Privacy Policy

Last updated: [27/3/2026]

1. Introduction

Welcome to What Where ("we," "our," or "us"), accessible at www.what-where.uk. We sell the What Where card game through our website. We are committed to protecting your personal data and complying with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or make a purchase.

2. Information We Collect

We only collect personal data necessary to operate our business and fulfil orders:

• Identity Data: Name

• Contact Data: Email address and shipping address

• Transaction Data: Order details and purchase history

• Technical Data: IP address, browser type, and basic usage data (collected automatically)

3. How We Use Your Information

We use your personal data for the following purposes:

• To process and fulfil your orders

• To deliver your purchases to you

• To communicate with you about your order or respond to enquiries

• To comply with legal and accounting obligations

We rely on the following legal bases under UK GDPR:

• Contractual necessity (to fulfil your order)

• Legal obligation (for record keeping and tax purposes)

• Legitimate interests (to operate and improve our website)

4. Payments (Stripe)

We use Stripe to process payments securely. We do not collect or store your card details. Payment information is handled directly by Stripe in accordance with their privacy policy.

5. Sharing Your Information

We do not sell your personal data. We only share your data where necessary:

• With Stripe for payment processing

• With delivery providers (including Royal Mail) to deliver your order (name and address only)

• With legal authorities if required by law

6. Data Retention

We retain your personal data only for as long as necessary to fulfil your order and to meet legal obligations (such as tax and accounting requirements).

7. Your Data Protection Rights

Under UK data protection law, you have the following rights:

• The right to access your personal data

• The right to correct inaccurate data

• The right to request deletion of your data (where applicable)

• The right to restrict or object to processing

To exercise any of these rights, contact us at whatwheregame@gmail.com.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data. However, no online system is completely secure.

9. Third-Party Services

We use trusted third-party services (such as Stripe and Royal Mail) to operate our business. These providers process your data in accordance with their own privacy policies.

10. Children's Privacy

Our website is not intended for children under 13, and we do not knowingly collect personal data from children.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.

12. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us:

Email: whatwheregame@gmail.com
Website: www.what-where.uk