YOUR INFORMATION

Privacy notice

Callum Sharpe trading as Sharper Sales is responsible for the personal information described here. Address: 5 Silk Mews, Kentford, Newmarket, CB8 7GE, United Kingdom. For privacy requests, email privacy@sharpersales.uk.

What we collect and why

To fulfil an order we use your name, email, phone number, delivery address, purchased items and payment status. This is necessary to perform our contract with you. Stripe processes payment details; we receive transaction references and status, not your full card number.

For an account we store your email, profile details and a hashed password. For support or a return we store your message, order reference and any information you choose to provide, to help you and keep a record of the outcome. Our legitimate interests include preventing fraud, keeping the website secure and handling enquiries. We retain necessary transaction records to meet legal and tax obligations.

For console trade-ins, we use the details you submit to assess your device, contact you about the offer, prepare prepaid postage and track the trade. This can include your contact and collection address, console model, condition, included items and photos of extras where provided. Please do not upload identity documents, bank details or unrelated personal information into product or support photos.

Age checks for restricted games

When buying games rated PEGI 12, 16 or 18, our store requires the buyer to be 18 or over and signed in to a confirmed account. Ordinary items do not require an identity check. When the age-check service is available, Stripe Identity collects your photo ID and selfie directly and checks that they match. Stripe explains its identity and biometric processing before you continue; see Stripe’s privacy policy. Do not start this check if you are under 18, and do not send identity documents through support or product-photo uploads.

Our server uses the verified date of birth to determine whether you are 18 or over, but does not keep the date of birth or copies of your ID or selfie in our store database. We retain the account-linked result, Stripe verification reference and check timestamps so you do not have to repeat the check for each restricted purchase, and to help prevent age-restricted sales to minors. Stripe retains verification information under its service settings and privacy terms. Contact privacy@sharpersales.uk if a result is wrong or you wish to exercise your data rights. Removing your verification result may require a new check before another restricted purchase.

Who helps run the service

We use Stripe for payments and refunds, Resend for transactional emails, Royal Mail for delivery, and Sites hosting with Cloudflare-backed database and file storage for website operations. Website conversations are saved in our support system and notifications are sent through Resend. Direct email replies are handled through our IONOS business mailbox. Private conversation links expire after one year; contact us for a new link if needed. Our website fonts are served by the same website hosting, without a separate connection to Google Fonts. If you separately agree to advertising measurement, Google or Meta also receives the limited information described below. Providers receive only the information needed for their service and may process it outside the UK under their applicable safeguards and terms. We do not sell customer information.

Customer reviews

Reviews are optional. With your consent, we publish your chosen display name, rating, title, review text and dates. Any Sharper Sales reply is also public. We keep your transaction reference and email privately to verify eligibility and prevent duplicate or fake reviews, and keep a record of moderation decisions in our legitimate interests of running a trustworthy review service. We may send a neutral feedback invitation after delivery or a completed trade-in; it does not subscribe you to marketing. Eligible buyers may receive the advertised £2 partial refund for an honest review, regardless of rating; we label those reviews as incentivised. See the current offer terms.

Your private review link lasts 90 days and can be used to edit or withdraw your review. Essential session storage remembers it in that browser tab; the access-token record is hashed on the server. Request another link from the reviews page if needed. Withdrawing removes the review from public display. Account deletion does not automatically withdraw a separately submitted review: use your private link or contact us to request removal. Published reviews are kept while relevant; withdrawn or withheld records and verification links are reviewed on request and retained only as needed for abuse prevention, complaints or legal obligations. We do not publish your email, address or order/trade reference. See our review policy for the checks we apply and how to report a concern.

The Sharper Sales app

The native app uses the same store accounts, stock, orders, cash-in requests and support conversations as this website. We process your name, email, phone number, address, account identifier, purchases, console condition and included-item selections, and messages to run those services. Hosting and short-lived security controls may process connection information such as IP addresses to prevent abuse. Payment is handled by Stripe in a secure payment sheet; we do not store full card numbers in the app. Stripe handles payment and security information under its privacy policy.

The native customer app does not include Google or Meta advertising SDKs or our website's optional advertising measurement scripts. The website cookie choices below describe website browsing, not an app marketing opt-in. Payment-provider pages have their own security and storage behaviour. Native sign-in and interrupted-request recovery use the device's secure Keychain. Signing out removes the active credential and private payment-link shortcuts while retaining minimal retry identifiers to help prevent duplicate purchases.

