Skip to main content

Privacy Policy

1. Who we are

This policy explains how we handle your personal data when you use The Loot Hut at theloothut.com, including our client-branded shops, and when you buy from us.

The data controller is ESPI Group Limited, trading as The Loot Hut, a company registered in England and Wales (company number 09114924), registered office 483 Birmingham Road, Marlbrook, Bromsgrove, Worcestershire, B61 0HZ.

If you have any questions about this policy or your data, contact us at hello@theloothut.com.

2. The data we collect

When you place an order or contact us, we collect:

  • Your details: name, email address, and phone number (where provided).
  • Delivery details: the delivery address for your order.
  • Order details: the products, colours and designs you choose, and any personalisation text you supply (for example, a name to be engraved).
  • Payment information: your payment is processed by Stripe. We receive confirmation that payment succeeded and limited transaction details. We do not collect or store your full card number.
  • Technical and usage data: basic information about how you use the site, collected through essential and (where you agree) analytics cookies. See section 8.

3. How we use your data and our lawful basis

Why we use it Lawful basis (UK GDPR)
To take payment, produce your personalised order and deliver it Performance of our contract with you
To send order confirmations, updates and respond to enquiries Performance of our contract / our legitimate interests
To handle faults, returns and complaints Performance of our contract / legal obligation
To keep records for tax and accounting Legal obligation
To improve and secure the website Our legitimate interests
To send marketing, where you have asked us to Your consent

4. Who we share your data with

We share your data only as needed to fulfil your order and run our business:

  • Stripe (our payment processor) to take and confirm payment.
  • Couriers and delivery partners to deliver your order.
  • Our IT, hosting and software providers who help us run the site, acting on our instructions.
  • HMRC, regulators or law enforcement where we are legally required to.

We do not sell your personal data to anyone.

5. International transfers

Some of our providers, including Stripe, may process data outside the UK. Where that happens, we rely on appropriate safeguards (such as UK adequacy regulations or standard contractual clauses) to make sure your data is protected to UK standards.

6. How long we keep your data

We keep order and customer records for as long as needed to fulfil your order and provide support, and then for 6 years to meet our legal and accounting obligations (UK tax records). Marketing contact details are kept until you withdraw consent or unsubscribe.

7. Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate data;
  • ask us to delete your data, where there is no overriding reason to keep it;
  • restrict or object to how we use your data;
  • ask for a copy of certain data in a portable format;
  • withdraw consent at any time, where we rely on consent.

To exercise any of these, contact hello@theloothut.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113, though we would appreciate the chance to put things right first.

8. Cookies

We use cookies and similar technologies that are strictly necessary to run the site and process your order. Where we use non-essential cookies (such as analytics), we ask for your consent first and you can change your choice at any time.

9. Marketing

We will only send you marketing if you have asked us to or otherwise agreed. You can opt out at any time using the unsubscribe link in our emails or by contacting us. Opting out of marketing does not stop service messages about an order you have placed.

10. Changes to this policy

We may update this policy from time to time. The current version is always the one published here, and we will note the date it was last updated below.

Controller: ESPI Group Limited trading as The Loot Hut · Company number 09114924 · 483 Birmingham Road, Marlbrook, Bromsgrove, Worcestershire, B61 0HZ · hello@theloothut.com

Last updated: 10 June 2026