load slowly, improving UX<\/td>\n<td><strong>Legitimate interests<\/strong>; <strong>Consent<\/strong> where cookies are non\u2011essential<\/td>\n<\/tr>\n<tr>\n<td>Marketing<\/td>\n<td>Newsletters, offers for similar products, remarketing<\/td>\n<td><strong>Consent<\/strong> (EEA); <strong>Consent<\/strong> or <strong>soft opt\u2011in<\/strong> for existing UK customers under PECR (see Section 8)<\/td>\n<\/tr>\n<tr>\n<td>Security &amp; fraud prevention<\/td>\n<td>IP reputation checks, chargeback investigations<\/td>\n<td><strong>Legitimate interests<\/strong><\/td>\n<\/tr>\n<tr>\n<td>Legal, tax &amp; compliance<\/td>\n<td>Accounting, record keeping, responding to authorities<\/td>\n<td><strong>Legal obligation<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Where we rely on <strong>consent<\/strong>, you can withdraw it at any time (see Section 9).<\/p>\n<hr \/>\n<h2>4) Where we get your data<\/h2>\n<ul>\n<li>Directly from you (checkout, forms, support tickets, emails, phone).<\/li>\n<li>Automatically from your device via cookies\/SDKs (see Section 8).<\/li>\n<li>From service providers (e.g., payment or delivery status updates).<\/li>\n<li>Occasionally from partners\u2014only where lawful and transparent.<\/li>\n<\/ul>\n<hr \/>\n<h2>5) Sharing your data<\/h2>\n<p>We share personal data only as needed with:<\/p>\n<ul>\n<li><strong>Payment processors<\/strong> (&#8230;) to process transactions.<\/li>\n<li><strong>E\u2011commerce\/hosting &amp; IT<\/strong> (OVH).<\/li>\n<li><strong>Delivery &amp; logistics<\/strong> (e.g., Royal Mail, DPD, UPS).<\/li>\n<li><strong>Analytics &amp; marketing<\/strong> tools (only where permitted by your consent\/PECR).<\/li>\n<li><strong>Professional advisors<\/strong> (legal, accounting).<\/li>\n<li><strong>Authorities<\/strong> when required by law (e.g., tax, product safety recalls).<\/li>\n<\/ul>\n<p>We require recipients to protect your data and only use it for our specified purposes.<\/p>\n<hr \/>\n<h2>6) International transfers<\/h2>\n<p>We are based in the UK and may transfer data:<\/p>\n<ul>\n<li><strong>Between the UK and EEA.<\/strong> The EU\u2019s <strong>adequacy decisions for the UK<\/strong> remain in force and were <strong>extended until 27 December 2025<\/strong>, so personal data can continue to flow EEA\u2192UK without extra safeguards during this period. (<a title=\"Daily News 22 \/ 07 \/ 2025 - European Commission\" href=\"https:\/\/ec.europa.eu\/commission\/presscorner\/detail\/en\/mex_25_1884?utm_source=chatgpt.com\">European Commission<\/a>)<\/li>\n<li><strong>To the United States.<\/strong> Where we use US providers:\n<ul>\n<li>For <strong>EU\/EEA data<\/strong>, we may rely on the <strong>EU\u2011U.S. Data Privacy Framework (DPF)<\/strong> where the recipient is certified, alongside other GDPR safeguards as needed. (The DPF entered into force in July 2023 and was upheld by the EU General Court on 3 September 2025.) (<a title=\"EU-U.S. Data Privacy Framework (DPF)\" href=\"https:\/\/www.dataprivacyframework.gov\/Program-Overview?utm_source=chatgpt.com\">Data Privacy Framework<\/a>)<\/li>\n<li>For <strong>UK data<\/strong>, we may rely on the <strong>UK\u2011U.S. \u201cData Bridge\u201d<\/strong> (UK Extension to the EU\u2011U.S. DPF) for certified US recipients, or other UK transfer tools where appropriate. (<a title=\"Completing a transfer risk assessment when ...\" href=\"https:\/\/ico.org.uk\/for-organisations\/uk-gdpr-guidance-and-resources\/international-transfers\/international-data-transfer-agreement-and-guidance\/transferring-personal-information-to-the-us\/?utm_source=chatgpt.com\">ICO<\/a>)<\/li>\n<\/ul>\n<\/li>\n<li><strong>Other countries.