Privacy Policy

HUB SOUTH EAST SCOTLAND LIMITED (trading as Wildplot) is the data controller for personal data processed through hubsoueassco.shop. You can reach us at 8 Melville Street, EH3 7NS, United Kingdom, by email at support@hubsoueassco.shop, or by phone on +44 7481247443.

• Order and delivery data: name, email, phone, delivery address, city, postal code and country.
• Account and membership data: membership tier, subscription status and order history where you create an account or subscribe.
• Payment data: billing details you enter on Stripe’s secure checkout. We receive a payment confirmation and the last digits/brand of your card only — never your full card number.
• Support and enquiry data: the content of contact and wholesale enquiry forms, and any correspondence with our team.
• Kit Finder choices: the activity, space, party-size and budget selections you make. These are used to recommend kits and are not tied to sensitive information.
• Technical data: limited device, browser and log data needed to run and secure the site.

Our collection sources are: (1) data you provide directly when you order, subscribe, use the Kit Finder or complete a contact or wholesale form; (2) data generated automatically by your use of the site, collected by our hosting and security providers (technical and log data); and (3) payment confirmation data received from our payment processor, Stripe. We do not buy or enrich personal data from third-party data brokers.

To complete an order we process your shipping address (delivery address, city, postal code and country), name, email and phone. This information is used for order fulfilment — picking, packing and dispatching your kit — and is shared with the delivery carrier only to the extent needed to ship and track your parcel. For returns and exchanges, our customer support team processes your order reference and the delivery/return address to arrange collection or re-delivery. Billing and payment data linked to the order (payment result, amount, currency and the card brand/last digits) is processed to confirm payment, issue refunds and meet tax and accounting duties. Region-compliance checks on blade and battery items use your shipping country only. See our Shipping & Delivery and Returns & Refunds policies for the fulfilment terms.

• To fulfil orders and memberships — legal basis: performance of a contract.
• To provide support and answer enquiries — legal basis: legitimate interests and, where relevant, steps before a contract.
• To keep records and meet tax, accounting and consumer-law duties — legal basis: legal obligation.
• To secure the site and prevent fraud — legal basis: legitimate interests.
• To send service updates about your order or membership — legal basis: contract / legitimate interests. Any marketing email is sent only with your consent and you can opt out at any time.

Card payments are processed by Stripe. Card details are entered on Stripe’s secure, PCI-compliant systems — Wildplot never receives or stores your full card number, CVC or expiry. We receive only the payment result and limited metadata needed to confirm and fulfil your order. Refunds are returned to the original payment method through Stripe.

We share personal data only with processors that help us run the store, under contract and only as needed:

• Payments: Stripe (checkout, subscriptions, refunds).
• Hosting and delivery of the website: our cloud hosting provider.
• Database and authentication: our managed database provider, which stores order, membership and lead records.
• Shipping carriers: the couriers who deliver your order receive the name and delivery address required to ship.
• Email: our transactional email provider, to send order and support messages.

We do not sell your personal data.

Some providers process data outside the UK/EEA. Where they do, transfers are protected by appropriate safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses or an adequacy decision.

Order, membership and billing records are kept for as long as needed to fulfil the order and to meet tax and accounting obligations (typically up to 6 years). Marketing leads and Kit Finder-related enquiry data are retained for no more than 24 months, unless you ask us to remove them sooner. Support correspondence is kept only as long as needed to resolve your query.

You have the right to access, correct, delete or restrict your data, to object to processing, to data portability, and to withdraw consent at any time. To exercise any right, email support@hubsoueassco.shop.

If you are a California resident, you may request the categories and specific pieces of personal information we hold, request deletion, and know whether we sell or share personal information. We do not sell or share personal information for cross-context behavioural advertising. You will not be discriminated against for exercising these rights.

We use only the cookies needed to run the store (for example, keeping your cart) and, where enabled, privacy-respectful analytics to understand aggregate usage. See our Cookie Policy for detail and choices.

We do not carry out automated decision-making that produces legal effects about you. Wildplot is not directed at children: the store may not be used by anyone under 13, and 13–17 year-olds must have parent or guardian consent. Kits containing a blade, sharp tool or battery are for adult use.

We use encryption in transit, access controls and reputable processors to protect your data. No method of transmission is perfectly secure, but we work to protect your information and to notify you and regulators where required if an incident occurs.

If you have a concern, contact us first at support@hubsoueassco.shop. UK/EU residents also have the right to complain to their data protection authority (in the UK, the Information Commissioner’s Office).