Privacy Policy

Who is responsible

UB Athletics, a sole trader business (not a limited company), is the controller of your personal data. Contact: info@ubathletics.co.uk. Correspondence address: Level One, Basecamp Liverpool, 49 Jamaica Street, Liverpool, L1 0AH (written correspondence only, not returns).

ICO public-register reference: ZC286407. Registered 27 October 2026; registration expires 26 October 2027. Fee tier: Tier 1.

What we collect and why

• Order details — name, delivery address, contact details, items and notes — to respond to your purchase request, process and deliver your order, and handle cancellations or returns. Legal basis: steps at your request before a contract and performing our contract with you.
• Messages you send us — to answer your questions. Legal basis: our legitimate interest in replying to customers.
• Sales and payment records — order references, payment status and transaction references where applicable — to meet tax and accounting obligations. Legal basis: legal obligation.
• Preview test-checkout details — the information you submit and test-payment references — to operate and check the test ordering service. These are not real sales. Legal basis: our legitimate interest in testing the service and resolving payment-flow problems.
• Technical connection and error information — to deliver the website, keep it secure and diagnose failures. Legal basis: our legitimate interest in operating a reliable and secure shop. Third-party cookies and storage are addressed separately below; this does not establish an exemption from any consent requirement.

We do not sell your data or use it for marketing without your consent.

Who we share it with

Only where used for your order:

• Meta (Instagram and WhatsApp), if you message us there — their own privacy policies apply and data may be processed outside the UK.
• Stripe, when you choose online checkout. Live checkout on ub-athletics.lovable.app processes real payments; preview checkout uses test payments, not real purchases. Payment details are entered on Stripe's page; UB Athletics does not receive or store your full card details. The order reference, email, purchase details and delivery information are sent to Stripe to process checkout.
• Lovable Cloud, to host this website and store online checkout order details, including test checkout records and checkout requests that do not result in a completed payment.
• Our delivery courier, to deliver your order.
• Google Fonts, when the website requests its fonts. Those requests can disclose technical connection information, such as your IP address and browser request details, to Google.

Hosting and payment services may also process technical connection information to deliver and secure their services. Their own privacy notices apply to processing they control. Follow their privacy links when using those services.

The website includes technical error reporting to help diagnose failures. The information received by hosting and error-reporting services, their retention periods and any browser storage they use have not been fully verified.

The delivery service depends on the order. Details of the providers used for delivery and any manually arranged payment, and the countries and safeguards involved in international processing by our service providers, have not yet been fully verified. We cannot currently give a complete account of international data transfers.

How long we keep it

Order, payment and accounting records: kept for at least 5 years after the 31 January submission deadline for the relevant tax year, as HMRC requires for sole traders. Records are retained longer only where needed for other legal obligations or an ongoing dispute, then deleted when no longer needed.

The retention periods and deletion arrangements for preview test-checkout records and technical hosting or error records have not yet been confirmed. Test orders are not accounting records merely because they exist and do not automatically require the same retention period as real sales.

Online checkout records are created when you submit your details to start checkout, even if payment is not completed. No automatic deletion schedule for these records has been verified; the appropriate retention and deletion arrangements for incomplete checkout requests still need to be confirmed.

Customer messages: kept only as long as needed to answer your enquiry and handle any order, return or complaint, or longer where the law requires.

This website, cookies and tracking

Your basket is saved in localStorage under ub-athletics-basket so it is still there when you return. It stores your product selections and quantities, not your payment-card details. It remains until it is cleared or updated, including after confirmed checkout; clearing your browser's site data also removes it. The site also uses session storage for scroll restoration so it can restore your position when navigating back; this is normally limited to the browser tab's session. These support the shopping and navigation functions you request.

Message-order form details are held temporarily in browser memory while you complete the form, rather than saved with your basket. They are included in the message you choose to copy or send through Instagram or WhatsApp. Online checkout sends the order and contact details you submit to Lovable Cloud and Stripe. Live checkout takes real payments; preview test checkout does not charge a real card. This storefront does not offer customer accounts.

Google Fonts is requested when the storefront loads. Stripe Checkout is a separate hosted page opened when you choose online checkout. External services, including payment providers or payment options they display such as Klarna or Clearpay, may use cookies or browser storage on their own domains. Listing them here does not mean those payment options are enabled for this shop. Their actual use, purposes and lifetimes have not all been verified.

Verification of hosting and third-party cookies and browser storage is incomplete, including their purposes, duration and whether any non-essential service requires consent before loading. We have not established that every service used by the website is exempt from consent requirements.

This is not a completed cookie audit and we do not claim that the storefront or external services use no cookies. No cookie-consent banner has been added. You can manage site data through your browser, but browser controls do not replace any consent the law requires us to obtain.

Your rights

Under UK GDPR you can ask to access, correct or delete your data, restrict or object to how we use it, and ask for a copy to be transferred, where the relevant legal conditions apply. If processing relies on consent, you can withdraw it without affecting earlier lawful processing. Email us to make a request; we normally respond within one month. If a lawful extension is needed for a complex or multiple request, we will explain within that month.

If you're unhappy, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.