Privacy Notice Last updated: 31 July 2026 1. Who we are Lewis Lloyd Suckling trading as Facts in Play is the controller of the personal information described in this notice. Customer-service and privacy enquiries may be sent to hello.factsinplay@gmail.com. Our business/service address is: Stirchley House, 21 Reddicap Trading Estate, Sutton Coldfield, West Midlands, B75 7BU, United Kingdom. 2. Information we collect Depending on how you use the website, we may collect: • Your name, email address, postal address and any telephone number you provide. • Your order details, selected products, personalisation instructions, delivery information, refunds and order history. • Payment status, payment method and transaction, refund or chargeback information. Payment-card details are processed securely by the payment provider; Facts in Play does not need to receive your full card number or security code. • Information in enquiries, complaints, book suggestions and other forms, including an optional Instagram handle. • Customer-account information where you choose to create a Wix member account. • Your marketing choices and records of consent or withdrawal. • Technical information such as IP address, browser or device information, security logs, pages viewed and cookie-consent choices. Please do not provide sensitive personal information unless it is genuinely necessary for us to deal with your request. 3. How and why we use information We use personal information: • To accept, process, personalise, deliver, cancel and refund orders. The lawful basis is performance of a contract or taking requested steps before entering a contract. • To operate customer accounts and provide order history. The lawful bases are contract and our legitimate interest in providing useful account facilities. • To answer enquiries, resolve complaints and review book suggestions. The lawful basis is our legitimate interest in responding and operating the business. • To process payments, prevent fraud and manage chargebacks. The lawful bases are contract, legal obligation and our legitimate interest in protecting customers and the business. • To maintain invoices, tax and accounting records and comply with lawful requests. The lawful basis is legal obligation. • To maintain website security and diagnose technical problems. The lawful basis is our legitimate interest in operating a secure website. • To use optional analytics or non-essential cookies only after consent has been given. • To send marketing email only where the person has separately opted in. Consent may be withdrawn at any time. • To use an optional Instagram handle to contact, tag or credit someone in connection with their suggestion only where specific consent has been given. 4. Who receives information Information may be provided where necessary to: • Wix and its relevant services, including Wix Stores, Wix Forms, Wix Members Area, Wix Analytics and website communications. • Wix Payments and associated payment, banking, fraud-prevention and card-processing providers. • Royal Mail or another approved delivery provider. • Google, which hosts our customer-service email. • Professional advisers, insurers or public authorities where reasonably necessary or legally required. • Instagram only where a person has asked or consented to being contacted, tagged or credited there. We do not sell personal information. 5. International processing Some technology providers may process information outside the United Kingdom. Where this happens, we will rely on an applicable UK adequacy regulation or appropriate contractual and organisational safeguards provided by the relevant service provider. 6. How long information is retained • Order, payment, invoice and tax records will normally be retained for six years to meet accounting, tax and legal requirements. • Enquiries and complaints will normally be retained for up to two years after the matter is resolved, unless a dispute or legal requirement justifies longer retention. • Unused book suggestions and associated contact details will normally be reviewed and deleted within 12 months. • Member-account information is retained while the account is active and then deleted or anonymised when no longer required, subject to order-record obligations. • Marketing information is retained until consent is withdrawn. A minimal suppression record may then be retained so that the opt-out continues to be respected. • Cookie and analytics information is retained for the periods shown in the Cookie Notice and consent tool. We periodically review retained information and delete or anonymise information that is no longer required. 7. Your rights Depending on the circumstances, you may have rights to: • Obtain a copy of your personal information. • Correct inaccurate information. • Request erasure or restriction. • Object to processing based on legitimate interests or direct marketing. • Receive certain information in a portable format. • Withdraw consent at any time, without affecting earlier lawful processing. • Ask for information about significant automated decisions. These rights are not absolute and may be limited by legal or record-keeping obligations. To exercise a right or make a privacy complaint, email hello.factsinplay@gmail.com. If you remain dissatisfied, you may complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/. 8. Payment security Payment providers may carry out fraud and security checks under their own privacy information. Contact us if you believe a payment has been incorrectly declined or flagged. 9. Changes We may update this notice when our services or legal obligations change. The latest version and its revision date will appear on this page.