Privacy information

Your bag and saved builds

Guest bags, loadouts and wishlists stay in this browser. Clearing the relevant site data removes them. They are not an order or stock reservation. Customer sign-in uses Clerk email-code authentication when connected. Clerk processes your email address, sign-in verification and necessary account security information. Store administrator access is separate from customer sign-in. Your saved builds, wishlist and support conversations are kept in your Loadout Lane account.

Shared builds contain product choices and current prices. Your email and account identity are not part of the shared page. Deleting your Loadout Lane account removes its saved builds, wishlist and support data and its customer sign-in identity. This does not close any unrelated account. You can revoke a shared link.

When you check out

Contact and delivery fields remain in the current tab until you choose to pay. At that point we store your name, email, delivery address, selected items and agreed terms to process and fulfil your order. Contact details are encrypted in the order record and are accessible to authorised store operators. Delivery providers receive the name, address and contact information needed to deliver your parcel.

The payment provider shown at checkout receives the order reference and payment total. With Square, our initial payment-page request excludes your contact and delivery details. With Stripe, it includes the receipt email and itemised purchase information. You enter card details on the provider’s page; Loadout Lane does not receive or store your full card number. The store records payment references and verification results for reconciliation and support. See Square’s customer privacy notice or Stripe’s privacy notice.

Resend sends order confirmation emails on our behalf. It receives the recipient address and confirmation content, including your name, delivery address, purchased items, price and agreed selling terms. Email sending references and outcomes are kept to investigate failed or duplicate messages. See Resend’s privacy information.

A necessary, protected guest-checkout cookie lets this browser access its own order. The browser retains product-only checkout references so a verified payment removes the submitted items from your bag. A reference alone cannot unlock an order. These checkout features are unavailable until payments are configured.

Support and security

We keep submitted support messages to respond to your request. A guest enquiry records your name, reply email, subject, message and submission time. Name, email and message are encrypted in storage and readable only by authorised store administrators. Your supplied email is not treated as proof of account or order ownership, and submitting a message does not create an account. Account conversations remain linked to the signed-in customer. Do not send passwords, payment-card details or redemption codes. Hosting and authentication providers process technical information needed to run and protect the service. Checkout security records restrict repeated requests and help investigate payment problems.

Why we use this information

We use order, delivery and confirmation details to enter into and perform your purchase contract. Accounting and other mandatory records are retained to meet legal obligations. Our legitimate interests in running a reliable shop, responding to enquiries, preventing fraud and resolving disputes support the necessary security and support processing. You can object to processing based on legitimate interests.

Giving the required checkout details is necessary to take and deliver an order. Marketing consent is not a condition of buying, and this checkout does not subscribe you to marketing.

Optional email news

The contact form has a separate, unticked choice for Loadout Lane offers and product news. It is optional. We record the wording version, your choice and when it was submitted. An enquiry alone is not marketing permission, and we do not enrol you silently. Guest addresses must be confirmed before adding them to a mailing platform.

You can withdraw this permission at any time by emailing our support address. Any future marketing email must include a way to unsubscribe. Withdrawal does not affect your enquiry, account, order or the lawfulness of processing before withdrawal. We use consent for this optional marketing purpose.

Regional price estimates

Where available, the hosting platform provides a country code so we can show an approximate local-currency price. Otherwise, we use an explicit region in your browser language settings, if present. Browser settings are a preference, not proof of your location. We do not send your IP address, browser language or account details to the exchange-rate service. Reference rates come from the European Central Bank through Frankfurter. Orders are charged in GBP, and local-currency estimates do not change delivery or gift-card eligibility.

Service providers and international processing

The website uses OpenAI Sites hosting and Cloudflare infrastructure. The payment provider shown at checkout, Square or Stripe, handles payment details, and Resend handles transactional email. Clerk verifies customer email-code sign-in. Authorised store operators and professional advisers may access records needed for fulfilment, support or legal obligations.

These providers may process information outside the UK, including in the United States. This is not a UK-only storage service. Provider terms set out the relevant transfer arrangements; Resend’s data processing terms include UK contractual safeguards. Contact us for information about the safeguards applicable to your data.

Retention and your choices

We determine how long to keep order and payment records by the applicable accounting requirements, the warranty or return period, and any unresolved dispute or legal claim. Closing an account does not erase records that must be retained for these reasons. Support and security information is retained while needed to resolve the request or investigate and prevent abuse, with longer retention only where a dispute or legal obligation requires it. Provider delivery logs and backups follow the provider’s retention arrangements.

Guest saves remain on your device until you remove them or clear site data. Account-owned loadouts and wishlists can be deleted in the account area when accounts are enabled. Contact us to request access, correction, erasure, restriction or a portable copy of eligible information. These rights depend on the circumstances, and recordkeeping duties may limit deletion.

You can complain to the UK Information Commissioner’s Office. You do not have to contact us first, although we welcome the chance to put a problem right.

Anonymous site statistics

We count page views, product views and successful basket additions to improve the shop. Events are added directly to daily totals. We do not create visitor identifiers, follow individual journeys, record search terms, full URLs or query strings, or send these statistics to advertising services. Private account, administrator, shared-build and payment-result pages are excluded. These totals are events, not unique people.

You can turn these statistics off below. We also respect Do Not Track and Global Privacy Control. A separate short-lived abuse-limit key, derived from the request address and a ten-minute window, protects the endpoint; it is not joined to analytics. Expired keys are removed on the next event request. Aggregate counts contain no visitor identity. Necessary hosting security logs are separate. Verified order and account totals come from the records described above and do not depend on optional browsing statistics.

Privacy contact

Seller contact details are being configured before payments open. Use the contact page for current privacy questions.