Privacy Policy
Effective Date: October 2026
Website: thesportsbasecamp.com
Brand: Thesportsbasecamp
Data Controller: Thesportsbasecamp (Independent British Retail Business)
Headquarters: 17-19 Devonshire St, Penrith, Cumbria, CA11 7SX, United Kingdom
At Thesportsbasecamp, we are committed to protecting your privacy and managing your personal information with total transparency and integrity. This Privacy Policy outlines how we collect, store, process, transfer, and protect your personal data when you browse or purchase sports and training equipment from thesportsbasecamp.com, in rigorous adherence to the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).
1. Data Controller Information
Under the UK GDPR, Thesportsbasecamp acts as the Data Controller responsible for your personal information gathered through this website. If you have any inquiries regarding data protection, please contact our designated Data Privacy Coordinator via email at support@thesportsbasecamp.com or by post at our operational headquarters: 17-19 Devonshire St, Penrith, Cumbria, CA11 7SX, United Kingdom.
2. The Categories of Personal Data We Collect
We do not collect unnecessary data. We only process personal records that fall into the following defined categories:
- Identity Data: First name, surname, title, and date of birth (where age verification applies).
- Contact Data: Billing address, UK delivery address, contact email address, and telephone number (used strictly for carrier dispatch milestones and order progress notifications).
- Transaction & Order Data: Details of sports equipment purchased (e.g. golf nets, boxing gear, billiard cues), order numbers, dispatch dates, parcel tracking links, customer service correspondence, and return waybill history.
- Payment & Financial Data: Transactions are conducted via PCI-DSS Level 1 compliant secure payment gateway providers supporting Visa and Mastercard. (Please note: Our web servers never store, log, or have access to your full 16-digit credit/debit card numbers or CVV security codes; all payment data is tokenised directly by our gateway partners).
- Technical & Telemetry Data: Internet protocol (IP) address, browser software type and version, device operating system, hardware identifiers, time zone settings, and uniform resource locators (URLs) detailing interactions across our storefront.
3. Lawful Bases and Purposes for Processing (UK GDPR Article 6)
Under UK GDPR regulations, every instance of personal data processing must be justified by an established lawful ground. We process your data under the following legal frameworks:
| Purpose of Processing | Data Categories Involved | Lawful Basis under UK GDPR |
|---|---|---|
| Processing purchases, assembling equipment orders, printing enclosed return labels, and fulfilling doorstep delivery across the UK. | Identity, Contact, Transaction, Financial | Performance of a Contract (Article 6(1)(b)) |
| Managing payments, card scheme authorizations (Visa/Mastercard), processing refunds, and resolving charge disputes. | Contact, Financial, Transaction | Performance of a Contract and Legitimate Interests (recovering dues) |
| Handling customer enquiries, notifying you of order milestones, and providing after-sales warranty and care support. | Identity, Contact, Transaction | Performance of a Contract |
| Complying with statutory corporate, accounting, auditing, and VAT tax reporting requirements under HM Revenue & Customs (HMRC). | Identity, Contact, Transaction | Compliance with a Legal Obligation (Article 6(1)(c)) |
| Monitoring platform security, preventing fraudulent card attempts, and maintaining server stability. | Technical, Transaction, Identity | Legitimate Interests (protecting our store and customers from cyber fraud) |
4. Disclosures & Third-Party Service Partners
We do not sell, rent, lease, or monetize your personal information to third parties. We disclose data solely to vetted, trusted operational partners strictly required to conduct business operations:
- E-Commerce Hosting Infrastructure: Our store architecture is hosted and powered by SHOPLINE HOLDINGS LIMITED (21/F, Nam Wo Hong Building, 148 Wing Lok Street, Sheung Wan, Hong Kong; Phone: +852-81207281; Email: support@shopline.com). Data is held in encrypted server environments governed by strict data processing agreements.
- Accredited UK Logistics Couriers: Recipient delivery details are communicated to verified UK postal and freight couriers solely to coordinate door-to-door transit and tracking notifications.
- Payment Gateways & Merchant Clearers: Financial data is routed via encrypted interfaces directly to banking merchant networks for Visa and Mastercard clearing.
- Statutory Authorities: Where legally mandated, data may be disclosed to law enforcement or regulatory authorities (such as HMRC or UK courts) to satisfy legal disclosure demands.
5. International Data Transfers
Because technical hosting services are coordinated through our technical partner SHOPLINE HOLDINGS LIMITED, certain digital records may be processed outside the UK and European Economic Area (EEA). Wherever personal data is transferred across borders, we ensure equivalent levels of protection are applied by utilizing UK International Data Transfer Agreements (IDTA) or Standard Contractual Clauses (SCCs) recognized under UK data law.
6. Data Retention Period (HMRC 6-Year Policy)
We retain your personal data only for as long as necessary to fulfill the purposes for which it was gathered. In accordance with UK company law and HM Revenue & Customs (HMRC) statutory tax regulations, transactional sales records, invoices, and payment confirmations are retained for 6 years following the end of the financial year in which the transaction occurred. Following the expiration of statutory retention windows, personal data is irreversibly anonymised or securely deleted.
7. Your Statutory Rights Under UK GDPR
Under the UK Data Protection Act 2018, you hold defined legal rights concerning your personal data:
- The Right to Access: You may request a copy of the personal records we hold regarding you (Data Subject Access Request).
- The Right to Rectification: You may ask us to update or amend incomplete or inaccurate information.
- The Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where there is no lawful justification for its continued processing (subject to statutory HMRC tax record retention).
- The Right to Restrict Processing: You may ask us to suspend data processing under specific conditions.
- The Right to Data Portability: You may request the transfer of your structured data to another provider.
- The Right to Object: You may object to data processing based on legitimate interests or direct marketing.
To exercise any of these statutory rights, please email our team at support@thesportsbasecamp.com. We respond to all verified requests within 30 calendar days free of charge.
8. Right to Lodge a Complaint with the ICO
If you have concerns regarding our data handling, we encourage you to contact us first so we can resolve the issue immediately. However, you maintain the statutory right to lodge a formal complaint at any time with the UK supervisory authority for data protection:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 | Website: https://ico.org.uk
Operational Headquarters & Privacy Contact
| Brand & Storefront | Thesportsbasecamp |
| Operational Headquarters | 17-19 Devonshire St, Penrith, Cumbria, CA11 7SX, United Kingdom |
| Direct Telephone Line | +44 1768 210072 |
| Privacy Enquiries Email | support@thesportsbasecamp.com |