KING OF FLASH – PRIVACY POLICY

Last updated: 28 September 2026

King of Flash Ltd respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share personal information when you:

• visit our website;

• create an account;

• place an order;

• contact us;

• sign up for marketing;

• interact with our advertising; or

• otherwise use our services.

This policy applies to www.kingofflash.co.uk.

1. WHO WE ARE

King of Flash Ltd is the controller of personal information collected through this website and in connection with our sales and customer services.

King of Flash Ltd
Company number: 10597829

Registered office:
189 Mauldeth Road
Manchester
England
M19 1BA

Trading and correspondence address:
Unit 10 Broughton Business Centre
95–103 Broughton Lane
Salford
M7 1UH
United Kingdom

Email: help@kingofflash.co.uk
Telephone: 0161 794 8111
Website: www.kingofflash.co.uk

In this policy, “King of Flash”, “we”, “us” and “our” mean King of Flash Ltd.

2. PERSONAL INFORMATION WE COLLECT

The information we collect depends on how you interact with us.

It may include the following.

Identity information

Such as:

• name;

• title;

• company name, where applicable; and

• account username or account details.

Contact information

Such as:

• billing address;

• delivery address;

• email address;

• telephone number.

Order and transaction information

Such as:

• products ordered;

• order numbers;

• order values;

• delivery information;

• returns;

• refunds;

• customer service history; and

• purchase history.

Payment information

Payments are generally processed by third-party payment providers.

We may receive information such as:

• payment status;

• payment method;

• transaction reference; and

• limited payment information.

We do not ordinarily receive or store your complete payment card number where payment is processed securely through a third-party payment provider.

Account information

If you create an account, we may collect:

• account login details;

• saved addresses;

• order history;

• preferences; and

• other information associated with your account.

Communications

We may keep records of communications you have with us, including:

• emails;

• contact forms;

• telephone enquiries;

• complaints;

• return requests;

• customer service messages; and

• other correspondence.

Technical and website information

When you use our website, we or our technology providers may collect information such as:

• IP address;

• browser type;

• device type;

• operating system;

• approximate location derived from IP address;

• pages viewed;

• referring website;

• date and time of visits;

• interactions with our website;

• shopping basket activity; and

• cookie and similar technology identifiers.

Marketing information

We may collect:

• whether you have subscribed to marketing;

• your marketing preferences;

• whether emails have been delivered, opened or interacted with;

• products or categories you have shown an interest in; and

• information used to make our marketing more relevant.

3. HOW WE COLLECT YOUR INFORMATION

We may collect personal information:

Directly from you

For example when you:

• place an order;

• create an account;

• subscribe to marketing;

• contact customer services;

• request a refund or return;

• enter a promotion; or

• provide information through the website.

Automatically

Certain technical information may be collected automatically when you visit our website through cookies, pixels and similar technologies.

From third parties

We may receive information from organisations involved in providing our services, including:

• Shopify;

• payment processors;

• delivery companies;

• marketing platforms;

• advertising platforms;

• fraud prevention services;

• website analytics providers; and

• other technology providers.

4. HOW AND WHY WE USE YOUR INFORMATION

UK data protection law requires us to have a lawful basis for processing personal information.

The lawful basis depends upon what we are doing with your information.

Processing and fulfilling orders

We use personal information to:

• process orders;

• take or confirm payment;

• arrange delivery;

• provide order updates;

• process returns;

• provide refunds;

• manage warranties; and

• deal with problems relating to orders.

Lawful basis:
Performance of a contract, or taking steps at your request before entering into a contract.

Customer service

We use information to:

• respond to enquiries;

• investigate complaints;

• help with product compatibility;

• resolve delivery issues;

• deal with returns and refunds; and

• maintain records of customer communications.

Lawful basis:
Performance of a contract and our legitimate interests in providing effective customer service and managing our business.

Managing customer accounts

We may use personal information to operate customer accounts, including saved addresses and order history.

Lawful basis:
Performance of our contract with you and our legitimate interests in providing useful account functionality.

Fraud prevention and security

We may process information to:

• detect suspicious transactions;

• prevent fraud;

• prevent misuse of customer accounts;

• maintain website security;

• protect our business; and

• protect our customers.

Lawful basis:
Our legitimate interests in preventing fraud, protecting our systems and operating a secure ecommerce business.

Where processing is required by law, we may also rely on compliance with a legal obligation.

