Privacy Policy

Effective Date: July 10, 2025

1. Who We Are

Sunny's Workshop is an independent UK business providing refurbished gaming consoles, console repairs, custom 3D printed products, and sublimation products.

For privacy enquiries, please contact:

• Email: support@sunnysworkshop.co.uk
• Website: www.sunnysworkshop.co.uk

2. Information We Collect

We may collect and process the following personal information:

• Name
• Billing and shipping address
• Email address
• Phone number, if provided
• Order history
• Repair history and repair-related information
• Messages, enquiries, and customer support communications
• Custom design files, images, wording, or instructions you choose to provide
• Payment information processed securely by third-party payment providers
• IP address, device type, browser data, and basic website usage data for security, analytics, and website performance

3. How We Use Your Information

We use your personal information to:

• Process, manage, and fulfil orders
• Provide repair, diagnostic, and customer support services
• Communicate with you about purchases, repairs, enquiries, returns, or account matters
• Send order confirmations, repair updates, password reset emails, and account-related notifications
• Arrange delivery, tracking, and returns where applicable
• Process refunds, payments, and fraud-prevention checks
• Improve our website, products, and services
• Meet legal, tax, accounting, and regulatory obligations
• Protect our website, business, customers, and systems from misuse or fraud

We do not sell, rent, or trade your personal information to third parties.

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing personal information:

• Contract: to process orders, repairs, payments, deliveries, account services, and customer enquiries.
• Legal obligation: to keep accounting, tax, transaction, and business records where required by law.
• Legitimate interests: to protect our business, prevent fraud, maintain website security, improve our services, and respond to customer enquiries.
• Consent: where you choose to provide optional information, upload custom design content, or opt into optional communications.

5. Payments and Third-Party Services

Payments are processed securely by trusted third-party providers. We do not store full payment card details on our servers.

Depending on the payment method or service used, your information may be processed by:

• Stripe
• PayPal
• Apple Pay
• Google Pay
• Delivery providers such as Royal Mail
• Email, website hosting, database, and security service providers
• Professional advisers, accounting providers, or authorities where legally required

6. Shipping, Repairs and Custom Orders

For shipping and repair services, we may use your contact details, delivery address, tracking information, repair notes, and related communication to complete the service.

For custom 3D printed or sublimation products, we may process any images, names, artwork, wording, or design instructions you choose to provide. You are responsible for ensuring you have permission to use any supplied custom content.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

• Order, payment, and invoice records may be kept for accounting and tax purposes.
• Repair records may be kept to manage warranty claims, service history, and customer support.
• Customer account information is kept while your account remains active, unless deletion is requested and we are not required to keep it for legal reasons.
• Contact form messages and enquiries are kept only as long as needed to respond and manage customer service.

8. How We Protect Your Data

We take reasonable steps to protect your personal information, including:

• SSL encryption across our website
• Secure storage of records
• Password hashing for customer accounts
• Restricted access to personal data
• Use of trusted payment processors rather than storing full card details ourselves

While we take reasonable measures to protect your information, no online system can be guaranteed 100% secure.

9. Your Rights Under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data where applicable
• Restrict or object to certain data processing
• Request a copy of your data in a portable format where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, please contact us via the Contact Us page or email support@sunnysworkshop.co.uk.

10. Cookies and Tracking

We use cookies and similar technologies to remember preferences, support website functionality, improve performance, and analyse website traffic.

Cookies may be used for features such as cart functionality, dark/light mode preference, account sessions, analytics, and security. You can manage or disable cookies through your browser settings, but some website features may not work correctly if cookies are disabled.

11. Marketing

We will only send marketing emails where you have opted in or where we are otherwise legally permitted to do so. You can unsubscribe or ask us to stop marketing communications at any time.

12. Children's Privacy

Our website and services are not intended for children under 13. If you believe a child has provided personal information to us, please contact us so we can review and delete it where appropriate.

13. Complaints

If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

• Website: www.ico.org.uk

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.