Parties

Arcade Depot Limited T/A Arcadebits.co.uk, a company registered in England and Wales with company number 12224703 and having its registered office at 8 Joyce Avenue, Stoke on Trent, ST6 7PF (“the Company”); and

the individual using the Company’s website (“the User”).

Background

This website is operated by Arcade Depot Limited and is used to retail arcade parts online.

In operating the website, Arcade Depot Limited may collect certain personal data about individuals who use the website (“Users”). Personal data is defined by applicable data protection laws and includes any information relating to an identified or identifiable living individual.

Users’ personal data is collected and processed in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Data Protection Act 2018. Arcade Depot Limited processes Users’ personal data on the legal basis that such processing is necessary for the purposes of processing orders and providing future updates.

The purpose of this Privacy Policy is to inform Users about what personal data is collected about them, how it is used, their privacy rights and choices, and how they can contact Arcade Depot Limited about their personal data.

By using this website, Users consent to Arcade Depot Limited collecting and processing their personal data in accordance with this Privacy Policy.

Definitions

Personal data means any information relating to an identified or identifiable natural person.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Data subject means the identified or identifiable living individual to whom the personal data relates.

Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Sensitive personal data means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

Cookie means a small file placed on a user’s device. It is used to identify the user’s device and web browser.

User or you means any individual using this website.

Website means arcadebits.co.uk

Scope of Policy

This Privacy Policy applies to all personal data collected about individuals who use this website (“Users”).

The types of personal data this Privacy Policy covers includes:

Name;

Contact details such as email address and telephone number;

Demographic information such as postcode;

Website usage data;

Payment information where Users make purchases on the website;

Marketing preferences where Users have provided consent.

This Privacy Policy applies to personal data collected directly from Users as well as personal data obtained from third party sources.

This Privacy Policy does not apply to personal data collected by any third party websites linked to from this website or any external websites that Users link to using this website.

This Privacy Policy does not apply to personal data of Arcade Depot Limited employees. Employee personal data is covered by a separate HR privacy notice.

Data Collection

Types of data collected. Arcade Depot Limited collects the following personal data from Users:

Contact details including name, email address, postal address, telephone number;

Payment details including credit/debit card numbers when Users purchase goods or services;

Technical details including IP address, browser type and version, operating system, referral URL, actions taken on the website;

Usage data including website pages viewed, products purchased, search queries, clickstream data.

Sources of data collection. Personal data is collected from the following sources:

Registration and account forms where Users voluntarily submit their personal details to Arcade Depot Limited;

Website usage where technical and usage data is automatically collected via cookies and other tracking technologies;

Third party analytics and advertising providers who share personal data with Arcade Depot Limited for the purposes described in clause 3.4.

Purpose of collection. Personal data is collected for the purpose of fulfilling orders and keeping in contact with customers.

Use of Data

We use Users’ personal data to analyse how the website is used through Google Analytics cookies. This helps us provide a better user experience and improve the website. The data collected is anonymised and cannot identify individual Users.

Google Analytics cookies collect data such as the type of device a User uses, their browser and location. This data is anonymised and cannot identify a User personally.

We use advertising cookies to track Users’ interests on our website. This helps us select advertising that is relevant to individual Users. Users can opt-out of interest based ads by adjusting their cookie settings.

The advertising cookies track Users’ browsing behaviour and interests to select relevant online advertisements to display to them.

We use contact details provided by Users to fulfil any orders placed on the website. Users’ payment information is not stored by us – this data is collected securely by our third party payment processors.

Contact details are securely stored on our servers and accessed only by authorised personnel on a need-to-know basis for the purposes of fulfilling orders.

The legal basis for processing Users’ personal data as described in this section is our legitimate interests in operating our website and business or, where applicable, Users’ consent.

Sharing of Data

The Company uses third party service providers to help operate the website and deliver services to Users. The Company may share Users’ personal data with the following third parties on the basis that they only use it to perform services on the Company’s behalf:

Google Analytics (to analyse how Users use the website); and

Ad networks (to serve interest-based advertising on the website and third party websites).

If the Company sells or transfers all or a portion of its business or assets, including a transfer through bankruptcy, the Company may transfer Users’ personal data to the acquiring entity.

The Company may disclose Users’ personal data if required to do so by law, or in response to valid requests from law enforcement.

With Users’ consent, the Company may share limited personal data with third parties for their own marketing purposes. Users have the right to withdraw this consent at any time.

Cookies and Other Tracking Technologies

Types of cookies. We use the following cookies:

Functional cookies. These are used to recognise you when you return to our Website. This enables us to personalise our content for you, greet you by name and remember your preferences.

Analytics cookies. These cookies allow us to recognise and count the number of visitors and to see how visitors move around our Website when they are using it. This helps us to improve the way our Website works, for example, by ensuring that users are finding what they are looking for easily.

Advertising cookies. These cookies are used to make advertising more relevant to you and your interests. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and in some cases selecting advertisements that are based on your interests.

Purpose of cookies. The purpose of using cookies is set out in clause 6.1 above.

Third party cookies. Third parties such as Google Analytics use cookies on our Website. The use of such cookies is disclosed in clause 6.1 above. Users can opt out of Google Analytics by visiting https://tools.google.com/dlpage/gaoptout.