Accounting, tax and legal compliance

We may keep and use information where necessary to:

• maintain accounting records;

• comply with tax requirements;

• respond to regulators;

• comply with legal obligations;

• establish or defend legal claims; and

• maintain appropriate business records.

Lawful basis:
Compliance with a legal obligation and, where appropriate, our legitimate interests.

Improving our website and services

We may analyse how customers use our website to:

• understand website performance;

• identify technical problems;

• understand customer behaviour;

• improve our product range;

• improve navigation and checkout;

• improve customer experience; and

• analyse the effectiveness of our business.

Depending on the technology involved, this may require your consent.

Lawful basis:
Our legitimate interests where appropriate and, where required by law, your consent.

5. EMAIL AND SMS MARKETING

We may send marketing communications about:

• products;

• special offers;

• discounts;

• promotions;

• new product launches; and

• other King of Flash news.

Where required, we will only send electronic marketing where we have the appropriate consent or another lawful basis permitted by applicable electronic marketing rules.

We may also, where legally permitted, market similar products or services to existing customers using the customer relationship sometimes referred to as the soft opt-in.

You can unsubscribe from marketing at any time by:

• clicking the unsubscribe link in a marketing email;

• using any unsubscribe facility provided in the message; or

• contacting us at help@kingofflash.co.uk.

Stopping marketing communications does not prevent us sending transactional communications relating to orders, payments, deliveries, refunds or your account.

6. PERSONALISED MARKETING AND ADVERTISING

Where permitted and where the required consent has been obtained, we may use information about your browsing or purchasing activity to make our marketing more relevant.

For example, we may use information about:

• products viewed;

• previous purchases;

• basket activity;

• website interactions; and

• marketing interactions

to identify products which may be of interest to you.

We may also use advertising services provided by third parties such as social media platforms and search engines.

These services may use cookies, pixels or similar technologies.

Where these technologies require consent, they should not be activated unless the appropriate consent has been obtained through our cookie or consent management system.

7. SHOPIFY

Our online store is operated using Shopify.

Shopify provides ecommerce technology that helps us:

• operate our online shop;

• receive orders;

• manage customer accounts;

• process transactions;

• manage checkout;

• prevent fraud; and

• provide related ecommerce functionality.

Shopify may process personal information on our behalf and, for some activities, may act as an independent controller.

For more information about Shopify's handling of personal information, please refer to Shopify's own privacy information.

8. PAYMENT PROVIDERS

When you make a payment, your information may be processed by payment service providers.

Depending on the payment method selected, these may include providers associated with:

• credit or debit card payments;

• PayPal;

• Shopify Payments;

• digital wallets; or

• other payment methods displayed at checkout.

These providers may process information independently under their own privacy policies and regulatory obligations.

We generally do not store full credit or debit card details ourselves.

9. DELIVERY COMPANIES

We share the information necessary to deliver your order with relevant postal and courier companies.

This will normally include:

• your name;

• delivery address;

• contact details;

• parcel information; and

• delivery instructions.

Delivery companies may use this information to fulfil the delivery and provide tracking or delivery notifications.

10. MARKETING AND TECHNOLOGY PROVIDERS

We may use service providers to help operate, analyse and market our business.

These may include providers of:

• email marketing;

• SMS marketing;

• ecommerce technology;

• website analytics;

• advertising;

• customer support;

• hosting;

• fraud prevention;

• payment processing;

• review platforms;

• website functionality; and

• IT services.

For example, where used on our website, this may include services such as Klaviyo, Shopify and advertising or analytics platforms.

We only share information that is reasonably necessary for the relevant purpose.

11. WHO WE MAY SHARE PERSONAL INFORMATION WITH

We may share personal information with:

• ecommerce platform providers;

• payment processors;

• banks and financial institutions;

• Royal Mail and other delivery or courier companies;

• IT and hosting providers;

• email and marketing service providers;

• analytics providers;

• advertising platforms;

• fraud prevention services;

• accountants;

• professional advisers;

• insurers;

• law enforcement bodies;

• regulators;

• HM Revenue & Customs;

• courts; and

• other organisations where required by law.

We do not sell your personal information to third parties.

12. BUSINESS TRANSFERS

If King of Flash Ltd or part of its business is:

• sold;

• merged;

• reorganised;

• transferred; or

• involved in another corporate transaction,

personal information may be disclosed to potential purchasers, advisers or other relevant parties where appropriate.

If ownership of the business changes, personal information may be transferred as part of the business assets, subject to applicable data protection law.

13. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies.

