Privacy Policy
Privacy Policy
Last updated: June 2025
This Privacy Policy explains how Best Raft Place ("we", "us", "our"), operating the online shop at bestraftplace.com, collects, uses, and protects your personal data when you browse our website or place an order. We take our data protection obligations seriously and comply with the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Who We Are (Data Controller)
The data controller responsible for processing your personal data is:
Best Raft Place
Website: bestraftplace.com
Email: admin@bestraftplace.com
If you have any questions about how we handle your personal data, you can contact us directly at the email address above.
2. What Data We Collect
When you use our website or place an order, we may collect the following personal data:
Identity data: first name, last name
Contact data: email address
Delivery data: postal address (street, city, postcode, country)
Order data: items purchased, order date, order history, correspondence related to your order
Technical data: session cookie identifier (see Section 7)
We do not collect payment card data directly — if and when online payment via PayPal is introduced, your payment details will be processed exclusively by PayPal under their own privacy policy.
We do not collect sensitive personal data (as defined under GDPR Article 9), nor do we use automated decision-making or profiling.
3. Why We Collect Your Data
We collect and use your personal data for the following specific purposes:
Order fulfilment: processing your purchase, confirming the order, coordinating delivery, and handling returns or disputes
Communication: responding to your enquiries, sending order confirmations and shipping updates
Compliance with legal obligations: retaining transaction records as required by applicable law
We do not use your personal data for marketing, advertising, or any purpose unrelated to your order or enquiry.
4. Legal Basis for Processing
We process your personal data on the following legal grounds under GDPR Article 6:
Article 6(1)(b) — Performance of a contract: Processing your name, email, and delivery address is necessary to fulfil the contract when you place an order with us.
Article 6(1)(f) — Legitimate interests: We retain order history for a reasonable period to handle any post-sale queries, disputes, or warranty matters. We have assessed that this interest is not overridden by your rights and freedoms.
Article 6(1)(c) — Legal obligation: Where applicable law requires us to retain certain records (e.g. for accounting or tax purposes), we process data on this basis.
5. How Long We Store Your Data
We retain your personal data for 3 years from the date of your last order. After this period, your data is deleted or anonymised unless we are required by law to retain it longer (for example, for tax or accounting purposes under applicable national law).
If you contact us without placing an order, we retain your correspondence for 12 months from the date of last contact, then delete it.
6. Who We Share Your Data With
We do not sell or rent your personal data. We share it only where strictly necessary:
Postal and courier services: We provide your name and delivery address to the shipping carrier handling your order. These carriers act as data processors and are contractually bound to use your data only for delivery purposes.
PayPal: When online payment functionality is introduced, your transaction will be processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., acting as an independent data controller for payment processing. We will share only the data required to complete the transaction. PayPal's privacy policy will apply to that processing.
We do not share your data with any analytics providers, advertising networks, or social media platforms.
7. Cookies
Our website uses only technically necessary cookies — small text files stored on your device to make the site function properly. Specifically:
Session cookie: keeps you logged in during your visit
Shopping cart cookie: preserves the contents of your cart between pages
These cookies are deleted when you close your browser or within a short fixed period. They do not track you across other websites, and they are not used for advertising or analytics. Because they are strictly necessary, no consent banner is required under the ePrivacy Directive; however, you can block or delete cookies in your browser settings, which may affect site functionality.
We use no third-party cookies, tracking pixels, or analytics tools.
8. Your Rights Under the GDPR
If you are based in the EU/EEA (or the UK), you have the following rights regarding your personal data:
Right of access (Art. 15): You may request a copy of the personal data we hold about you.
Right to rectification (Art. 16): You may ask us to correct inaccurate or incomplete data.
Right to erasure (Art. 17): You may request deletion of your data where there is no legal basis for us to retain it.
Right to data portability (Art. 20): You may request your data in a structured, machine-readable format so you can transfer it to another service.
Right to object (Art. 21): You may object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds.
Right to restriction (Art. 18): You may ask us to restrict processing in certain circumstances (e.g. while a dispute is resolved).
To exercise any of these rights, please contact us at admin@bestraftplace.com. We will respond within 30 days.
You also have the right to lodge a complaint with the supervisory authority in your country of residence. A list of EU data protection authorities is available at edpb.europa.eu.
9. Contact
For any questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact us:
Email: admin@bestraftplace.com
Website: bestraftplace.com
We are committed to resolving any concerns directly and promptly.
