Privacy Policy

1. Who controls your information

SpectrumPC.uk, operated by Wojciech Walczak, is the controller of personal information collected through this website. The applicable trader details are also provided during checkout and in the order confirmation.

Privacy enquiries and requests can be sent to spectrumpc.uk@gmail.com.

2. Information we collect

For customer accounts and orders we collect account identifiers, email address, name, telephone number, delivery address, basket contents, order records, fulfilment and tracking information. Supabase securely manages account passwords; SpectrumPC.uk cannot read them.

Stripe processes payment and fraud-prevention information. We retain Stripe references and payment status, but do not store full card details.

Our hosting providers may also process technical request information such as IP addresses, browser information, timestamps and security logs when they deliver and protect the website.

3. Why we use it

With your optional analytics consent, we measure public page visits, product views, broad device category and active time to improve the shop. Analytics uses a temporary browser-tab identifier and is not linked to your customer account. Analytics records do not contain your name, email, IP address, search queries or payment details. You can withdraw consent through Cookie settings at the bottom of a public page.

We use launch-list addresses to send pre-launch progress and a store-launch notification. The lawful basis is consent, which can be withdrawn at any time. This consent does not cover ongoing promotional marketing.

Account, basket, checkout, payment and fulfilment information is processed as necessary to provide requested services, perform a contract or take steps before entering one, meet legal obligations, and handle customer claims. Limited technical and security logs are processed for our legitimate interests in operating, protecting and diagnosing the service.

4. How long we keep it

We record the accepted terms version and time when you create an account or start checkout. Signup acceptance records are removed when the associated account is deleted; order acceptance records follow the retention of the order. Optional analytics records include the consent notice version and choice date.

Optional analytics records are automatically deleted after 90 days.

Each launch-list record is kept for no more than 90 days from the date of signup, unless you withdraw consent sooner. After that period, the record is automatically deleted. If the store has not launched within those 90 days, we will not retain the address beyond that period without obtaining fresh consent.

Account data is kept while the account is active and then only as needed for security, disputes or legal obligations. Order, payment-reference and fulfilment records are retained for the periods required by tax, accounting and consumer law and for the establishment or defence of legal claims. Technical logs are kept only as long as reasonably needed for security and diagnosis.

5. Who receives it

The website is hosted by Netlify, customer and catalogue records are stored with Supabase, and payments are processed by Stripe and, where selected, Klarna. We do not sell customer information.

Some providers may process information outside the UK. Where required, transfers rely on applicable adequacy regulations or approved contractual safeguards made available by the provider.

6. Your choices and rights

You may withdraw consent at any time by using the unsubscribe option in an email or by contacting us. Withdrawal does not affect processing that was lawful before withdrawal.

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict, object to or receive a copy of your personal information. Contact us to exercise a right. You may also complain to the Information Commissioner's Office.

7. Changes

We will update this notice when the services, providers or uses of personal information change. Material changes to consent-based email use will receive appropriate notice or fresh consent where required.