<\/strong> Where applicable, we use the <strong>EU Standard Contractual Clauses (SCCs)<\/strong>, the <strong>UK International Data Transfer Agreement (IDTA)<\/strong> and\/or the <strong>UK Addendum<\/strong> to the SCCs, plus risk assessments and supplementary measures.<\/li>\n<\/ul>\n<p>We can provide details of transfer safeguards on request.<\/p>\n<hr \/>\n<h2>7) How long we keep your data<\/h2>\n<p>We keep data only as long as needed for the purposes above, including legal\/accounting requirements. Typical periods:<\/p>\n<ul>\n<li><strong>Orders, invoices &amp; tax records:<\/strong> <strong>6 years<\/strong> from the end of the financial year they relate to (statutory retention in the UK). (<a title=\"your responsibilities: Company and accounting records\" href=\"https:\/\/www.gov.uk\/running-a-limited-company\/company-and-accounting-records?utm_source=chatgpt.com\">GOV.UK<\/a>)<\/li>\n<li><strong>Warranty\/repair files:<\/strong> duration of warranty plus up to 6 years (to handle claims).<\/li>\n<li><strong>Support tickets &amp; chat:<\/strong> 2\u20133 years after last contact.<\/li>\n<li><strong>Marketing data:<\/strong> until you unsubscribe or your consent is withdrawn, then suppressed (kept only to respect your opt\u2011out).<\/li>\n<li><strong>Web analytics:<\/strong> per provider default or shorter where feasible.<\/li>\n<\/ul>\n<hr \/>\n<h2>8) Cookies &amp; similar technologies<\/h2>\n<p>We use cookies and similar tech to run the site (e.g., cart, checkout, security) and\u2014subject to your consent\u2014for analytics and advertising.<\/p>\n<ul>\n<li><strong>Consent for non\u2011essential cookies.<\/strong> In the UK and EEA, we request <strong>opt\u2011in consent<\/strong> for non\u2011essential cookies via our cookie banner. You can change your choices at any time via <strong>\u201cCookie settings\u201d<\/strong> in our footer. (<a title=\"Cookies and similar technologies | ICO\" href=\"https:\/\/ico.org.uk\/for-organisations\/direct-marketing-and-privacy-and-electronic-communications\/guide-to-pecr\/cookies-and-similar-technologies\/?utm_source=chatgpt.com\">ICO<\/a>)<\/li>\n<li><strong>Soft opt\u2011in (UK email marketing).<\/strong> Separate from cookies, UK PECR allows a limited <strong>\u201csoft opt\u2011in\u201d<\/strong> to email existing customers about <strong>similar<\/strong> products if we gave you a clear chance to opt out when we collected your details and in every message. You can opt out at any time. (This rule does <strong>not<\/strong> apply to new prospects or bought lists.) (<a title=\"Electronic mail marketing | ICO\" href=\"https:\/\/ico.org.uk\/for-organisations\/direct-marketing-and-privacy-and-electronic-communications\/guide-to-pecr\/electronic-and-telephone-marketing\/electronic-mail-marketing\/?utm_source=chatgpt.com\">ICO<\/a>)<\/li>\n<\/ul>\n<p>See our Cookie Notice for a current list of cookies and partners.<\/p>\n<hr \/>\n<h2>9) Your rights (EU\/UK)<\/h2>\n<p>Subject to conditions and exemptions, you have the right to:<\/p>\n<ul>\n<li><strong>Access<\/strong> your data;<\/li>\n<li><strong>Rectify<\/strong> inaccurate data;<\/li>\n<li><strong>Erase<\/strong> your data;<\/li>\n<li><strong>Restrict<\/strong> processing;<\/li>\n<li><strong>Object<\/strong> to processing (including direct marketing);<\/li>\n<li><strong>Data portability<\/strong>;<\/li>\n<li><strong>Withdraw consent<\/strong> (where we rely on consent);<\/li>\n<li><strong>Complain<\/strong> to a supervisory authority (see Section 11).<\/li>\n<\/ul>\n<p>To exercise rights, email us at <strong>[insert privacy email]<\/strong>. We verify identity and respond <strong>within one month<\/strong> (extendable by two months for complex requests).