Privacy Policy

RufffWizard is operated by Attingham House Ltd("we", "us", "our"), a company registered in England and Wales (company number 17229692), registered office at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF. This policy explains what personal data we collect when you use rufffwizard.com, why we collect it, and what rights you have over it. It's written under UK GDPR and the Data Protection Act 2018.

If you have any questions about this policy or your data, contact us at contact@attinghamhouse.com.

What we collect

What we collect depends on how you use the site:

• Placing an order: name, email, delivery address, phone number (if given), and order contents. Payment card details are collected and processed directly by Stripe — we never see or store your full card number.
• Browsing the shop: the contents of your cart, and your selected shipping region/currency, stored via cookies (see below).
• Registering for a charity event(e.g. Miles for Tommy's): the public Gran Turismo profile URL you submit, and the nickname, country, and driving-distance data fetched from that public profile to run the leaderboard. We don't collect your name, email, or address for this — only what's already public on your GT profile.

We don't run analytics, advertising, or tracking scripts of any kind on this site.

Cookies

We use two cookies, both strictly necessary for the site to function — neither requires consent:

• cartId — identifies your shopping cart. Expires after 30 days.
• rw_country — remembers your chosen shipping region/currency. Expires after 1 year.

How we use your data

• To take, process, and fulfil your order, and handle any returns or support queries.
• To show prices and shipping options in the right currency and region for you.
• To run public leaderboards for charity events you've voluntarily entered.
• To meet our legal obligations (e.g. tax and accounting records).

Who we share it with

We use a small number of processors to run the store — we don't sell or rent your data to anyone.

• Shopify — our e-commerce platform; processes and stores order and customer data.
• Stripe — payment processing; handles your card details directly, we never receive them.
• Printful — our print-on-demand manufacturer; receives your name and delivery address to make and ship your order.

Each of these may process data outside the UK/EEA under their own standard safeguards — see their respective privacy policies for details.

How long we keep it

We keep order records for as long as required for accounting and tax purposes (normally 6 years). Charity leaderboard data is kept for the duration of the campaign and a reasonable period after, then removed.

Your rights

Under UK GDPR, you can ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it's inaccurate;
• delete it, where we're not required to keep it (e.g. for tax records);
• restrict or object to how we use it.

To exercise any of these, email contact@attinghamhouse.com. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.ukif you think we've mishandled your data.

Children

This site is not directed at children and we don't knowingly collect data from anyone under 16.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.