Who is responsible for your information?
Refayce Ltd is the data controller for Crackerworld. We are registered in England and Wales under company number 13260208, with our registered office at Ty Dewin, 16 Station Road, Port Talbot, Wales, SA13 1JB. Questions or rights requests can be sent to crackers@crackerworld.com.
What we collect and why
| When | Information | Purpose and legal basis |
|---|---|---|
| You order | Name, email, phone, delivery and billing details, order, payment status and customer-service messages. | To take payment, deliver the order, send receipts and updates, handle returns and keep accounting records. This is necessary for our contract and legal obligations. Stripe processes card details; Crackerworld does not receive your full card number. |
| You request a delivery quote | Contact details, address, product choice and anything you add to the form. | To price and arrange the requested order. This is necessary to take steps at your request before a contract. |
| You vote or enquire | Name, email, choice, business details and message. | To count a genuine product vote or reply to an enquiry. We rely on our legitimate interests in product research and customer service. A vote is not a marketing subscription. |
| You allow WhatsApp contact | Mobile number and the permission you gave. | To discuss that order or quote only. We rely on your consent, which you can withdraw at any time. |
| You use the site | Page visited, date and time, referring source or campaign, broad device type and country, plus basic security records. To estimate unique visitors, an IP address and browser signature are immediately converted to a one-way keyed identifier; we do not store the raw IP address or full browser signature in our analytics tables. Retailer access also uses a short-lived access cookie. | To operate and protect the site, understand interest in Crackerworld and improve the journey to checkout. We rely on our legitimate interests and use only the strictly necessary cookie described in our cookie notice. |
Who receives it?
We share only what is needed with service providers that help us run Crackerworld: Stripe for checkout and payments; FormSubmit for routing site forms and paid-order alerts; our website, email and technical providers; and postal or courier providers for delivery. We may also share information with professional advisers, regulators, law enforcement or a buyer of the business where the law permits or requires it. We do not sell personal information.
International services
Some providers may process information outside the UK. Where UK data-protection law requires it, we use an adequacy decision, approved contractual safeguards or another lawful transfer mechanism. Provider privacy information is available from Stripe and FormSubmit.
How long we keep it
- Order, payment and accounting records: normally six years after the end of the relevant accounting period.
- Delivery and general enquiries: up to 18 months after the last contact.
- Retailer enquiries: up to 24 months after the last contact.
- Buyer votes: until the relevant product decision is complete, then deleted or anonymised, and no longer than 12 months unless you contact us again.
- Cookie-free analytics visitor identifiers: up to 90 days. Aggregated traffic and conversion totals: up to 26 months.
- Product-safety, complaint and recall records: for as long as reasonably needed to protect customers and meet legal obligations, normally up to 10 years.
We may retain a record longer where a dispute, fraud concern or legal requirement makes that necessary. We securely delete or anonymise information when it is no longer needed.
Your rights
Depending on the circumstances, you can ask us for access, correction, deletion, restriction, portability or to object to our use of your information. You can withdraw consent at any time without affecting earlier lawful use. Email crackers@crackerworld.com; we may need to verify your identity.
You can also complain to the Information Commissioner’s Office. We would appreciate the chance to put things right first.
Children and automated decisions
Purchases are for adults aged 18 or over. We do not knowingly collect information directly from children, and we do not use personal information for automated decisions or profiling that produce legal or similarly significant effects.
Changes
We will update this page when our practices materially change and show the new date at the top.