Legal
Privacy Policy
Effective Date: 18 April 2026
This Privacy Policy explains how Project Wrecked collects, uses, and protects personal data when you purchase from or interact with our shop. We are committed to handling your data in accordance with the UK GDPR and the Data Protection Act 2018.
Who We Are
Data Controller: Project Wrecked, operated by Lee Goodenough.
Contact: info@projectwrecked.com
What Data We Collect
When you make a purchase through the shop, the following personal data may be collected:
- Name
- Email address
- Billing address (where required for tax purposes)
- Payment information — processed securely by Lemon Squeezy. We do not receive or store your full card details.
If you contact us directly, we may also retain the content of that communication.
How We Use Your Data
- To process and fulfil your order, including delivering your purchased files.
- To send purchase confirmation and any necessary order-related communications.
- To respond to queries, support requests, or complaints.
- To comply with legal obligations, including tax record-keeping.
We will only send marketing communications if you have opted in. You can unsubscribe at any time.
Legal Basis for Processing
- Contract performance — to fulfil your purchase.
- Legal obligation — to comply with UK tax and financial record-keeping requirements.
- Legitimate interests — to improve our products and respond to customer enquiries.
- Consent — for any optional marketing communications.
Third-Party Payment Processing
Payments are processed by Lemon Squeezy (Lemon Squeezy, LLC). Your payment and billing information is handled directly by Lemon Squeezy under their own Privacy Policy. We only receive confirmation that a payment was successful and information needed to fulfil your order.
Data Retention
- Order records: retained for up to 7 years to comply with UK tax and financial reporting obligations.
- Email correspondence: retained for up to 2 years unless there is an ongoing matter.
Once data is no longer needed, it is securely deleted.
Your Rights
Under UK GDPR, you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing. To exercise any right, contact info@projectwrecked.com. We will respond within 30 days.
You may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Data Security
We take reasonable technical and organisational measures to protect your personal data. Payment data is handled entirely by our payment processor and is never stored on our systems.
Changes to This Policy
We may update this policy from time to time. Any changes will be published here with an updated effective date.
Contact
Questions or data requests: info@projectwrecked.com