Privacy Policy

• Trading name: The Christmas Gadgets
• Company: North Stack Digital Ltd, registered in England and Wales, company number 17543538
• Registered office: 2 Frederick Street, London WC1X 0ND, United Kingdom
• Email: [email protected]

We are the data controller for the personal data described in this policy.

• Order data: name, email, phone (optional), delivery and billing address, what you bought and how much you paid.
• Account data: your login email and order history, if you create an account.
• Messages: what you write to us by email, chat or the contact and return forms, including photos you send.
• Payment data: PayPal tells us that a payment was made and its reference. We never receive your full card number.
• Technical data: IP address, browser and device type, pages visited and your rough location (country), to run and protect the website.
• Marketing data: your email if you sign up for reminders or offers.

• To take and deliver your order and handle returns and refunds: to perform our contract with you.
• To keep records for tax and accounting: legal obligation.
• To keep the website safe, stop fraud and fix problems: our legitimate interests.
• To answer your messages: legitimate interests, or contract if it is about an order.
• To send reminders and offers by email: your consent, which you can withdraw at any time with the unsubscribe link or by emailing us.
• Analytics and advertising cookies: only with your consent, see our Cookie Policy.

We only share what each partner needs to do its job:

• Suppliers and delivery companies, who pack and deliver your order: your name, delivery address, phone (if given) and the items ordered.
• PayPal, to take payments and refunds.
• Contabo GmbH (Germany), which hosts our website and database.
• Cloudflare, Inc., which protects and speeds up the website.
• Our email provider, to send order and delivery emails.
• Google, only if you accept analytics or advertising cookies.
• Authorities, if the law requires it.

We never sell your personal data.

Some of our partners are outside the UK, including suppliers and delivery companies that ship our products, and service providers in the EU and the USA. When data leaves the UK we use the protections the law requires, such as UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU standard contractual clauses.

• Order and payment records: 6 years, for tax law.
• Messages and return requests: up to 2 years after the last contact.
• Accounts: until you ask us to close it.
• Marketing sign-ups: until you unsubscribe.
• Technical logs: usually up to 12 months.

Our website is not meant for children under 18 and we do not knowingly collect their data.

You can ask to see, correct or delete your data, to limit or object to how we use it, and to get a copy to take elsewhere. Email [email protected]. We answer within one month. If you are not happy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

The website uses HTTPS encryption, payments are handled by PayPal, and access to our systems is limited and password-protected.

We may update this policy. The date at the top shows when it last changed.