Legal
Privacy policy
Last updated: 19 October 2026
1. Controller
FlashKicks — Andre Fernandes, sole trader
12 Beckhampton Close, Manchester M13 9DH, United Kingdom
VAT: not registered (no VAT charged)
E-mail: support@flash-kicks.com · Phone: +44 20 3351 8363
2. What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Name, e-mail, phone, shipping & billing address, order contents | Processing and delivering your order, customer service, returns | Contract (Art. 6(1)(b)) |
| Payment data (processed by Stripe; we only see the payment status and the last 4 digits) | Payment and fraud prevention | Contract; legitimate interest (Art. 6(1)(f)) |
| Invoices and order records | Accounting and tax obligations | Legal obligation (Art. 6(1)(c)) |
| Bag, language, currency and country preferences stored in your browser | Running the shop in your language and currency | Strictly necessary / legitimate interest |
| Approximate country derived from your IP address (not stored) | Pre-selecting language, currency and shipping country | Legitimate interest (Art. 6(1)(f)) |
| Analytics & marketing cookies (only if you accept) | Improving the shop, measuring ads | Consent (Art. 6(1)(a)) |
3. Recipients
- Stripe Payments UK Ltd. (payment processing) — stripe.com/privacy
- Our hosting provider (Cloudflare, Inc.) — website hosting
- Shipping carriers — only the data needed to deliver your parcel
- Our accountant and public authorities where legally required
Some providers may process data outside the UK and the EEA; in that case appropriate safeguards apply (e.g. the UK International Data Transfer Addendum, EU Standard Contractual Clauses or the UK–US data bridge).
4. Retention
Order and invoice data are kept for 6 years (UK tax record-keeping rules). Customer-service correspondence is kept for up to 3 years. Consent-based data is kept until you withdraw consent.
5. Your rights
Under the UK GDPR and the Data Protection Act 2018 (and the EU GDPR if you live in the EU) you have the right to access, rectify, erase, restrict or object to the processing of your data, the right to data portability and the right to withdraw consent at any time. E-mail support@flash-kicks.com. You may also complain to the UK Information Commissioner’s Office (Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk) or, if you live in the EU, to the data protection authority of your country.
6. Security
The site is served exclusively over HTTPS with strict security headers. Payments are handled by Stripe (PCI-DSS Level 1); card data never touches our servers.