Last updated: June 2026
At Gadgets Nebula, your privacy is important to us. This policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are Gadgets Nebula is operated by a business based at 26 Ray Mill Road, Maidenhead, SL6 8SB, United Kingdom. Email: [email protected]
2. What Data We Collect
- Name, email address, phone number, billing and shipping address
- Payment information (processed securely via PayPal / Stripe / card providers — we do not store card details)
- browsing behaviour, pages visited, time on site
- IP address and device/browser information
- Cookies and tracking data (see Section 8)
3. Why We Collect It (Lawful Basis)
- Contract performance: To process and fulfil your orders, send confirmations and tracking updates
- Legal obligation: To maintain transaction records for tax and accounting purposes
- Legitimate interests: To improve our website, prevent fraud, and ensure security
- Consent: To send marketing emails (only where you have opted in)
4. How We Use Your Data
- Processing and delivering your orders
- Sending order confirmations, shipping updates, and receipts
- Responding to customer service enquiries
- Sending promotional emails (only with your consent — you can unsubscribe at any time)
- Improving our website and product offerings
- Complying with legal obligations
5. Who We Share Your Data With We only share your data with trusted third parties where necessary:
- Payment processors (PayPal, Stripe, card networks) to handle transactions
- Shipping carriers to deliver your orders
- Analytics providers (e.g. Google Analytics) to understand site usage
- Email marketing tools if you have opted in to communications
We do not sell your personal data to any third party.
6. How Long We Keep Your Data
- Order and transaction records: 7 years (legal/tax requirement)
- Customer accounts: Until you request deletion
- Marketing consent records: Until you unsubscribe or withdraw consent
- Analytics data: As per the provider’s retention policy (typically 26 months)
7. Your Rights Under UK GDPR You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data (“right to be forgotten”)
- Restrict or object to how we process your data
- Data portability — receive your data in a machine-readable format
- Withdraw consent at any time for marketing communications
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Cookies We use cookies to improve your browsing experience, remember your cart, and analyse site traffic. You can manage cookie preferences via our [Cookie Information] page or your browser settings. For full details see our Cookie Policy.
9. Data Security We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. All payment transactions are encrypted via SSL.
10. Third-Party Links Our website may contain links to third-party sites. We are not responsible for their privacy practices and encourage you to read their policies.
11. Changes to This Policy We may update this policy from time to time. The latest version will always be published on this page with the updated date shown at the top.
12. Contact & Complaints For any privacy-related questions, contact us at [email protected]. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk