Privacy Policy

We keep it straight. Here's exactly what data we collect, why we collect it, and what you can do about it.

Last updated: May 2025 · Controller: Keeper iD · Jurisdiction: England & Wales

1. Who We Are

Keeper iD is a goalkeeper glove brand registered in England and Wales. Our website is keeperid.com. Keeper iD is the data controller responsible for your personal information collected through this website — when this policy says "we", "us" or "our", it refers to Keeper iD.

We are registered with the Information Commissioner's Office (ICO) in the UK and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Keeper iD
Website: keeperid.com
Email: privacy@keeperid.com

2. What Data We Collect

We collect data in two ways — information you give us directly, and information collected automatically when you use our site:

Account data — name, email address, password (hashed) — when you register or checkout
Order data — billing and delivery address, order history, payment method type (not card details) — when you place an order
Contact data — name, email, message content — when you contact us via form or email
Usage data — pages visited, products viewed, time on site, referral source — automatically via cookies and analytics
Technical data — IP address, browser type, device type, operating system — automatically when you visit
Marketing data — email marketing preferences, newsletter opt-in status — when you opt in

We do not store your full card details. All payment processing is handled by our secure payment provider — we only see the last four digits of your card and the payment status.

3. How We Use Your Data

We only use your data for purposes that are necessary, reasonable, and where we have a proper legal basis:

Processing and fulfilling your orders — including delivery, invoicing, and returns
Managing your account, if you choose to create one
Responding to enquiries, complaints, or support requests
Sending order confirmations and shipping updates by email
Sending marketing emails — only if you've opted in, and you can unsubscribe any time
Improving the website — understanding how pages perform and where people drop off
Preventing fraud and ensuring the security of transactions
Complying with our legal obligations, including tax records

We do not sell your data, and we do not use your data for automated decision-making or profiling that has a legal or significant impact on you.

4. Legal Basis for Processing

Processing orders and payments — Contract, necessary to fulfil your order
Account management — Contract, you have an account with us
Legal and tax obligations — Legal obligation, required by law
Fraud prevention and site security — Legitimate interests, protecting our business and customers
Website analytics and improvement — Legitimate interests, improving user experience
Email marketing — Consent, only if you've opted in

5. Who We Share Data With

We share your data only where necessary to run the business, and we never sell your information to third parties:

Payment processors — to handle card transactions securely
Delivery and courier services — your name and address, to ship your order
Email marketing platforms — if you've opted into marketing communications
Analytics providers — anonymised usage data to understand site performance
Hosting and IT providers — who provide the infrastructure this website runs on
Law enforcement or regulators — where we are legally required to disclose

All third-party service providers are required to handle your data securely and only for the purposes we've specified. Where providers are based outside the UK, we ensure appropriate safeguards are in place.

6. Cookies

Cookies are small files stored on your device when you visit a website. We use them to keep the site working properly and to understand how people use it.

Essential — shopping cart, login sessions, security tokens. Always active; the site can't function without these.
Functional — remembering your preferences (size, region, language). Optional.
Analytics — understanding how pages are used, anonymised. Optional, consent required.
Marketing — retargeting and ad performance tracking. Optional, consent required.

You can manage cookie preferences at any time via your browser settings. Note that disabling essential cookies will break the checkout process.

7. How Long We Keep It

Order records — 7 years (HMRC requirement for financial records)
Account data — for the life of your account, plus 12 months after closure
Marketing preferences — until you unsubscribe or withdraw consent
Contact/enquiry records — 2 years from last contact
Analytics data — 26 months (industry standard)
Fraud prevention data — up to 5 years where a risk exists

When data reaches the end of its retention period, it is securely deleted or anonymised.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of Access — request a copy of the personal data we hold about you
Right to Rectification — ask us to correct inaccurate or incomplete data
Right to Erasure — request deletion of your data in certain circumstances
Right to Object — object to processing based on legitimate interests or for marketing
Right to Restrict — ask us to limit how we use your data while a dispute is resolved
Right to Portability — receive your data in a structured, machine-readable format
Withdraw Consent — unsubscribe from marketing or withdraw any consent at any time
Right to Complain — lodge a complaint with the ICO if you're unhappy with how we've handled your data

To exercise any of these rights, email us at privacy@keeperid.com. We'll respond within 30 days, and may need to verify your identity before we can act on the request. If you're not satisfied with our response, you have the right to complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

9. Security

We take the security of your data seriously. Our measures include SSL/TLS encryption on all data transmitted through keeperid.com, secure hashed password storage, access controls ensuring only authorised staff can access personal data, regular security monitoring of our hosting environment, and payment processing handled by PCI-DSS compliant third parties — your card data never touches our servers.

No method of transmission over the internet is 100% secure. If you suspect a security issue with your account, contact us immediately at privacy@keeperid.com.

10. Children

Our website is intended for use by individuals aged 16 and over. We do not knowingly collect personal data from children under 16 without verifiable parental consent.

Many of our products — junior goalkeeper gloves in particular — are intended for young players. When purchases are made for children, we expect the transaction to be completed by a parent or guardian; the personal data collected relates to the adult making the purchase, not the child using the product.

If you believe a child has provided us with personal data without appropriate consent, contact us at privacy@keeperid.com and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time — for example when we add new features, change service providers, or when legislation changes. Any significant changes will be communicated via the website or by email if we have your contact details. The "last updated" date at the top of this page will always reflect when we last made changes. Continuing to use keeperid.com after changes have been posted constitutes acceptance of the updated policy.