PRIVACY NOTICE

City Rich Kids, a UK sole trader (the legal record is at /record), is the data controller for the personal data described here. We collect the minimum necessary to fulfil an order.

For a Drop 000 purchase: your email address, an optional handle, your selected seat city, and the shipping name and address you provide. Card payments are handled by Stripe; we do not receive or store your card details.

To take payment, produce and ship your order, provide access to your holding, and meet legal and accounting obligations. Our lawful bases are performance of the contract with you, our legitimate interest in operating the service, and compliance with legal obligations.

We use Stripe (payment processing), Supabase (database) and Vercel (hosting) as processors. They process data on our behalf under their own terms and appropriate safeguards.

We keep order and holding records for as long as needed to provide the service and to satisfy legal, tax and accounting requirements, then delete or anonymise them.

Under UK GDPR you have rights of access, rectification, erasure, restriction, portability and objection. To exercise them, use the contact at /record. You may also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

We do not send marketing on the basis of this purchase. We contact you only about your order and your holding.