Privacy policy
Last updated: 14 July 2026
Who we are
razaki.co.uk ("Razaki Collectables", "we", "us") is the data controller for personal data collected through this site. Contact: [email protected].
What we collect and why
| Data | When | Why (lawful basis) |
|---|---|---|
| Name, e-mail, delivery address | When you place an order (entered on Stripe's secure checkout page) | To fulfil your order, send order e-mails and meet our accounting obligations (contract; legal obligation) |
| Payment card details | At checkout | Processed entirely by Stripe — we never receive or store your card number |
| Name, e-mail, message | When you use the contact form | To reply to you (legitimate interest) |
| Server logs (IP address, pages requested) | Automatically | Security and error diagnosis (legitimate interest); kept briefly, then deleted |
Cookies
We use only strictly necessary cookies: one that remembers your basket and, if you're the site administrator, a login cookie. We set no analytics, advertising or third-party tracking cookies — which is why there's no cookie banner. Stripe sets its own cookies on its checkout pages for fraud prevention; see Stripe's privacy policy.
Who we share data with
- Stripe — payment processing and fraud prevention.
- Royal Mail — your name and address, to deliver your order.
- Our e-mail provider — to send order confirmations and replies.
We do not sell personal data or use it for third-party marketing. We don't send marketing e-mails at all — only transactional order e-mails.
How long we keep it
Order records (including your name, address and e-mail) are kept for 6 years to meet HMRC accounting requirements, then deleted. Contact-form messages are deleted once resolved. Basket cookies expire after 14 days.
Your rights
Under UK GDPR you can ask us for a copy of your data, ask us to correct or delete it, object to or restrict processing, and ask for data portability. E-mail [email protected] and we'll respond within one month. If you're unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk).