Privacy notice

We collect only what we need to sell to you, buy from you and answer you. We don’t sell data, we don’t run advertising trackers and we don’t use analytics cookies.

Who is responsible for your data

The data controller is the trader below. Contact us at the e-mail address for anything about your data.

techtrotree
Based in Surrey, UK
E-mail: hello@techtrotree.co.uk
Returns: E-mail hello@techtrotree.co.uk within 14 days and we’ll send you the returns address.

What we collect and why

When	What	Why (lawful basis)
You place an order	Name, e-mail, delivery address, phone if given, what you bought, amounts paid	To fulfil the contract; to keep accounting records the law requires (legal obligation)
You pay	Stripe processes your card or wallet. We see the payment status and the last four digits at most — never your full card number	Contract; fraud prevention (legitimate interests)
You ask us to buy your cards	Name, e-mail, phone if given, postcode area (first half only), the description of your cards, payout preference	Your consent, given with the form, to assess your cards and reply
You contact us	Name, e-mail, order number, your message	To answer you (legitimate interests)
You sign up for e-mails	E-mail address, when you consented and confirmed, where you signed up	Your consent — confirmed by a link we e-mail you. You can withdraw it at any time
You use the site	Our server sees your IP address to deliver pages. Abuse limits are kept in memory only; form records store a one-way hash of the IP, not the address	Security and preventing spam (legitimate interests)

Your basket is stored in your own browser (local storage), not on our servers, until you check out.

Who processes it for us

Stripe (Stripe Payments Europe Ltd and Stripe’s group) — payments and fraud screening. Stripe is an independent controller for some payment data; see Stripe’s privacy policy.
Resend — sends our order and sign-up e-mails. Resend is based in the USA; transfers are covered by the UK’s data adequacy arrangements or standard contractual clauses.
Hetzner Online GmbH — hosts the server that runs this site and its database, in Nuremberg, Germany (EU).
Cloudflare — sits in front of the site to deliver it quickly and protect it from attacks and bots, runs the human check (Turnstile) at checkout, and forwards e-mail sent to our address. It sees your IP address and the pages you request. Cloudflare is based in the USA; transfers are covered by the UK’s data adequacy arrangements or standard contractual clauses.
Royal Mail — your name and address are printed on the parcel and given to Royal Mail to deliver it.

We never sell or rent your data, and we never add anyone to our mailing list who hasn’t asked to be on it.

How long we keep it

Orders: 6 years after the end of the tax year of the sale (HMRC record-keeping).
Sell-to-us enquiries: 12 months if we don’t trade; if we buy from you, as for orders.
Contact messages: 24 months.
E-mail sign-ups: until you unsubscribe; unconfirmed sign-ups are deleted after 30 days.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, ask for it in a portable format, and withdraw consent at any time. E-mail us and we’ll reply within one month. Every marketing e-mail has an unsubscribe link.

If you’re unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, 0303 123 1113.

Cookies

We don’t set cookies for analytics or advertising. See our cookies page.