<\/p>\n<hr \/>\n<h2>10) Children<\/h2>\n<p>Our site and products are intended for <strong>adults<\/strong>. We do not knowingly collect data from children under <strong>13<\/strong> (UK). In the EEA, we do not knowingly seek consent directly from children below the local <strong>digital\u2011consent age<\/strong> (typically <strong>13\u201316<\/strong> depending on the country). Parents\/guardians who believe a child has provided data should contact us to delete it.<\/p>\n<hr \/>\n<h2>11) How to complain<\/h2>\n<p>If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to a data protection authority:<\/p>\n<ul>\n<li><strong>United Kingdom (ICO):<\/strong> Submit a complaint via the ICO website or call <strong>0303 123 1113<\/strong>. (<a title=\"Make a complaint | ICO\" href=\"https:\/\/ico.org.uk\/make-a-complaint\/?utm_source=chatgpt.com\">ICO<\/a>)<\/li>\n<li><strong>EEA:<\/strong> Contact your national supervisory authority (see the <strong>EDPB list of members<\/strong> for links to each authority). (<a title=\"Our Members | European Data Protection Board\" href=\"https:\/\/www.edpb.europa.eu\/about-edpb\/about-edpb\/members_en?utm_source=chatgpt.com\">European Data Protection Board<\/a>)<\/li>\n<\/ul>\n<hr \/>\n<h2>12) Security<\/h2>\n<p>We use administrative, technical and physical safeguards appropriate to the risks (e.g., access controls, encryption in transit, hardened hosting, regular patching). No system is 100% secure; if we believe your data may be at risk, we will act promptly and, where required, notify you and\/or authorities.<\/p>\n<hr \/>\n<h2>13) Automated decisions &amp; profiling<\/h2>\n<p>We do <strong>not<\/strong> make decisions with legal or similarly significant effects based solely on automated processing. We may use <strong>limited profiling<\/strong> (e.g., purchase history, browsing) to tailor offers or product recommendations. You can object to direct marketing at any time (see Section 9).<\/p>\n<hr \/>\n<h2>14) Changes to this policy<\/h2>\n<p>We may update this policy to reflect changes in our services, laws or guidance. Material changes will be highlighted on this page and, where appropriate, emailed to account holders. Please review this page periodically.<\/p>\n<hr \/>\n<h2>15) Contact us<\/h2>\n<p><strong>GLOBAL SHIP AND SERVICE LTD<\/strong><br \/>\n<strong>Email:<\/strong> dmytro@modelcrate.shop<br \/>\n<strong>Postal:<\/strong> Ground Floor, Radley House, Richardshaw Road, Leeds, LS28 6LE<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Privacy Policy (EU &amp; UK) Effective date: 19 October 2025 Controller: GLOBAL SHIP AND SERVICE LTD (\u201cwe\u201d, \u201cour\u201d, \u201cus\u201d) Registered in: United Kingdom Registered office: Ground Floor, Radley House, Richardshaw Road, Leeds, LS28 6LE Company number: 16789042 Email: dmytro@modelcrate.shop 1) Who this policy applies to This policy applies when you visit our website(s), place an [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-2507","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/modelcrate.shop\/index.php\/wp-json\/wp\/v2\/pages\/2507","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/modelcrate.shop\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/modelcrate.shop\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/modelcrate.shop\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/modelcrate.shop\/index.php\/wp-json\/wp\/v2\/comments?post=2507"}],"version-history":[{"count":1,"href":"https:\/\/modelcrate.shop\/index.php\/wp-json\/wp\/v2\/pages\/2507\/revisions"}],"predecessor-version":[{"id":2508,"href":"https:\/\/modelcrate.shop\/index.php\/wp-json\/wp\/v2\/pages\/2507\/revisions\/2508"}],"wp:attachment":[{"href":"https:\/\/modelcrate.shop\/index.php\/wp-json\/wp\/v2\/media?parent=2507"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}