Legal
Privacy Notice
Who we are
iShop is preparing to open. Our full company name, registered address and company number will be published here before sales open.
In this notice “iShop”, “we” and “us” means the business named above, which controls the personal data described here. Questions about your data: shop@ifantasyx.com.
The short version
We collect only what we need to run the shop, deliver discreetly and keep your account working. We never sell your data. We do not use advertising cookies. Delivery details are removed from order records once they are no longer needed.
What we collect
- Account details: your email address and name, and your password if you create one with us. If you sign in with a linked iFantasy account, we receive your account ID and email address from it.
- Order details: what you order, delivery name and address, phone number if you give one, and order history.
- Payment details: taken and held by our payment provider. We never see or store your full card number.
- Messages: what you send us when you contact us.
- Newsletter: your email address and when you signed up, if you join the quiet list.
- Technical data: basic information your browser sends when you visit (such as device type and pages viewed), used to run and secure the site and fix errors.
- Wishlist and bag: stored in your own browser. If you are signed in, linked to your account.
We do not ask for, and do not want, information about your health, sex life or sexual preferences. Buying a product from us is not treated as information about you beyond what is needed to fulfil the order.
Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Take, pack, deliver and support your order, and handle returns | Performance of a contract |
| Run your account, wishlist and bag | Performance of a contract |
| Keep financial and tax records | Legal obligation |
| Keep the site secure, prevent fraud and fix errors | Legitimate interests |
| Send the newsletter and offers | Consent (you can unsubscribe at any time) |
| Answer your messages | Legitimate interests |
Discretion
Orders ship in plain, unbranded packaging with a neutral sender name, and a neutral name appears on your bank statement. Packing slips never show prices on gift orders.
Who we share it with
Only the service providers we need, under contracts that require them to protect your data and use it only on our instructions:
- Railway — hosting (United States).
- Cloudflare — images and network (United States).
- Resend — email (United States).
- Our payment provider, when sales open.
- Delivery companies, who receive your name, delivery address and, where needed, phone number.
We may share data if the law requires it, or to protect our customers or business from fraud. We never sell your personal data.
International transfers
Some of our providers are based in, or use servers in, the United States. Where data leaves the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum, so your data stays protected.
How long we keep it
- Delivery names, addresses and phone numbers are removed from order records 90 days after the order is completed.
- Order and payment records needed for tax are kept for 6 years, without delivery details.
- Account details are kept until you close your account.
- Newsletter details are kept until you unsubscribe.
- Messages are kept for up to 2 years.
Your rights
You can ask to see, correct or delete your personal data, to restrict or object to how we use it, or to receive a copy of it in a portable format. You can withdraw consent to marketing at any time using the unsubscribe link or by emailing us. Email shop@ifantasyx.com and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). We would appreciate the chance to put things right first.
Age
iShop is not intended for children. Our Play section is for adults aged 18 and over, and we do not knowingly collect data from anyone under 18 through it.
Cookies and browser storage
We use only what the site needs to work: keeping you signed in, remembering your bag, wishlist and country, and keeping the site secure. These do not need your consent. We do not use advertising or tracking cookies. If that ever changes, we will ask first.
| Name | Type | Purpose | How long |
|---|---|---|---|
| _medusa_jwt | Cookie | Keeps you signed in | 7 days |
| _medusa_cart_id | Cookie | Remembers your shopping bag | 7 days |
| _medusa_pending_customer | Cookie | Holds your sign-up details while you confirm your email | 24 hours |
| _medusa_cache_id | Cookie | Groups cached pages for your region so the site loads correctly | 24 hours |
| _medusa_locale | Cookie | Remembers your language and region choice | 1 year |
| ifantasy_age_ok | Cookie and browser storage | Remembers that you confirmed you are 18 or over | 1 year |
| ishop_in_app | Cookie | Shows the in-app layout when the shop is opened from the iFantasy app | 7 days |
| ishop_bottom_inset | Cookie | Positions the cart bar above the phone’s home area when opened in-app | 7 days |
| ishop_handoff_degraded | Cookie | Flags a sign-in that needs retrying | Until sign-in succeeds (up to 7 days) |
| ishop_country | Browser storage | Remembers the country you shop in | Until you clear it |
| ishop_wishlist | Browser storage | Remembers your wishlist on this device | Until you clear it |
Changes
If we change this notice, we will update the date at the top. Significant changes will be shown on the site or emailed to account holders.