Last updated: April 2026
Pitch Relics ("we", "us", "our") is committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains what data we collect, why we collect it, how we use it, who we share it with, and your rights over it. This policy complies with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR 2016/679), the Data Protection Act 2018, and all other applicable data protection legislation.
Pitch Relics is the data controller for personal data processed through this website. For any data protection queries, contact us at: privacy@pitchrelics.com
We collect the following categories of personal data:
We do not collect any special category data (such as data about race, health, religious beliefs, or political opinions). We do not store payment card details — all payment processing is handled by PCI-DSS compliant third-party processors (Shopify Payments, Stripe, PayPal).
We collect data through:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Process and fulfil your order | Identity, Contact, Transaction | Contract performance |
| Send order confirmations and shipping updates | Identity, Contact, Transaction | Contract performance |
| Process payments securely | Transaction | Contract performance |
| Handle returns, refunds, and customer service | Identity, Contact, Transaction | Contract performance |
| Send marketing emails and promotions | Identity, Contact, Communications | Consent (opt-in only) |
| Analyse website usage to improve our service | Technical, Usage, Cookie | Legitimate interests |
| Prevent fraud and ensure security | Identity, Technical | Legitimate interests |
| Comply with legal obligations | All categories as required | Legal obligation |
| Respond to legal claims or regulatory requests | All categories as required | Legal obligation / Legitimate interests |
We will only send you marketing communications if you have opted in to receive them. You may opt out at any time by clicking the unsubscribe link in any marketing email, or by contacting us at privacy@pitchrelics.com. Opting out of marketing does not affect the delivery of transactional emails related to your orders.
We do not sell, rent, or trade your personal data. We share your data only with trusted service providers necessary to operate our business:
All third-party processors are bound by data processing agreements and are only permitted to use your data for specified, legitimate purposes.
We may also disclose your data where required by law, court order, or governmental authority, or where necessary to protect the rights, property, or safety of Pitch Relics, our customers, or others.
Some of our service providers are based outside the UK and European Economic Area (EEA). Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including:
We use cookies and similar tracking technologies on our website. Cookies are small files placed on your device that allow us to recognise you and remember your preferences.
We use the following types of cookies:
On your first visit, you will be presented with a cookie consent banner allowing you to accept or reject non-essential cookies. You can update your preferences at any time via our Cookie Settings. You can also control cookies through your browser settings — see your browser's help section for instructions.
We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law:
Under the UK GDPR and EU GDPR, you have the following rights:
To exercise any of your rights, contact us at privacy@pitchrelics.com. We will respond within 30 days. We may need to verify your identity before processing your request.
You have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EU, contact your national data protection authority.
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include SSL/TLS encryption, access controls, and regular security assessments. All payment data is processed by PCI-DSS compliant processors. However, no data transmission over the internet is completely secure, and we cannot guarantee absolute security.
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@pitchrelics.com and we will delete it.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email (if you have an account) or by posting a prominent notice on our website. The date at the top of this page shows when the policy was last updated. Continued use of our website after an update constitutes acceptance of the revised policy.
For any privacy or data protection enquiries:
Email: privacy@pitchrelics.com
Response time: Within 30 days (we aim for within 5 business days)