PRIVACY
POLICY.

1. Who We Are

Strapzy's Shinnies is a custom carbon fibre shin pad brand operated by Bryn Deeley and Liam Robinson ("we", "us", "our"). We are the data controller responsible for your personal information collected through this website.

Contact:

• Bryn Deeley (Founder)
• Email: bryn@strapzysshinnies.com
• Phone: +351 960 320 467

2. What Data We Collect

When you place a custom order or contact us, we may collect the following personal data:

• Your name and email address
• Player details you provide (name, number, nationality)
• Images and artwork you upload for your shin pad design
• Your shipping address
• Payment information (processed securely by our payment provider — we do not store card details)

We also collect technical data such as browser type and the pages you visit. If you accept cookies, we also use analytics and advertising tools to understand how the site is used and to measure our ads (see section 8).

3. How We Use Your Data

We use your personal data only for the following purposes:

• Order fulfilment — to produce and ship your custom shin pads
• Communication — to send design previews, order updates and delivery notifications
• Customer support — to respond to any queries or issues you raise
• Legal compliance — to meet our legal and tax obligations where required

We will never sell your personal data to third parties or use it for unsolicited marketing without your explicit consent.

4. Legal Basis for Processing

Under the EU General Data Protection Regulation (GDPR), we process your personal data on the following lawful bases:

• Contract performance — processing is necessary to fulfil your order
• Legitimate interests — to operate and improve our business in ways you would reasonably expect
• Legal obligation — where we are required to retain records by law
• Consent — for marketing emails you sign up to, and for the analytics and advertising cookies you accept in our cookie banner

5. How Long We Keep Your Data

We retain your order and contact data for a maximum of 3 years from the date of your last transaction, after which it is securely deleted. Data required for tax or legal compliance may be kept for up to 7 years in line with EU requirements.

6. Sharing Your Data

We only share your personal data with trusted third parties who assist us in operating our business, including:

• Shipping and logistics partners (for delivery of your order)
• Payment processors (who handle card transactions under their own GDPR-compliant policies)
• Email service providers (for transactional order communications)
• Service providers that store your order details and the images you upload for your design
• Analytics and advertising providers (Google, Microsoft, Meta and TikTok), only if you accept cookies — see section 8

All third parties we work with are required to handle your data securely and only for the purpose we have specified. We do not transfer your data outside of the European Economic Area (EEA) unless adequate protections are in place.

7. Your Rights Under GDPR

As a resident of the EU or EEA, you have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — request that we delete your data ("right to be forgotten")
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or direct marketing
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at bryn@strapzysshinnies.com. We will respond within 30 days.

8. Cookies

Our website stores a small amount of information in your browser that it needs to work: your cart, your language, your shipping country and your cookie choice. These are always on.

With your consent, we also use the following analytics and advertising tools. They only load after you click “Accept” in our cookie banner. If you click “Decline”, they are never loaded:

• Google Analytics (Google) — counts visits and shows which pages are used, with IP addresses anonymised
• Microsoft Clarity (Microsoft) — shows how visitors scroll and click, so we can improve the site
• Meta Pixel (Meta, for Facebook and Instagram) — measures our ads and helps show them to relevant people
• TikTok Pixel (TikTok) — measures our TikTok ads

These providers may process data outside the EEA under their own safeguards. You can change your choice at any time with the Cookie settings link at the bottom of every page.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. All data submitted through our order form is transmitted over encrypted HTTPS connections.

10. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD) at www.cnpd.pt.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.