Privacy policy

Last updated: 30 June 2026

Crystal Maze Store (“we”, “us”, “our”) operates this store and website, including all related services, content and products (the “Services”). The Crystal Maze Store is operated by Thesourcer.com LTD, and the Services are hosted by Shopify Inc. (“Shopify”), which provides the ecommerce platform that enables us to sell our products to you.

This Privacy Policy explains how we collect, use, store and share your personal information when you visit our website, make a purchase, or otherwise interact with us.

By using our Services, you agree to the practices described in this Privacy Policy.

 

1. Personal Information We Collect

We collect personal information that identifies you or can reasonably be linked to you. This may include:

• Contact details: name, billing address, delivery address, email address and phone number
• Payment information: payment method, billing details and transaction information (payments are processed securely by Shopify and payment providers; we do not store full card details)
• Account details: login information, password, preferences and settings
• Order information: items purchased, returns, exchanges, cancellations and shopping history
• Communications: messages you send to us, including customer service enquiries
• Device information: IP address, browser type, device type and network information
• Usage data: how you interact with our website, pages viewed and actions taken

 

2. How We Collect Your Information

We collect personal information:

• Directly from you when you place an order, create an account or contact us
• Automatically when you use our website (including cookies and similar technologies)
• From service providers such as Shopify, payment processors, delivery partners and analytics providers
• From marketing and advertising partners where permitted by law

 

3. How We Use Your Information

We use your personal information to:

• Process and fulfil orders, payments, deliveries, returns and exchanges
• Manage your account and provide customer support
• Communicate with you about orders or enquiries
• Improve and personalise your shopping experience
• Prevent fraud and ensure website security
• Send marketing communications (only where you have opted in or where legally permitted)
• Comply with legal and regulatory obligations

 

4. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep the website functioning properly
• Remember your preferences and shopping activity
• Analyse website traffic and performance
• Support marketing and advertising activities

You can control cookies through your browser settings. Some features of the website may not function properly if cookies are disabled.

 

5. How We Share Personal Information

We may share your personal information with:

• Shopify, who hosts our store and processes data on our behalf
• Payment providers, to securely process transactions
• Delivery and fulfilment partners, to deliver your orders
• Service providers, such as IT support, analytics, and customer service tools
• Marketing partners, to deliver relevant advertising where permitted
• Legal or regulatory bodies, where required by law
• Business transfers, such as a merger, acquisition or restructuring

Some of these third parties may process your data outside the UK. Where this occurs, we ensure appropriate safeguards are in place.

 

6. Shopify and Data Processing

Our store is hosted on Shopify. Shopify processes personal data to provide, secure and improve the Services.

Your data may be shared with Shopify and potentially other third parties in countries outside the UK. Shopify uses recognised safeguards such as Standard Contractual Clauses to protect international data transfers.

For more information, you can review Shopify’s privacy policy here:
https://www.shopify.com/legal/privacy

 

7. Marketing

We may send you marketing emails or messages if:

• You have given consent, or
• We are otherwise legally permitted to do so

You can opt out of marketing at any time using the unsubscribe link in emails or by contacting us directly. You will still receive service-related messages (such as order updates).

 

8. Data Retention

We retain personal information only as long as necessary, including:

• Order and transaction records: typically retained for 2 years for tax and accounting purposes
• Customer accounts: retained until deleted or inactive for a reasonable period
• Marketing data: retained until you unsubscribe or withdraw consent
• Support enquiries: typically retained for 12–24 months

 

9. Security

We take appropriate technical and organisational measures to protect your personal information. However, no system is completely secure, and we cannot guarantee absolute security of your data.

 

10. Your Rights (UK GDPR)

If you are in the UK, you have rights under data protection law, including:

• The right to access your personal data
• The right to request correction of inaccurate data
• The right to request deletion of your data
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent where applicable

To exercise these rights, contact us using the details below.

 

11. Complaints

If you are unhappy with how we handle your data, please contact us first so we can resolve the issue.

You also have the right to complain to the UK data protection authority:

Information Commissioner’s Office (ICO)
https://ico.org.uk/

 

12. Children’s Privacy

Our Services are not intended for children under the age of 16, and we do not knowingly collect personal data from children.

 

13. International Transfers

Your personal data may be transferred outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections.

14. Newsletter Sign-up

If you choose to subscribe to our newsletter, we will collect the personal information you provide, such as your email address.

The Crystal Maze Store does not currently send its own marketing emails. Instead, where you have chosen to subscribe, we will securely share your email address with Little Lion Entertainment Ltd., the operator of The Crystal Maze Experience, so they can send you news, exclusive offers, event updates and other marketing communications.

We only share your details for this purpose and only where you have given your consent. Once your details have been shared, Little Lion Entertainment Ltd. is responsible for the marketing communications they send to you and for processing your personal data in accordance with their own Privacy Policy.

You can withdraw your consent or unsubscribe from marketing communications at any time by using the unsubscribe link in any email you receive or by contacting the sender directly.

 

15. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

 

16. Contact Us

If you have any questions or wish to exercise your rights, please contact:

Email: store@the-crystal-maze.com
Address: Thesourcer.com Ltd, Unit 11 (First Floor), Apex Court, Woodlands, Bradley Stoke, Bristol, BS32 4JT
Data Controller: Thesourcer.com Ltd