:root{--accent:#111827;--muted:#6b7280;--bg:#ffffff;--card:#f8fafc} body{font-family:Inter, system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial; background:var(--bg); color:#111827; line-height:1.6; margin:0; padding:0} .container{max-width:960px;margin:40px auto;padding:28px;background:var(--card);border-radius:12px;box-shadow:0 6px 24px rgba(15,23,42,0.06)} h1{font-size:clamp(1.5rem,2.4vw,2rem);margin:0 0 8px} p.lead{color:var(--muted);margin-top:0} h2{margin-top:28px;margin-bottom:8px;font-size:1.05rem} ul{margin:8px 0 16px 20px} code{background:#1118270f;padding:2px 6px;border-radius:6px} .meta{display:flex;gap:16px;flex-wrap:wrap;color:var(--muted);font-size:0.95rem;margin-bottom:18px} a.link{color:var(--accent);text-decoration:none} .toc{background:#fff;padding:12px;border-radius:8px;border:1px solid #eef2f7;margin-bottom:18px} .toc a{display:block;padding:6px 0;color:#0f172a} .contact{background:#fff;padding:14px;border-radius:8px;border-left:4px solid #111827} .small{font-size:0.92rem;color:var(--muted)} details{margin:12px 0;padding:12px;background:#ffffff;border-radius:8px;border:1px solid #eef2f7} summary{font-weight:600;cursor:pointer}

All Time Kicks — Privacy Policy

Last updated: 01 January 2025 — Website: www.alltimekicks.com

Contents 1. Introduction — scope & commitment 2. Key legal frameworks 3. What we collect 4. How we collect data 5. Purposes & lawful bases 6. Cookies & tracking 7. Sharing & processors 8. International transfers 9. Retention 10. Security 11. Your rights 12. Rights by region 13. Children 14. Automated decision-making 15. Third-party sites 16. Changes 17. Contact & complaints

1. Introduction — scope & commitment

All Time Kicks ("we", "us", "our") operates www.alltimekicks.com. This Privacy Policy explains what personal data we collect, why we collect it, how it is used and shared, the legal bases for processing, your rights and how to contact us. We process data in line with UK data protection law (including the UK GDPR) and other applicable laws when serving customers internationally.

2. Key legal frameworks that apply to All Time Kicks

• UK GDPR & Data Protection Act 2018 — the core framework for processing personal data in the UK.
• International transfers — transfers outside the UK are managed under adequacy findings, the UK IDTA / standard contractual clauses or other safeguards.
• EU GDPR — applies for EEA data subjects and overlaps with protections for EU/EEA residents.
• Other regimes — where relevant, laws such as CCPA/CPRA, PIPEDA, LGPD and the Australian Privacy Act may also affect rights and obligations for customers in those jurisdictions.

3. What personal data we collect

We collect the personal data necessary to run an e-commerce store and provide customer support, including but not limited to:

• Account & transactional data: name, email, billing/shipping address, phone number, order history and payment tokens (we do not store full card numbers).
• Technical & usage data: IP address, device and browser details, cookies, pages visited, cart contents and analytics logs.
• Marketing & communications data: preferences, opt-ins and communication history.
• Support & dispute data: customer support correspondence, returns and dispute records.
• Optional / special categories: we do not routinely collect sensitive data. If you provide special category data (e.g., for accessibility) we will process it with extra safeguards.

4. How we collect personal data

• Directly from you when you register, order, contact us, subscribe or use interactive features.
• Automatically through cookies, server logs and analytics when you visit the site.
• From third parties such as payment processors, delivery partners, fraud-prevention services and public sources where necessary.

5. Purposes of processing & lawful bases

We use personal data for limited purposes only. Typical purposes and lawful bases include:

• Contract performance — fulfilment of orders and delivery (contractual necessity).
• Legal compliance — tax, accounting and anti-fraud obligations (legal obligation).
• Legitimate interests — fraud prevention, site improvement, marketing (after balancing tests).
• Consent — for optional marketing and non-essential cookies; consent may be withdrawn at any time.

