Privacy Policy

Last updated: 6 September 2026

We ask for as little as we need to string your racket and get it back to you. We do not sell your data, and we do not share it with advertisers. This policy explains what we hold, why, and what you can ask us to do about it.

1. Who is responsible for your data

We are the data controller for the information described here. For any privacy question, email info@prostringer.co.uk.

2. What we collect

• Order details — your name, email address, delivery address, and your string, tension and racket choices.
• A contact number — required for Door 2 Door so our driver can reach you on the evening, optional otherwise.
• Account details — if you create an account: your name, email, password (stored only as a secure hash, never in readable form), saved addresses and String Points balance.
• Payment status — whether a payment succeeded, the method used and a PayPal reference. We never receive or store your card number.
• Delivery preferences — your Door 2 Door collection and return evenings, and any delivery notes you leave.
• Marketing choice — whether you ticked the box to hear from us for marketing purposes.
• Basic technical data — a session cookie that keeps your basket working, and standard server logs.

3. Why we hold it, and our lawful basis

• To fulfil your order — confirming it, stringing your racket, arranging collection or return, and answering your questions. Basis: performance of our contract with you.
• To keep proper business records — orders, payments and refunds. Basis: our legal obligation, principally tax and accounting.
• To protect the service — preventing fraudulent orders and abuse of our points and referral schemes. Basis: our legitimate interest in running the business safely.
• To remind you about an unfinished order — if you reach the payment step and do not complete, we may send you a short reminder with a link to finish. Basis: our legitimate interest in completing a sale you had already started. You can tell us to stop at any time and we will.
• To remind you when your next restrings are due — we may email you when a fresh set is likely due. The timing comes from your own order history, so it reflects how often you actually play rather than a fixed interval. Basis: our legitimate interest in reminding an existing customer about the service they bought from us. Every reminder carries a link to stop them, which takes effect straight away.
• To ask how we did — after your racket is back with you, we may ask you to leave a review. Basis: our legitimate interest in understanding how we are doing and in being found by other players. Every one carries a link to stop them.
• To send offers and string tips — only if you ticked the marketing box. Basis: your consent, which you can withdraw whenever you like.

4. Marketing and emails you may receive

Order confirmations, tracking updates, collection reminders and similar messages are part of providing the service, so we send them to everyone who orders. They are not marketing and you cannot opt out of them while an order is live.

Offers and string tips only go to people who asked for them. Every marketing email has an unsubscribe link, and you can also just reply and ask us to stop.

If you ordered as a guest, your confirmation email includes a link to create an account and claim the String Points that order earned. That link contains a one-off code tied to your order, so treat it as private — anyone with the link could attach that order to an account.

5. Who we share it with

Only the suppliers we need to run the service, and only with what they need:

• PayPal — to take payment. PayPal is a separate data controller and handles your payment details under its own privacy policy.
• Couriers — Evri, Royal Mail or DPD, depending on the service you choose, receive your name, address and contact details so they can deliver.
• Our hosting and email providers — who store the site and its database and deliver our emails on our behalf.

We do not sell your personal data, and we do not pass it to advertisers or data brokers. We may disclose information where the law requires it.

6. How long we keep it

• Order and payment records — six years after the end of the relevant tax year, which is the period HMRC generally expects.
• Account details — for as long as your account is open. Ask us to close it and we will delete or anonymise what we are not legally required to keep.
• Unfinished checkouts — a short period only, after which the record is of no use to us.
• Marketing consent — until you withdraw it.
• Operational emails we have sent you — a record of what was sent, to whom and when is kept indefinitely; the full message content is kept for 180 days.

7. Cookies

We use a session cookie to remember your basket and keep you signed in. It is essential — the site cannot work without it — so it is set without asking. PayPal, Apple Pay and Google Pay set their own cookies when their payment options load, in order to process payment securely and prevent fraud. We do not run advertising or cross-site tracking cookies.

8. Your rights

Under UK data protection law you can ask us to: give you a copy of the data we hold about you; correct anything wrong; delete data we no longer need; restrict or object to how we use it, including profiling for marketing; or provide it in a portable format. Where we rely on consent, you can withdraw it at any time without affecting anything done beforehand.

Email info@prostringer.co.uk and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113 — though we would appreciate the chance to put it right first.

9. Security and changes

The site runs over an encrypted connection, passwords are stored only as secure hashes, and card details never reach our server. No system is perfect, but we take looking after your information seriously.

If we change this policy we will update the date at the top of this page.

See also our Terms & Conditions, or get in touch.