PRIVACY
POLICY.

1. Who We Are

Strapzy's Shinnies is a custom carbon fibre shin pad brand operated by Bryn Deeley and Liam Robinson ("we", "us", "our"). We are the data controller responsible for your personal information collected through this website.

Contact:

• Bryn Deeley (Founder)
• Email: bryn@strapzysshinnies.com
• Phone: +351 960 320 467

2. What Data We Collect

When you place a custom order or contact us, we may collect the following personal data:

• Your name and email address
• Player details you provide (name, number, nationality)
• Images and artwork you upload for your shin pad design
• Your shipping address
• Payment information (processed securely by our payment provider — we do not store card details)

We also collect anonymised technical data such as browser type and pages visited via standard server logs. We do not use tracking cookies or third-party analytics tools.

3. How We Use Your Data

We use your personal data only for the following purposes:

• Order fulfilment — to produce and ship your custom shin pads
• Communication — to send design previews, order updates and delivery notifications
• Customer support — to respond to any queries or issues you raise
• Legal compliance — to meet our legal and tax obligations where required

We will never sell your personal data to third parties or use it for unsolicited marketing without your explicit consent.

4. Legal Basis for Processing

Under the EU General Data Protection Regulation (GDPR), we process your personal data on the following lawful bases:

• Contract performance — processing is necessary to fulfil your order
• Legitimate interests — to operate and improve our business in ways you would reasonably expect
• Legal obligation — where we are required to retain records by law
• Consent — where you have explicitly opted in (e.g. marketing emails)

5. How Long We Keep Your Data

We retain your order and contact data for a maximum of 3 years from the date of your last transaction, after which it is securely deleted. Data required for tax or legal compliance may be kept for up to 7 years in line with EU requirements.

6. Sharing Your Data

We only share your personal data with trusted third parties who assist us in operating our business, including:

• Shipping and logistics partners (for delivery of your order)
• Payment processors (who handle card transactions under their own GDPR-compliant policies)
• Email service providers (for transactional order communications)

All third parties we work with are required to handle your data securely and only for the purpose we have specified. We do not transfer your data outside of the European Economic Area (EEA) unless adequate protections are in place.

7. Your Rights Under GDPR

As a resident of the EU or EEA, you have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — request that we delete your data ("right to be forgotten")
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or direct marketing
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at bryn@strapzysshinnies.com. We will respond within 30 days.

8. Cookies

This website does not use cookies for tracking or advertising purposes. We may use essential session functionality required to operate the site. No third-party cookies are loaded on this website.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. All data submitted through our order form is transmitted over encrypted HTTPS connections.

10. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD) at www.cnpd.pt.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.