Controlling cookies. You can set your browser not to accept cookies and the websites above tell you how to remove cookies from your browser. However, some of our Website features may not function as a result.

Security of cookies. Cookies do not contain any information that personally identifies you, all information collected is anonymous and aggregated.

Changes to cookie policy. We may update this cookie policy by posting a new version on our Website. You should check this page occasionally to ensure you are aware of any changes.

Privacy Rights of the Individual

Right to access personal data. Users have the right to obtain confirmation from Arcade Depot Limited as to whether their personal data is being processed. Users have the right to request access to their personal data held by Arcade Depot Limited along with specified information about how that data is used.

Right to rectification. Users have the right to have inaccurate or incomplete personal data rectified by Arcade Depot Limited without undue delay.

Right to erasure. Users have the right to request that Arcade Depot Limited erase their personal data in certain circumstances outlined in applicable data protection laws.

Right to restriction of processing. Users have the right to request that Arcade Depot Limited restrict the processing of their personal data in certain circumstances outlined in applicable data protection laws.

Right to data portability. Users have the right to request transfer of their personal data in a structured, commonly used and machine-readable format to themselves or another controller in certain situations.

Right to object. Users have the right to object to Arcade Depot Limited processing of their personal data in certain circumstances outlined in applicable data protection laws.

Rights related to automated decision making including profiling. Users have rights related to any automated individual decision-making, including profiling, that significantly affects them carried out by Arcade Depot Limited.

Data Retention

The Company will typically retain personal data for the following periods:

Name and address details – for 6 years after a User last places an order with or makes a purchase from the Company.

Cookies and similar technologies – for the period they are on a User’s device unless deleted earlier.

The criteria used to determine the retention periods in clause 8.1 include:

Legal and regulatory requirements in England and Wales relating to keeping accounting records.

The Company’s legitimate interest in retaining personal data for the purposes of handling any disputes or legal claims with Users.

The Company may retain personal data for a longer period where necessary for legal or regulatory reasons.

On expiry of the retention periods set out in clause 8.1, or longer period set out in clause 8.3 if applicable, the Company will either delete or anonymise the personal data concerned.

A User has the right to request that the Company erase their personal data before the end of the typical retention periods set out in clause 8.1 pursuant to their right to erasure under applicable data protection laws.

Data Security

The Company takes technical and organisational security measures designed to protect Users’ personal data from accidental loss or unauthorised access, use, alteration or disclosure.

All personal data is stored on secure servers that are kept in a locked and monitored facility. 9.2.1 Access to these servers is restricted to authorised personnel only through the use of strong passwords, two factor authentication and regular password changes.

Regular backups of personal data are taken, encrypted and securely stored offsite with a reputable backup provider.

The Company systems and websites undergo regular vulnerability testing by internal and external security experts. 9.4.1 Any identified vulnerabilities are promptly addressed and resolved.

All Company employees receive regular training on data protection and information security.

In the event of a personal data breach, the Company will follow its documented security incident response process, including risk assessment, notification of the relevant authorities and data subjects where required, and remediation steps.

Privacy and security is considered at all stages of the development, design and use of any new systems, technologies or processes that involve the processing of personal data.

Policy Changes

Arcade Depot Limited reserves the right to update or amend this Privacy Policy at any time to reflect changes in our services and customers’ needs, as well as changes in applicable law. Any changes we may make to our Privacy Policy in the future will be updated on this page.

We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent. We will provide notice by email and/or by posting notice of the changes on our website.

Your continued use of the Services after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy.

Updates correcting typographical errors or clarifying existing practices may go into effect immediately without notice.

We will keep records of any updates or amendments made to this Privacy Policy.

Any changes we make to this Privacy Policy will be made to ensure our compliance with applicable law and to maintain adequate protection of personal data processed through our Services.

Governing Law and Jurisdiction

This Privacy Policy and any dispute or claim arising out of or in connection with it or its subject matter or formation (including non-contractual disputes or claims) shall be governed by and construed in accordance with the law of England and Wales.

The parties irrevocably agree that the courts of England and Wales shall have exclusive jurisdiction to settle any dispute or claim that arises out of or in connection with this Privacy Policy or its subject matter or formation (including non-contractual disputes or claims).

Third Party Links

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), to report on website usage and traffic statistics. Google Analytics makes use of cookies to collect information about how Users use the website. The information generated by the cookie about Users’ use of the website (including IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating Users’ use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage.

Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate IP address with any other data held by Google. By using this website, Users consent to the processing of data about them by Google in the manner and for the purposes set out above.

This website uses social media buttons and/or plugins that allow Users to share pages with social networks such as Facebook, Twitter and LinkedIn. These social media plugins are hosted by the respective social network and may collect and use Users’ personal data for their own purposes. The Company has no control over the scope or extent of data collection by social networks. Users are advised to review the respective social network’s privacy policy to understand how their personal data may be used.

If Users make a payment on this website, the payment will be processed by Paypal, Klarna or Stripe who will collect and process Users’ personal data in order to complete the transaction. Users should review Paypal, Klarna or Stripe’s privacy policy to understand how their personal data will be processed for payment purposes.

This website may contain links to third party websites not controlled by the Company. The Company is not responsible for the privacy practices employed by any third party websites. Users are advised to read the privacy policies of any third party websites before disclosing any personal data. This Privacy Policy was last updated July 2024.