Privacy Policy

What we collect and why

When you place an order we collect and store your name, delivery address, email address and the details of what you bought, so we can take payment, fulfil and dispatch the order, issue an invoice and provide support. The lawful basis is performance of our contract with you.

If you sign in to your account, we store your email address and a signed session so we can show you your own orders. We do not use passwords; sign-in is by a one-time link sent to your email.

If you ask to be notified when a set or product is restocked, we store your email address and which product you asked about, so we can send you that one alert. The lawful basis is your consent, which you give by submitting the form and can withdraw at any time.

If you contact support, we store the message, your name and email and any order reference so we can help you. If you leave a product review, we store the review text, your rating and the display name you provide — reviews do not store your email address.

Payment card details are handled entirely by our payment providers (Stripe and PayPal); we never receive or store your full card number.

Analytics and cookies

We use Vercel Web Analytics, which is privacy-friendly and cookieless — it does not set tracking cookies, does not build a profile of you across sites, and does not collect personally identifying information. We do not run advertising trackers. If we ever enable additional analytics that require cookies, we will ask for your consent first.

Who we share it with

We share your data only with the service providers that make the shop work: our payment providers (Stripe, PayPal), our email provider (Resend) for transactional messages such as order confirmations, our hosting and database providers (Vercel, Neon), and the delivery carrier who fulfils your parcel. Each processes your data on our behalf under its own data-protection terms. We never sell your data.

We do not send marketing emails without your explicit consent. Order confirmations, dispatch notices and restock alerts you asked for are service messages, not marketing.

How long we keep it

We keep order and invoice records for as long as we are legally required to for tax and accounting purposes (generally six years). Restock-alert subscriptions are kept until you unsubscribe or we send the alert. Support tickets are kept while they are useful for resolving your query and our records. Account sign-in sessions expire automatically.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to processing, and to data portability. To exercise any of these — including erasure of your data — email us at hello@nightrip.co.uk and we will respond within one month. Some data tied to completed orders may need to be retained to meet our legal obligations, and we will tell you if that applies.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time; the current version is always the one on this page. It was last updated on 2026-07-24.