Privacy Policy

1. Introduction

Georgina Barnes (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

Name and contact information (email, phone, address)
Account credentials (username, password)
Payment information (processed securely through Stripe)
Order history and preferences
Business information (for wholesale accounts)
Marketing preferences

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

IP address and browser information
Device information and operating system
Pages visited and time spent on pages
Referring website and search terms
Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

Process and fulfil your orders
Manage your account and provide customer support
Send order confirmations and shipping updates
Process payments securely
Improve our website and services
Send marketing communications (with your consent)
Detect and prevent fraud
Comply with legal obligations

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

You can manage your cookie preferences through our cookie consent banner or your browser settings.

5. Information Sharing and Disclosure

We may share your information with:

Service Providers: Payment processors (Stripe), email services (Resend), analytics providers
Business Partners: Shipping carriers for order fulfilment
Legal Requirements: When required by law or to protect our rights
Business Transfers: In connection with a merger, sale, or acquisition

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

Encryption of data in transit (SSL/TLS)
Secure password hashing
Regular security audits
Access controls and authentication
Secure payment processing through PCI-compliant providers

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

Access

Request a copy of your personal data

Rectification

Correct inaccurate or incomplete data

Erasure

Request deletion of your data (“right to be forgotten”)

Restriction

Limit how we use your data

Portability

Receive your data in a portable format

Object

Object to processing of your data

Withdraw Consent

Withdraw consent at any time

To exercise these rights, please contact us at privacy@gbleisuresports.com

8. Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, and resolve disputes.

Data Type	Retention Period
Account data	7 years after account closure
Order history	7 years (tax purposes)
Marketing consent	2 years
Analytics data	1 year
Session logs	90 days
Cart data	30 days

9. Children’s Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.