Deleting your account

In the app, open Account while signed in, expand “Delete my account”, type DELETE and confirm. On the website, sign in to your profile and use “Delete my account”. This removes sign-in credentials and profile contact details, ends active sessions and removes private mobile response caches. Orders, cash-in transactions, refunds and other records needed for legal obligations, accounting or disputes remain subject to the retention rules below. Deleting your account is not a cancellation or refund request. If you cannot sign in, use password recovery or contact us for a verified deletion request.

Cookies and browser storage

Essential storage keeps your session signed in, remembers your shopping and sell baskets, non-sensitive quote selections for up to 24 hours and private order lookup details, and remembers your privacy choice. The installable web app also caches public assets. Clearing browser data may remove saved baskets and order shortcuts, but does not delete placed orders.

Optional first-party analytics is off until you choose to allow it. If allowed, we record a random visitor ID, page path, referring site and browser information to understand website usage. This includes when a quote is opened and when an estimate is shown after you confirm condition and included items. No name, address or contact details are included in those events.

Google Ads measurement is a separate, optional choice. When configured and you opt in, Google uses cookies, advertising click identifiers and connection information (such as IP address and browser details) to help us measure which ads lead to paid purchases. We send the merchandise value in GBP and an opaque transaction identifier to prevent duplicate counting. We do not send customer names, emails, addresses, private order links or enhanced-conversion data, and we disable advertising personalisation. Unpaid checkouts, test orders and ordinary visits to old orders do not count as purchases. Google is not loaded for this measurement before you agree.

Facebook and Instagram ad measurement is another separate, optional choice. If you opt in, the Meta Pixel uses Meta cookies, advertising click identifiers, connection and browser information, and limited shopping and trade-in events to measure our adverts. Those events can include product identifiers, prices, quantities, page views, category browsing, search result counts, basket views and additions, checkout starts, confirmed paid purchases, successfully submitted trade-in requests and successful enquiry submissions. Trade-in measurement contains an opaque request identifier and console count, not the offered amount as sales revenue. Search text, enquiry contents, customer names, emails, phone numbers, delivery addresses and private order links are not included, and we do not use advanced matching. Unpaid checkouts, test orders and ordinary visits to old orders do not count as purchases. Meta is not loaded before you agree.

With the separate Meta choice, our server also reports confirmed purchases through Meta’s Conversions API, so measurement does not depend on you returning from the payment screen. At checkout we save your consent version and time, Meta cookie/click identifiers where present, IP address and browser user agent. We share these with Meta only for eligible paid purchases, with product IDs, quantities, merchandise value in GBP and an opaque duplicate-prevention ID. We do not upload names, email addresses, phone numbers or delivery addresses, including hashed versions. Staff and test purchases are excluded. Existing choices made before this server-reporting update require renewed agreement for server reporting.

We remember privacy choices for up to 180 days. Google advertising click cookies are configured for up to 90 days; Meta controls the lifetime of its consented cookies under its policies. Our pending-checkout markers last at most 48 hours and duplicate-prevention markers expire after 180 days. Server-side browser/click identifiers are erased after acceptance, withdrawal or expiry; unsuccessful pending records expire within two days, with cleanup on the next shop/admin request. Minimal consent and delivery audit records remain with the order. These are separate from essential order access. Google and Meta may process consented measurement information outside the UK; see Google’s business data privacy information and Meta’s privacy policy for their processing and safeguards. You can withdraw any optional choice using “Privacy settings” in the footer. Withdrawal stops future browser measurement, cancels unsent server records associated with that browser’s consent key, and removes accessible measurement cookies; it cannot retract a request already in flight or undo processing that already took place. Contact us for requests concerning another browser or device. Declining does not affect shopping.

How long information is kept

We retain order, refund and associated financial records for up to six years where needed for accounts, legal obligations or disputes. Support records are reviewed when the enquiry is resolved and kept only as long as reasonably needed for that purpose. Account data is kept while the account is active unless you ask for deletion; deleting an account removes its profile details and sign-in credentials; records we must legally retain are kept separately. Analytics records older than 12 months are automatically removed when the site next processes analytics or reporting activity. Trade submission retry records are removed after seven days; they prevent an interrupted request from creating duplicate trades. The original trade and necessary transaction records remain. Expired sign-in and recovery credentials are also cleared; their expiry is enforced even before deletion. Backups may retain earlier records until the backup is replaced.

Your choices and rights

You may request access, correction, deletion, restriction or a portable copy of your information where applicable, and object to processing based on legitimate interests. Consent can be withdrawn without affecting earlier lawful use. We may need to verify your identity before responding, normally within one month. Some information cannot be erased immediately where it is needed for legal obligations or an ongoing dispute.

Order messages, not marketing

We send necessary order, dispatch, return and refund emails. Starting an unpaid checkout does not send an order-confirmation email. We do not enrol you in marketing when you shop or create an account.

Updated 31 October 2026.