Privacy Policy

How we collect, use and protect your personal data — compliant with UK GDPR and the Data Protection Act 2018.

~3 min read  ·  Last updated: May 2026

Key facts at a glance

  • We collect your name, email, phone and delivery address to fulfil orders.
  • We never see your card details — Stripe handles all payments securely.
  • Order records are kept for 7 years (HMRC requirement), then permanently deleted.
  • Email contactus@getbombastic.com any time to access, correct or delete your data.
🏢

Who We Are (Data Controller)

GetBombastic is the data controller for personal data you provide when shopping on this website. We are based in London, United Kingdom. Contact us for any data protection enquiry at contactus@getbombastic.com.

📋

Information We Collect

When you place an order we collect your full name, email address, phone number, and delivery address (street, city, postcode, country). Payment card details are handled entirely by Stripe — we never see or store your card number. We also retain your order history and any messages you send us.

⚙️

How We Use Your Information

Contract

Fulfil your order and arrange postage. Without your contact and address details we cannot complete your purchase.

Legitimate interests

Send order confirmation and shipping notifications by email. Analyse anonymised, aggregated site data to improve our service.

Consent

Send marketing emails if you subscribed to our newsletter. You can unsubscribe at any time via the link in any email.

📦

Delivery Address & International Shipping

Your delivery address is collected at checkout by Stripe and stored securely in our order management system. It is shared only with our postal carrier (Royal Mail or a courier) for the purpose of delivery.

For international orders, your address is transmitted to postal networks in the destination country as required for delivery. We take reasonable steps to ensure appropriate handling, but cannot be responsible for the data-handling practices of foreign postal authorities.

🗓️

How Long We Keep Your Data

Order records (including delivery address) are retained for 7 years from the date of purchase to comply with HMRC tax and accounting requirements. After this period, personal data is securely deleted or anonymised. Newsletter subscription data is kept until you unsubscribe.

🤝

Information Sharing

We do not sell or rent your personal data. We share it only with:

  • Stripe — payment processing and address collection (Stripe's Privacy Policy)
  • Postal carriers — for delivery purposes only
  • Legal authorities — where required by law
🔒

Data Security

We use encrypted database connections, access-restricted admin systems, and HTTPS throughout the site. No internet transmission is 100% secure, but we take every reasonable step to safeguard your data.

👤

Your Rights Under UK GDPR

  • Access — request a copy of the data we hold about you
  • Correction — ask us to fix inaccurate or incomplete data
  • Erasure — request deletion of your data (subject to legal retention obligations)
  • Restriction / Objection — limit or stop certain processing
  • Portability — receive your data in a portable format

To exercise any right, email contactus@getbombastic.com. We respond within 30 days.

You can also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.

🍪

Cookies

We use cookies to maintain your shopping cart, wishlist and session preferences. Analytics cookies are only set with your consent. You can manage preferences via your browser settings or our cookie consent tool.

🧒

Children's Privacy

Our website is not intended for children under 13. We do not knowingly collect personal information from anyone under 13 years of age.

Questions about your data?

We aim to respond to all data requests within 30 days.

Contact Us