6. Cookies, tracking & electronic marketing

We use cookies and similar technologies for site operation, analytics and marketing. Some cookies are strictly necessary; others require your consent. Manage preferences via the cookie banner or your browser. Marketing emails are sent only in line with applicable laws — you can unsubscribe using the link in every marketing email or by contacting us at www.allTimeKicks.com/pages/contact

7. Sharing personal data — who we share with

We share personal data only as necessary with:

• Service providers / processors: payment processors, couriers, hosting providers, analytics, email platforms and CRM providers. These parties process data under contract and only on our instructions.
• Affiliates & partners: where you opt in or to fulfil orders (e.g., drop-shippers).
• Legal & regulatory bodies: when legally required (e.g., court orders, law enforcement).
• Business transfers: in the event of a sale or reorganisation, personal data may be transferred to a buyer subject to safeguards.

8. International transfers & safeguards

Because we use global services, personal data may be processed outside the UK. Where transfers are made we use lawful safeguards such as:

• Adequacy decisions (where the UK/EU has determined a country provides adequate protection).
• UK International Data Transfer Agreement (IDTA), UK/EU standard contractual clauses or equivalent safeguards and transfer risk assessments.
• Technical measures: encryption, minimisation and access controls.

Contact admin@alltimekicks.com for details of specific transfers and safeguards.

9. Retention of personal data

We retain personal data only as long as needed for the purposes set out above and to meet legal obligations (for example, accounting records). Order and transaction records are generally retained for the minimum period required for tax and accounting; anonymised analytics data may be kept longer for improvement purposes. Contact us for category-specific retention periods.

10. Security

We implement appropriate technical and organisational measures to protect personal data, for example encryption in transit, access controls, secure hosting and staff training. No system is perfectly secure — in case of a notifiable breach we will comply with applicable notification requirements, including informing the ICO and affected individuals if required.

11. Your rights (overview) and how to exercise them

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Request correction or erasure of inaccurate or unnecessary data.
• Restrict processing or object to processing based on legitimate interests.
• Receive certain data in a portable format (data portability).
• Withdraw consent for consent-based processing.

To exercise any rights, email: admin@alltimekicks.com with an explanation of your request. We will verify your identity and respond within applicable statutory timeframes. If you remain unhappy you can lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority.

12. Rights by region — short summary

• UK & EEA residents: UK GDPR / EU GDPR apply.
• California residents: CCPA/CPRA-style rights may apply (access, deletion, opt-out of sale/sharing etc.).
• Canada, Brazil, Australia & others: local laws such as PIPEDA, LGPD and the Australian Privacy Act may confer additional rights. We will comply with local laws where they apply.

13. Children

Our products are aimed at adults. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have inadvertently collected a child’s data please contact: admin@alltimekicks.com.

14. Automated decision-making and profiling

We may use automated systems for fraud detection and risk scoring. We do not make decisions that produce legal or similarly significant effects solely by automated means without human review. Contact us if you want information about the logic involved in automated processing that affects you.

15. Third-party websites & social media

Our site may link to third-party websites and social platforms. This policy does not cover their processing — please review their privacy notices before sharing personal data with them.

16. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will publish the revised policy on our website with an updated "Last updated" date and, where required, notify customers directly.

17. Contact, complaints & supervisory authority

18. Appendix — quick checklist for data-subject requests

• Access: alltimekicks.com/pages/contact with "Subject Access Request" in the subject line.
• Deletion: email with "Delete my data".
• Marketing opt-out: click the unsubscribe link or email alltimekicks.com/pages/contact.

This Privacy Policy is a general-purpose document. If you would like a shorter consumer-facing summary for checkout pages, a separate Cookie Policy, or a Data Processing Addendum (DPA) tailored for your suppliers, reply to this page and we can generate them.

© All Time Kicks Ltd — www.alltimekicks.com.