Privacy Policy

Last updated 13th September 2026

This Privacy Policy explains how CCO Sport Ltd (“us”, “we”, or “our”) collects, uses, stores and shares personal data when you use our website and associated services (the “Service”).

CCO Sport Ltd is registered in Scotland under company number SC885763, with registered office at Office 371, 18 Young Street, Edinburgh, United Kingdom, EH2 4JB.

CCO Sport Ltd is the data controller for the personal data described in this Privacy Policy.

Personal Data We Collect

Depending on how you interact with our Service, we may collect the following types of personal data:

Identity and contact data: including your name, email address, postal address and telephone number.
Order and transaction data: including products purchased, order numbers, order values, delivery details, returns and cancellation requests.
Payment data: payment information processed through our payment providers. We do not store full card numbers on our servers.
Account data: where you create an account, this may include your username, password, order history and preferences.
Technical and usage data: including IP address, browser and device information, pages visited, dates and times of visits and referring URLs.
Marketing and communications data: including your communication preferences and interactions with marketing emails and customer service communications.

How We Collect Your Data

We may collect personal data directly from you when you place an order, create an account, subscribe to marketing communications, contact us, or submit reviews, comments or feedback.

We may also collect information automatically through cookies and similar technologies and receive information from third parties such as payment providers, delivery carriers, analytics providers and advertising providers where permitted by law and your choices.

How and Why We Use Your Data

We may use your personal data for the following purposes:

To process and fulfil orders, including delivery, returns, refunds and customer support. Legal basis: performance of a contract.
To manage your account and provide access to order history and saved details. Legal basis: performance of a contract.
To communicate with you about orders, deliveries, returns and related matters. Legal basis: performance of a contract and legitimate interests.
To send marketing communications where you have opted in. Legal basis: consent. You may unsubscribe at any time.
To improve our Service and products, analyse usage and prepare reports. Legal basis: legitimate interests, subject to your cookie choices where required.
To prevent and detect fraud and protect the security of our Service. Legal basis: legitimate interests and, where necessary, legal obligation.
To comply with legal obligations, including tax, accounting and consumer-law requirements. Legal basis: legal obligation.

Who We Share Your Data With

Where necessary, we may share personal data with organisations that help us operate our Service, including:

Payment processors, including Shopify Payments, Stripe, PayPal, Apple Pay and Google Pay where used.
Delivery carriers, including Royal Mail and other couriers.
Ecommerce and hosting providers, including Shopify Inc.
Analytics and advertising providers, including Google and Meta, where you have consented or where otherwise permitted by law.
Customer support and email service providers.
Professional advisers, including accountants and lawyers, where required.
Law enforcement authorities, regulators or other parties where required by law or necessary to protect rights and safety.

We require relevant service providers to protect personal data and process it in accordance with applicable law and our instructions where they act as data processors.

International Transfers

Some of our service providers may process personal data outside the United Kingdom, including in the United States and European Economic Area.

Where required, we use appropriate safeguards for international transfers, including UK adequacy regulations, the UK International Data Transfer Agreement and/or the UK Addendum to the EU Standard Contractual Clauses.

You can request further information about international transfers by contacting [email protected].

How Long We Keep Your Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, accounting and reporting requirements.

Order and transaction data: generally up to 6–7 years after your last purchase.
Account data: while your account remains active and normally for up to 3 years afterwards, unless deletion is requested earlier and retention is not legally required.
Marketing data: until you withdraw consent or following a reasonable period of inactivity, normally 2–3 years.
Technical and usage data: generally up to 26 months for analytics data, or as otherwise stated in our Cookie Policy or consent tool.

Your Data Protection Rights

Under UK GDPR, you may have rights to access, correct, erase or restrict the processing of your personal data, object to certain processing, or receive a portable copy of your personal data.

Where we rely on consent, you may withdraw your consent at any time, including consent for direct marketing.

To exercise your data protection rights, please contact [email protected]. We normally respond within one month, subject to any lawful extension.

You also have the right to make a complaint to the UK Information Commissioner’s Office if you are unhappy with how we handle your personal data.

Automated Decision-Making and Fraud Prevention

We may use automated fraud-screening tools, including tools provided by Shopify and payment providers, to assess potential fraud risk. This may affect whether an order is accepted or cancelled.

We use this processing to protect our business, customers and payment systems. We do not use solely automated decision-making that produces legal or similarly significant effects for marketing purposes without your consent.

Children’s Privacy

Our Service is not intended for children under the age of 16 and we do not knowingly collect personal data from children under 16. If we become aware that such data has been collected without appropriate consent, we will take reasonable steps to delete it.

Security of Your Data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

Links to Other Websites

Our Service may contain links to websites that are not operated by us. We recommend reviewing the privacy policy of every third-party website you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of third-party websites or services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be published on our Service with an updated “Last updated” date.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at [email protected] or [email protected].

CCO Sport Ltd
Office 371, 18 Young Street
Edinburgh, United Kingdom
EH2 4JB