Privacy notice
Last updated: 27 October 2026
We collect as little as we can, only use it to run the shop, and never sell it.
Who is responsible for your data
Yurii Tsuman, trading as Arctic Power, of 20 Mayfield Avenue, London HA3 8EU, United Kingdom is the data controller for personal information collected through this website, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact: smile@arcticpower.co.uk.
TODO: check with the ICO whether you need to pay the data protection fee (ico.org.uk/fee), and add your ICO registration number here if you do
What we collect
- Order details: your name, email address, delivery and billing address, phone number (if given), what you bought and how much you paid. These are entered on Stripe's secure checkout page and shared with us so we can fulfil your order.
- Payment details: card details are handled by Stripe. We never see or store your full card number.
- Messages: anything you send us by email.
- Technical data: our host, Cloudflare, processes your IP address and basic request information to deliver and protect the website.
We do not use analytics, advertising trackers or marketing cookies.
Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Taking payment, making and delivering your order, handling returns and refunds | Contract |
| Keeping accounting and tax records | Legal obligation |
| Answering your messages; preventing fraud; keeping the website secure | Legitimate interests |
We will not send you marketing emails unless you have opted in. TODO: remove this sentence or add opt-in details if you start a newsletter
Who we share it with
- Stripe (payments). Stripe also acts as an independent controller for some purposes such as fraud prevention; see Stripe's privacy policy.
- Cloudflare (website hosting and security).
- TODO: delivery carrier, e.g. Royal Mail (your name and address, to deliver your parcel).
- Cloudflare and Google (Gmail) (to send and receive emails).
- Our accountant and HMRC where required by law.
Some of these providers process data outside the UK (for example in the USA). Where they do, they rely on safeguards recognised under UK law, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.
How long we keep it
We keep order and payment records for 6 years after the end of the financial year they relate to, because UK tax law requires it. Emails not linked to an order are deleted after TODO: e.g. 2 years.
Cookies and local storage
This website does not set cookies. Your bag is saved in your own browser's local storage so it is still there when you come back; it never leaves your device and you can clear it at any time in your browser settings. This is strictly necessary for the bag to work, so no consent banner is needed. Stripe's checkout page, which is run by Stripe, uses its own cookies for security and fraud prevention.
Your rights
You have the right to access the personal information we hold about you, and to ask us to correct it, delete it, restrict or object to how we use it, or transfer it to you or another organisation. Email smile@arcticpower.co.uk to make a request. We will reply within one month.
If you are unhappy with how we have handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.
Changes
We will post any changes to this notice on this page with a new "last updated" date.