Legal

Privacy policy

Last updated: 15 October 2026

This policy explains what personal data we collect when you visit calcuera.com, buy from us, join the Calcuera Club or get in touch, how we use it, and the rights you have over it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Calcuera is run by Brad Cracknell, trading as Calcuera ("Calcuera", "we", "us"). We are the data controller for the personal data described in this policy.

Address: Flat 1, Villiers Court, Southsea, PO5 3PU, United Kingdom
Email: hello@calcuera.com

2. The data we collect

  • Identity and contact details: your name, email address, phone number, and billing and delivery addresses.
  • Order details: what you buy, order numbers, delivery and tracking information, returns, exchanges and cancellations.
  • Payment information: payments are handled by our payment providers. We do not see or store your full card details.
  • Account and Calcuera Club details: your account, sign-in details, order history, Club points balance and rewards.
  • Communications: messages you send us, including contact, order support, ambassador applications and club partnership enquiries (for example your social media handles, home club and the information you choose to share).
  • Reviews: any product review you submit, including your name or initials as displayed.
  • Marketing preferences: whether you have signed up to our emails and how you interact with them.
  • Technical and usage data: your IP address, device and browser type, pages viewed and how you use our site, collected through cookies and similar technologies (see our Cookie policy).

3. How we use it, and our lawful basis

  • To take, make, deliver and support your order, including returns, exchanges, refunds, cancellations and order tracking. Basis: performance of our contract with you.
  • To run your account and the Calcuera Club, including awarding and redeeming points. Basis: performance of a contract.
  • To reply to your messages, ambassador applications and club enquiries. Basis: our legitimate interest in responding to people who contact us, and steps you ask us to take before entering into a contract.
  • To send marketing emails about new products, offers and events. Basis: your consent, or for existing customers, the "soft opt-in" for similar products under the Privacy and Electronic Communications Regulations. You can unsubscribe at any time using the link in every email.
  • To show you relevant adverts on other sites and to measure our advertising. Basis: your consent through our cookie banner.
  • To keep our site secure and prevent fraud. Basis: our legitimate interests, and legal obligations.
  • To understand and improve our site and products. Basis: our legitimate interests, and your consent for any non-essential analytics cookies.
  • To keep business and tax records. Basis: legal obligation.

We do not sell your personal data, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Who we share it with

We only share what is needed, with organisations that process it for us under contract or that we must share it with:

  • Shopify, which hosts our store and processes orders and payments. Shopify is also an independent controller for some data it uses to run and secure its platform; see the Shopify privacy policy.
  • Payment providers (such as Shopify Payments and any wallet you choose at checkout, for example PayPal, Apple Pay or Google Pay), who process your payment.
  • Our UK production partners, who finish and pack your order, and delivery companies, who receive your name, address and contact details to deliver it.
  • Email and marketing services we use to send our emails, and advertising platforms such as Meta (Facebook and Instagram), only where you have given consent to marketing cookies.
  • Professional advisers such as our accountant, and authorities such as HMRC, the police or a court, where the law requires it.

5. International transfers

Some of our service providers (including Shopify) store or process data outside the UK, for example in Canada, the European Economic Area or the United States. Where they do, the transfer is protected by UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU-US Data Privacy Framework.

6. How long we keep it

  • Order, payment and tax records: six years after the end of the tax year of the order, as required by HMRC.
  • Your account and Club points: until you close your account, or after three years without any orders or sign-ins.
  • Marketing data: until you unsubscribe, after which we keep your email on a suppression list so we don't email you again.
  • Messages and support requests: up to two years after the conversation ends.
  • Ambassador applications and club enquiries: up to 12 months if we don't go ahead, or for as long as we work together and two years afterwards if we do.
  • Cookies: as set out in our Cookie policy.

7. Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data deleted, where we no longer need it or you withdraw consent;
  • restrict or object to how we use it, including objecting to direct marketing at any time;
  • receive your data in a portable format;
  • withdraw consent at any time, without affecting anything we did before you withdrew it.

To use any of these rights, email hello@calcuera.com. We may ask you to confirm your identity, and we'll respond within one month. It's free unless a request is clearly unfounded or excessive.

8. Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Children

Our site is not aimed at children under 13 and we don't knowingly collect their data. Our ambassador programme is open to people aged 18 and over only.

10. Security

Our site is served over an encrypted connection, payments are handled by PCI-compliant providers, and access to your data is limited to the people and services that need it. No system is completely secure, so please keep your account details private.

11. Changes to this policy

We may update this policy from time to time. We'll post any changes here with a new "last updated" date and, if the changes are significant, let you know by email.