These technologies may be used for purposes such as:

• operating the shopping basket;

• keeping customers logged into accounts;

• remembering preferences;

• processing checkout;

• preventing fraud;

• measuring website performance;

• analytics;

• measuring advertising effectiveness; and

• personalised advertising.

Some cookies and technologies are strictly necessary for the website to operate.

Other cookies, including certain analytics and advertising cookies, may require your consent before they are used.

You can manage your cookie choices using the cookie controls made available on our website.

Please see our Cookie Policy for further information.

14. INTERNATIONAL TRANSFERS

Some of the organisations that provide services to us may process personal information outside the United Kingdom.

This may include providers of:

• ecommerce platforms;

• cloud infrastructure;

• payment services;

• email marketing;

• analytics; and

• advertising technology.

Where personal information is transferred internationally, we take steps to ensure that an appropriate legal transfer mechanism is used where required.

Depending on the destination and provider, this may include:

• transfers to countries recognised by the UK as providing an adequate level of protection;

• approved contractual safeguards such as the UK International Data Transfer Agreement;

• the UK Addendum to approved standard contractual clauses; or

• another transfer mechanism permitted under UK data protection law.

You may contact us if you would like further information about safeguards relating to an international transfer of your personal information.

15. HOW LONG WE KEEP PERSONAL INFORMATION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, regulatory, tax, accounting and reporting requirements.

The exact retention period depends on the type of information.

As a general guide:

Order and transaction records

We normally retain purchase, invoice and transaction information for up to 7 years after the end of the relevant accounting period or relationship where necessary for tax, accounting or legal purposes.

Customer service communications

We generally retain customer service records for as long as reasonably necessary to deal with the enquiry and any subsequent complaint, dispute, warranty or legal issue.

Customer accounts

Account information may be retained while the account remains active and for an appropriate period afterwards.

Marketing information

Marketing information may be kept while you remain subscribed.

If you unsubscribe, we may retain limited information on a suppression list so that we can record and respect your decision not to receive further marketing.

Website and analytics information

Retention depends upon the particular technology and service provider being used.

We periodically review the information we hold and delete or anonymise information when it is no longer required.

16. SECURITY

We take appropriate organisational and technical measures designed to protect personal information against:

• accidental loss;

• unauthorised access;

• inappropriate disclosure;

• alteration; and

• misuse.

We also require appropriate security from service providers that process information on our behalf.

No online system is completely secure, and we cannot guarantee the absolute security of information transmitted over the internet.

17. YOUR DATA PROTECTION RIGHTS

Depending on the circumstances, UK data protection law may give you rights including:

Right of access

You may request confirmation of whether we process your personal information and request a copy of information we hold about you.

Right to rectification

You may ask us to correct inaccurate or incomplete personal information.

Right to erasure

In certain circumstances, you may ask us to delete your personal information.

This right is not absolute. For example, we may need to retain information to meet legal, tax or contractual obligations.

Right to restriction

In certain circumstances, you may ask us to restrict how we process your information.

Right to data portability

In certain circumstances, you may have the right to receive personal information you provided to us in a structured, commonly used and machine-readable format or ask us to transfer it to another organisation.

Right to object

You have the right to object to processing based on legitimate interests in certain circumstances.

You also have an absolute right to object to the use of your personal information for direct marketing.

Right to withdraw consent

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal does not make earlier processing carried out while your consent was valid unlawful.

Rights relating to automated decision-making

Where applicable, you may have rights in relation to certain decisions made entirely by automated means which produce legal or similarly significant effects.

18. HOW TO EXERCISE YOUR RIGHTS

To exercise a data protection right, contact:

help@kingofflash.co.uk

Please provide enough information for us to identify you and understand your request.

We may request reasonable proof of identity where necessary to protect your information.

You will normally not have to pay a fee to exercise your rights.

We aim to respond within the time required by applicable data protection law.

19. COMPLAINTS TO THE ICO

If you have concerns about how we process your personal information, we would appreciate the opportunity to resolve the matter with you first.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)

Website: www.ico.org.uk

You can find current contact and complaint information on the ICO website.

20. CHILDREN'S INFORMATION

Our website and products are not specifically directed at children and we do not knowingly seek to collect personal information directly from children for ecommerce purposes.

If you believe that a child has provided personal information to us inappropriately, please contact us.

21. THIRD-PARTY WEBSITES

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of independent third-party websites.

We encourage you to read their privacy information before providing personal information to them.

22. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• changes to our business;

• changes to our service providers;

• changes in technology;

• changes to our marketing