Privacy
Policy

1. Who we are

Ardovique is an online shop for tennis, padel, squash, badminton and pickleball equipment, run by ARDOVIQUE LTD. We are the controller of the personal data described in this policy, which explains what we collect, why, and the choices you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We have not appointed a Data Protection Officer, as we are not required to. Questions about this policy or your data go to the email address above.

2. Data we collect

Order and delivery data

• Your name, email address and phone number.
• Delivery address, town or city and postcode.
• What you ordered, quantities, prices, order number, chosen payment method and any comment you add, such as string tension, grip size or delivery notes.

Playing profile for racket fitting

• Your sport, level of play, playing style, current racket, preferred weight, balance, head size, string and tension, when you choose to tell us so we can recommend equipment.
• If you mention an injury, such as tennis elbow, to explain why you want a softer frame, we treat that as health data and use it only with your explicit consent and only for that recommendation.

Restock plan data

• The plan you chose, the sport and items selected, delivery schedule, pauses and cancellations.

Correspondence

• Emails and phone conversations with us, including fitting questions, returns and complaints.

Payment data

• Payments are processed by our payment provider. We do not receive or store your full card number or security code. We receive confirmation that a payment succeeded, the amount, the method used and, for cards, the last four digits and expiry month.

Technical data

• Our hosting provider records standard server logs, such as IP address, browser type and the pages requested, to keep the site running and secure. Your cart is held only in your browser while the page is open and is not sent to us until you place an order.

3. Purposes and legal bases

We only use personal data where UK GDPR gives us a lawful basis.

Where we rely on legitimate interests, we have weighed them against your rights and you can object at any time, as set out in section 9. We do not make decisions about you based solely on automated processing.

4. Who we share it with

We do not sell personal data. We share it only with the following, and only as much as each needs:

• Payment provider, to take payment by card, Apple Pay, Google Pay, Klarna, PayPal or bank transfer. Where you choose Klarna or PayPal, that company acts as a separate controller under its own privacy notice.
• Courier services, which receive your name, delivery address, phone number and email to deliver your parcel and send tracking updates.
• IT and email providers, who host our website and email under contracts requiring them to act only on our instructions.
• Professional advisers, such as our accountants and lawyers, under duties of confidentiality.
• HMRC, the police and other authorities, where the law requires us to.
• A buyer of our business, if all or part of it is sold, under the same protections as this policy.

5. International transfers

We aim to keep personal data in the UK. Some of our service providers, such as email or payment providers, may process data in the European Economic Area, the United States or elsewhere. Where data leaves the UK we make sure it is protected by UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework. You can ask us for details of the safeguard used.

6. How long we keep it

• Order, payment and return records: six years after the end of the financial year in which the order was placed, to meet tax and accounting rules and the limitation period for claims.
• Restock plan records: for as long as the plan is active, then six years for the financial records it produced.
• Playing profile: until you ask us to delete it, or 24 months after your last order or message, whichever comes first.
• Health information you volunteer: only as long as needed to answer the question it relates to, and no longer than 12 months.
• Correspondence not linked to an order: 24 months.
• Marketing consent: until you withdraw it; we then keep a minimal suppression record so we do not contact you again.
• Server logs: up to 90 days.

7. Security

The site is served over HTTPS. Access to customer data is limited to the people who need it to fulfil orders, protected by strong passwords and two-factor authentication. Card details never pass through our systems. Our providers are bound by contract to keep data secure. If a breach is likely to put your rights at risk we will tell you and, where required, the Information Commissioner's Office within 72 hours.

8. Cookies

This website does not set cookies, use analytics or advertising trackers, or store anything in your browser's local or session storage. Your cart lives in the page's memory and disappears when you close or reload it. If we ever introduce non-essential cookies, we will ask for your consent first and update this policy.

9. Your rights

Under UK GDPR you have the right to:

• Access: receive a copy of the personal data we hold about you.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: ask us to delete your data where there is no good reason for us to keep it.
• Restriction: ask us to pause using your data, for example while we check its accuracy.
• Portability: receive data you gave us in a structured, machine-readable format, or have it sent to another organisation.
• Objection: object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent: where we rely on consent, withdraw it at any time.

To use any of these rights, email [email protected]. We may ask you to confirm your identity. We reply within one month, which can be extended by two further months for complex requests; we will tell you if that happens. There is normally no fee.

10. Withdrawing consent

You can withdraw consent for fitting recommendations, use of health information or marketing emails at any time by replying to any of our emails or writing to [email protected]. Every marketing email also contains an unsubscribe link. Withdrawing consent does not affect processing already carried out, and does not affect your orders.

11. Complaints

If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection:

12. Age restriction

You must be 18 or over to place an order. Junior rackets are bought by a parent or guardian on a child's behalf. We do not knowingly collect personal data from children under 13; if you believe a child has sent us their details, contact us and we will delete them.

13. Changes to this policy

We review this policy when our services or the law change. The current version is always on this page with the date it was last updated. If a change materially affects how we use data you have already given us, we will email you before it takes effect.

Last updated: 21 October 2026