Privacy Policy

Last updated: 21 August 2026

Who we are

Critical Hit Collectables LTD is the data controller responsible for the personal information collected through this website.

Our website address is https://criticalhitcollectables.co.uk/.

If you have questions about this privacy policy or how we use your personal information, contact us at:

Critical Hit Collectables LTD
Email: [email protected]

Information we collect

We may collect and process the following categories of personal information:

Identity information: including your name and account username.
Contact information: including your billing address, delivery address, email address and telephone number.
Order information: including the products you purchase, order values, delivery choices, returns, refunds and communications concerning your order.
Account information: including your account details, saved addresses, order history and preferences.
Payment information: including payment status, payment method and transaction references supplied by our payment providers. We do not normally receive or store your complete card details.
Communication information: including messages, support requests, reviews, competition entries and other correspondence you send to us.
Technical information: including your IP address, browser type, device type, operating system, approximate location, referring website and information about how you use our website.
Marketing information: including your marketing preferences and your interactions with marketing communications.
Fraud-prevention information: including information used to identify suspicious transactions, payment fraud, misuse or threats to the security of our website.

How we collect your information

We collect personal information when you:

Place or attempt to place an order
Create or update a customer account
Contact us or request customer support
Request a return, refund or exchange
Subscribe to marketing communications
Leave a product review or other website submission
Enter a promotion or competition
Browse or interact with our website

We may also receive information from payment providers, delivery companies, fraud-prevention services and other service providers involved in processing your order.

How and why we use your information

We only use personal information where we have a lawful reason to do so. The purposes and lawful bases we commonly rely upon are set out below.

To fulfil our contract with you

We use your information where it is necessary to:

Process and deliver your order
Take and confirm payment
Provide order and delivery updates
Manage your customer account
Respond to questions about an order
Process cancellations, returns, exchanges and refunds
Provide customer support

To comply with legal obligations

We may process and retain information where necessary to comply with tax, accounting, consumer-protection, product-safety, fraud-prevention and other legal obligations.

For our legitimate interests

We may use personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights. These interests include:

Operating, securing and improving our website and services
Preventing fraud, misuse and unauthorised transactions
Maintaining business and transaction records
Understanding how customers use our website
Responding to enquiries and resolving disputes
Establishing, exercising or defending legal claims
Sending relevant marketing to existing customers where permitted by law

We may rely on your consent for optional activities such as certain marketing communications and non-essential cookies or tracking technologies. You can withdraw your consent at any time.

Information required to place an order

We need certain information, such as your name, contact details, delivery address and payment information, to process an order. If you do not provide the required information, we may be unable to accept, process or deliver your order.

Payments

Payments are handled by the secure payment provider made available to you at checkout. Your payment provider may collect and process payment card, bank, security and fraud-prevention information under its own privacy terms.

Critical Hit Collectables LTD does not normally receive or store your complete payment card number or card security code. We may receive limited information such as the payment method, payment status, transaction reference and the final digits of a payment card.

We do not sell your personal information.

We may share information with trusted organisations where necessary to operate our business and provide your order, including:

Payment processors and banks
Delivery, postal and fulfilment providers
Website hosting, maintenance and security providers
Email and customer-communication providers
Accounting, bookkeeping and professional advisers
Analytics and website-performance providers, where permitted
Fraud-prevention and payment-security providers
Government bodies, regulators, courts or law-enforcement authorities where legally required

Service providers may only use personal information as necessary to provide their services to us or as otherwise permitted by law.

If our business or assets are sold, reorganised or transferred, relevant personal information may be disclosed to professional advisers and a prospective purchaser, subject to appropriate safeguards.

Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies are small files stored on your device when you visit a website.

We may use the following categories of cookies:

Strictly necessary cookies: required for functions such as the shopping basket, checkout, account login, security and remembering privacy choices.
Functional cookies: used to remember choices and provide additional website features.
Analytics cookies: used to understand website traffic, performance and how visitors interact with the website.
Marketing cookies: used to measure advertising and provide more relevant marketing, where these services are enabled.

Strictly necessary cookies may be placed without consent because they are required to provide services requested by you. Where required by law, optional analytics, functional and marketing cookies will only be used after you have given consent.

