Privacy policy

Privacy Policy

This Privacy Policy explains how Retro Real ("we", "us", "our") collects, uses and protects your personal data when you visit our website or place an order. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and, where applicable, the UK GDPR.

1. Data controller

Retro Real Helgolandstraße 25, 14199 Berlin, Germany Email: support@retroreal.co.uk Phone: +49 30 89722051

2. What data we collect

Depending on how you use our website, we may collect:

  • Identity and contact data: name, email address, phone number, billing and shipping address
  • Order data: items purchased, order history, payment status (we do not store full card details — payments are processed by our payment providers)
  • Technical data: IP address, browser type, device information, pages visited, referring website
  • Communication data: messages you send us by email or contact form
  • Marketing preferences: whether you have subscribed to our newsletter

3. Why we use your data and the legal basis

Purpose Legal basis (GDPR)
Processing and delivering your order Art. 6(1)(b) — performance of a contract
Customer service and handling returns Art. 6(1)(b) — performance of a contract
Accounting, tax and legal record-keeping Art. 6(1)(c) — legal obligation
Fraud prevention and website security Art. 6(1)(f) — legitimate interest
Sending our newsletter (only if you opt in) Art. 6(1)(a) — consent
Website analytics and non-essential cookies Art. 6(1)(a) — consent

4. Who we share your data with

We only share personal data where necessary to run our store:

  • Shipping carriers (e.g. [DHL / DPD]) — to deliver your order
  • Payment providers (e.g. [PayPal / Stripe / Klarna]) — to process payments securely
  • E-commerce platform and hosting provider (e.g. [Shopify / WooCommerce hosting]) — to operate the website
  • Email and newsletter service (e.g. [Mailchimp / Klaviyo]) — only if you subscribe
  • Analytics providers (e.g. [Google Analytics]) — only with your cookie consent
  • Authorities — where required by law

We never sell your personal data.

5. International transfers

Some of our service providers are located outside the European Economic Area (for example in the United Kingdom or the United States). Where this is the case, we ensure appropriate safeguards are in place, such as an EU adequacy decision or the European Commission's Standard Contractual Clauses.

6. Cookies

Our website uses cookies. Essential cookies are required for the site to function (e.g. keeping items in your basket). Non-essential cookies (analytics, marketing) are only set with your consent, which you can give or withdraw at any time via the cookie banner or your browser settings.

7. How long we keep your data

  • Order and invoice data: 10 years (German commercial and tax law)
  • Customer account data: until you delete your account or request deletion
  • Newsletter data: until you unsubscribe
  • Technical log data: up to 30 days
  • Customer service correspondence: up to 3 years after the enquiry is closed

8. Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data deleted ("right to be forgotten")
  • Restrict or object to processing
  • Receive your data in a portable format
  • Withdraw consent at any time (this does not affect processing carried out before withdrawal)
  • Lodge a complaint with a supervisory authority. Our lead authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin. UK customers may also contact the Information Commissioner's Office (ICO).

To exercise any of these rights, email support@retroreal.co.uk. We will respond within one month.

9. Security

We use SSL/TLS encryption across our website and work only with payment providers that are PCI-DSS compliant. Access to personal data is restricted to staff who need it to perform their role.

10. Children

Our website is not directed at children under 16, and we do not knowingly collect personal data from them.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the date of the last update shown at the top.

Last updated: 16 September 2026