Privacy policy

1. What data we collect

We collect only what running a shop requires. When you order: your name, delivery address, email address and the details of what you bought. When you email us: your address and whatever you choose to tell us. When you subscribe to our newsletter: your email address. Payment details are entered directly with our payment providers and never touch our systems.

When you write a review: the rating, the review text and the display name you choose — and you can stay anonymous. We record which order the review came from, which is what lets us show it as a verified purchase, but the order number, your name and your email address are never published with it.

Your shopping cart is stored locally in your own browser, not on our servers — we don't see what's in it until you place an order.

2. Why we use it

We process your data to fulfil your orders (performance of a contract), to handle returns, refunds and warranty claims (contract and legal obligation), to keep the accounting records the law requires us to keep (legal obligation), to answer your messages (legitimate interest), and to send the newsletter — only if you asked for it, and every issue includes an unsubscribe link (consent).

About three weeks after your order arrives we send one email inviting you to review what you bought. We do this on the basis of our legitimate interest — and yours — in honest, verified reviews from people who actually own the gear. It is one message per order, about that order's products only, with nothing for sale in it, and it carries a one-click opt-out; opting out is permanent and immediate, and it does not affect your order confirmations or delivery updates. If you write a review, we publish the rating, the text and the display name you chose, alongside the product, for as long as the review stands.

We don't sell your data and we don't build advertising profiles. Apart from that single review invitation, we don't email you about anything you didn't ask for: the newsletter goes only to people who signed up for it, and you can stop either of them at any time.

3. Who we share it with

Like every online shop, we rely on a small set of processors who handle data on our instructions: payment service providers (to take your payment securely), shipping and fulfilment partners (who need your name and address to deliver your order), our hosting provider (who runs this website), and an email provider (to send order confirmations, delivery updates, review invitations and, if subscribed, the newsletter). Each is bound by a data processing agreement, and we share the minimum each needs to do its job. Where a processor operates outside the EEA, transfers are protected by appropriate safeguards such as standard contractual clauses.

We also post a short notification of each paid order to a private team channel on Discord, so that whoever is packing parcels knows one has come in. That notification contains the order number, the city and country it is shipping to, the items ordered and the order total. It does not contain your name, your street address, your email address or anything about your payment.

We don't publish anything about your order. The only thing of yours that becomes public is a review, if you write one — and then only the rating, the text and the display name you picked.

4. Cookies

We keep this minimal. Your cart and your cookie choice live in your browser's local storage; nothing else is stored without your consent. Analytics and marketing cookies only run if you opt in through the consent banner, and you can change or withdraw that choice at any time via the “Cookie settings” link in the footer. The full list of what we store — and for how long — is in our cookie policy at /cookie-policy.

5. How long we keep data

Paid orders are kept for as long as tax and accounting law requires — ten years for accounting records under Lithuanian law — because they are also the record we need to handle a warranty or conformity claim during the two-year legal guarantee. Orders that were never paid, and cancelled ones, are deleted automatically after 90 days.

A published review stays up until you ask us to take it down; one that doesn't pass moderation is deleted. If you opt out of review invitations we keep a one-way fingerprint of your email address indefinitely — that is the only way to know never to write to you again, and it cannot be turned back into your address.

Newsletter addresses are kept until you unsubscribe. Correspondence is kept while your question or claim is open and for a reasonable period afterwards. We don't keep data 'just in case'.

6. Your rights under the GDPR

You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent at any time without affecting past processing. Exercising any of these is free: email us and we'll respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority.

Two of these have a button rather than a mailbox: every newsletter carries an unsubscribe link, and every review invitation carries an opt-out link. Either takes effect on the spot. You can also ask us to remove a review you wrote, and we will.

7. Contact

Variantai, MB, Basanavičiaus g. 20, LT-03224 Vilnius, Lithuania (legal entity code 306133252), trading as Racket Club, is the data controller for the processing described here. For anything privacy-related — questions, requests, complaints — email hello@racketclub.shop and we'll take it from there.