You can accept, reject or change your optional cookie choices using the cookie controls provided on our website. You can also manage cookies through your browser settings, although blocking strictly necessary cookies may prevent features such as the basket, checkout or customer account from working correctly.

Customer accounts

If you create an account, we store the information provided in your customer profile and information connected with your orders. You can view and update certain account information by signing in.

Website administrators and authorised service providers may access account information where necessary to operate the website, fulfil orders, provide support, investigate security issues or comply with legal obligations.

You are responsible for keeping your account password confidential. Please contact us if you believe your account has been accessed without permission.

Product reviews and public submissions

If you submit a product review or other public content, the information included in that submission may be displayed publicly. Do not include personal information that you do not want other people to see.

We may collect your IP address, email address and browser information when you submit content to help detect spam, fraud and misuse. Submissions may be checked using automated spam-detection services.

Marketing communications

We may send you marketing communications where you have consented or where the law otherwise permits us to contact existing customers about similar products.

You can stop receiving marketing emails at any time by using the unsubscribe link in an email or by contacting [email protected].

Unsubscribing from marketing will not prevent us from sending essential service communications concerning your account, orders, payments, deliveries, returns or security.

Embedded content and external websites

Our website may contain embedded content or links to third-party websites, such as videos, social media content or payment services.

Third-party websites may collect information, use cookies or track your interaction with their services. We do not control those organisations and this privacy policy does not cover their independent use of your information. You should review their privacy information before providing personal data.

International transfers

Some service providers may process personal information outside the United Kingdom. Where this happens, we will take reasonable steps to ensure that an appropriate lawful transfer mechanism and safeguards are in place, such as UK adequacy regulations or approved contractual protections.

How long we retain your information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet our legal, accounting and reporting obligations.

Orders, invoices, payments and refunds: normally retained for up to six years after the relevant accounting period.
Customer accounts: retained while the account remains active and afterwards where needed for transaction records, legal obligations or disputes.
Customer-service correspondence: normally retained for up to two years after the enquiry is resolved, unless connected with an order, complaint or legal issue requiring longer retention.
Marketing information: retained until you withdraw consent, unsubscribe or the information is no longer required. We may retain limited suppression information to ensure we respect an opt-out.
Security and technical records: retained for a limited period unless required to investigate fraud, misuse, a security incident or a legal claim.
Cookie information: retained for the period described by the relevant cookie or until you delete it through your browser.

Information may be retained for longer where required by law, a regulator, a court order, an ongoing dispute, fraud investigation or legal claim. When information is no longer required, we will delete or anonymise it where reasonably possible.

How we protect your information

We use reasonable organisational and technical measures designed to protect personal information against loss, misuse, alteration, unauthorised access or disclosure.

However, no website or method of internet transmission is completely secure. You should use a strong, unique password for your customer account and avoid sharing it with anyone.

Your data-protection rights

Depending on the circumstances, you may have the right to:

Request access to the personal information we hold about you
Ask us to correct inaccurate or incomplete information
Ask us to delete your information
Ask us to restrict how your information is used
Object to processing based on legitimate interests
Object at any time to direct marketing
Request the transfer of certain information to you or another organisation
Withdraw consent where processing is based on consent
Complain to the Information Commissioner’s Office

These rights are not absolute and may be subject to legal exemptions. For example, we may need to retain order and transaction records to meet tax, accounting or legal obligations.

To exercise a data-protection right, email [email protected]. We may need to request information to confirm your identity before completing the request.

Automated decision-making

Payment and fraud-prevention providers may use automated systems to assess transactions for security and fraud risks. This may result in a transaction being delayed, referred for review or declined.

Critical Hit Collectables LTD does not otherwise make decisions based solely on automated processing that produce legal or similarly significant effects for customers.

Children’s information

Our website is intended for customers who are able to enter into a purchase contract. We do not knowingly collect personal information directly from children under 13 through account registration or marketing subscriptions.

Purchases for children should be made or supervised by a parent or guardian. If you believe a child has provided personal information without appropriate permission, please contact us.

Complaints

If you are concerned about how we have handled your personal information, please contact us first at [email protected] so that we can investigate.

You also have the right to complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

Changes to this privacy policy

We may update this privacy policy when our services, providers or legal obligations change. The latest version will be published on this page with its updated revision date.

Contact us

For privacy enquiries or requests concerning your personal information, contact: