Privacy policy

Battlestation UK — Gear for when things go south.
Last updated: 14 November 2026

This policy explains what personal data we collect, why we use it, who we share it with, and what rights you have. We handle personal data in line with UK GDPR and the Data Protection Act 2018.

Battlestation UK is the trading name of Aaron Maclean, a sole trader. Aaron Maclean is the data controller for personal data collected through this shop.

Who we are

Aaron Maclean
trading as Battlestation UK
38 Kells Place
Glasgow
G15 8HH
United Kingdom

Email: macleanaaron34@gmail.com

You can also use the contact form on this website.

What personal data we collect

The data we collect depends on how you use the shop:

When you place an order: your name, billing and delivery address, email address, phone number if you give one, and the details of your order.
When you pay: payment is taken by the payment providers offered at checkout. They process your payment details. We receive confirmation that payment has been made, and the information we need to fulfil your order. Your full card details are handled by the payment provider, not stored by us.
When you contact us: your name, email address, message, and any order number or photos you include.
When you visit the website: technical information such as your IP address, browser and device type, and pages viewed. This is collected through cookies and similar technology, including tools provided by Shopify, so the shop can function.

We do not sell food, medicines or medical supplies, and we do not ask you for health information.

How we use your data, and why we are allowed to

We only use your data for a clear reason, and we need a legal basis under UK GDPR to do so:

To process and deliver your order, take payment, send tracking information, and handle returns. This is so we can perform our contract with you.
To reply to questions and deal with problems. This is so we can perform our contract with you, or because we have a legitimate interest in running the shop and helping customers.
To keep records for tax, accounting and legal reasons. This is a legal obligation.
To keep the shop secure and prevent fraud or misuse. This is our legitimate interest in protecting the business and our customers.
To run the website, including the basket and checkout. Necessary cookies are used because they are needed for the site to work, or because we have a legitimate interest in providing a working shop.
Non-essential cookies (for example analytics or marketing), if we use them. These are only used if you give your consent. You can change your mind through the cookie banner or your browser settings.

We only email you about your order, delivery, returns or a question you have sent us, unless you have asked to hear from us for another reason. We do not run a marketing mailing list at present. If that changes, we will ask for your consent or give you a clear way to opt out, as the law requires.

Who we share your data with

We share personal data only where it is needed to run the shop or where the law requires it. We do not sell your data.

Shopify. This shop is hosted on Shopify. Shopify Inc. and its group companies provide the store platform, checkout and related services, and process personal data on our behalf as a processor (and, in some cases, as described in Shopify's own privacy policy). You can read Shopify's privacy information on Shopify's website.
Payment providers. The payment providers shown at checkout process your payment. Which provider is used depends on how you choose to pay.
Delivery companies. We share your name, delivery address and contact details with the carrier who takes your parcel (for example Royal Mail, or an equivalent tracked service) so they can deliver it and provide tracking.
Professional advisers and authorities. We may share data with an accountant, or with a public authority, if we are legally required to, or if it is necessary to protect our legal rights.

Our suppliers may see the delivery details needed to dispatch an order from a UK warehouse. They should only use that information to fulfil the order.

Cookies

This website uses cookies and similar technology.

Some cookies are necessary for the shop to work. These include cookies that keep items in your basket, let you check out, keep the session secure, and remember choices you have already made. The shop cannot function properly without them.

Shopify also sets cookies as part of providing the store and checkout.

If we use any non-essential cookies — for example to understand how the site is used, or for marketing — we will ask for your consent first, usually through a cookie banner, and you can refuse them. You can also block or delete cookies in your browser settings. Blocking necessary cookies may stop parts of the shop, including checkout, from working.

A cookie banner will be used on the site so you can see what is in use and, where a choice is required, make that choice.

Where your data is processed

The shop is run from the United Kingdom. Because we use Shopify and payment providers, some of your data may be processed outside the UK, including in countries where Shopify or those providers operate.

Where personal data is transferred outside the UK, it should be protected by an approved safeguard, such as a UK adequacy regulation or appropriate contractual clauses. You can contact us if you would like more information about this.

How long we keep your data

We keep personal data only for as long as we need it:

Order and payment records are kept for as long as we need them for tax, accounting and legal reasons. In practice that is usually up to six years after the end of the relevant tax year, unless we need to keep them longer for a dispute or a legal requirement.
Messages you send us are kept for as long as we need them to deal with your enquiry and keep a record of what was agreed.
Website logs and cookie data are kept for a shorter period, unless they are needed to investigate a security issue or a problem with an order.

When we no longer need your data, we will delete it or anonymise it.

Your rights

Under UK GDPR you have the right to:

ask for a copy of the personal data we hold about you
ask us to correct inaccurate data
ask us to delete your data, in certain situations
ask us to restrict how we use your data, in certain situations
object to us using your data where we rely on legitimate interests
receive the data you provided to us in a commonly used format, or ask us to send it to another organisation, where this right applies (data portability)
withdraw consent, where we are relying on consent (this does not affect anything we did before you withdrew it)
complain to the Information Commissioner's Office (ICO), the UK regulator for data protection

To use these rights, email us or use the contact form. We may need to check it is really you before we can respond.

How to complain

If you are unhappy with how we have used your data, please contact us first and we will try to put it right.

You can also complain to the Information Commissioner's Office at ico.org.uk, or by writing to the ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Changes to this policy

If we change this policy, we will update this page and the date at the top. If a change is significant, we will take reasonable steps to let you know.