privacy policy

Last updated: 11th September 2025

 

Controller & contact details

YSB International Ltd trading as The Breakout Hack is the data controller for the Site.

Contact: hello@thebreakouthack.co.uk.

Address: YSB International Limited, 6B Upper Water Street, Newry, Co. Down, BT34 1DJ.

For privacy questions you can also contact our Data Protection lead at hello@thebreakouthack.co.uk.

 

Scope

This Privacy Policy explains how we collect, use, share and protect personal data when you use the Site, buy products, sign up to marketing or otherwise interact with us.

1. Personal data we collect

We collect the types of personal data you provide and data generated when you use our Site:

a) Device & usage data: IP address, browser type, device identifiers, pages viewed, referring site, cookie identifiers, browsing behaviour.

b) Order information: name, email, billing & shipping addresses, payment details (handled by our payment processors), order history.

c) Marketing & profile data: email and marketing preferences, interactions with our emails and ad platforms.

d) Customer service data: messages you send to us, returns or disputes.

We do not knowingly collect personal data from children under 16; if we discover such data we will delete it. 

 

 

2. Lawful basis for processing (UK GDPR)

We process personal data on the following lawful bases (as applicable):

  • Performance of a contract: to process and fulfil orders, deliver goods and manage payments.
  • Consent: where you have given consent (for example, email marketing and non-essential cookies). You can withdraw consent at any time.  
  • Legitimate interests: to prevent fraud, improve our Site and services, and carry out analytics (we balance these interests with your rights).
  • Legal obligations: to comply with tax, accounting and record-keeping laws.

 

We shall record which lawful basis we rely on for each processing activity and can provide details on request.

 

3. How we use your personal data (purposes)

We use your data to:

  • Process and fulfil orders, manage refunds and returns. (Contract)
  • Communicate order updates, customer service requests and safety notices. (Contract / Legitimate interest)
  • Send marketing communications where you have consented. (Consent)
  • Personalise your experience, perform analytics and measure ad performance. (Legitimate interest / Consent for targeted ads)
  • Detect and prevent fraud. (Legitimate interest)
  • Comply with legal obligations (tax, accounting). (Legal obligation)

 

4. Sharing & processors

We share personal data with authorised third-party service providers such as Shopify (store platform), our payment processors, Klaviyo (email marketing), Google (analytics) and delivery partners. These processors act under contract and only process data on our instructions. Where providers process data outside the UK we will ensure appropriate safeguards are in place (for example standard contractual clauses or adequacy mechanisms) or rely on an applicable exception. For more information or a list of subprocessors, contact hello@thebreakouthack.co.uk. 

 

5. International transfers

Some processors may transfer data outside the UK (for example US-based providers). Where transfers occur we will ensure they are compliant with UK GDPR by relying on an adequacy decision, appropriate safeguards (e.g. SCCs), or a permitted derogation. Contact hello@thebreakouthack.co.uk for details of the safeguards we use.  

 

6. Cookies & tracking technologies (consent & CMP)

We use cookies and similar technologies. Non-essential cookies (analytics and advertising) are set only with your explicit consent via our cookie preference tool. Essential cookies necessary for operation will be set without consent. You can change preferences at any time via the cookie preference link on the Site. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

 

7. Marketing & advertising (behavioural advertising)

We use email marketing and may create advertising audiences by sharing hashed identifiers with advertising partners. You may opt out of marketing at any time via unsubscribe links or by contacting hello@thebreakouthack.co.uk. Where required by law we will ask for consent for targeted advertising.

 

8. Data retention

We retain Order Information for as long as required to meet legal and tax obligations (generally up to 6 years), and for as long as needed to provide customer service and resolve disputes. Marketing data will be retained while you remain subscribed or until you withdraw consent. We will securely delete or anonymise personal data when it is no longer required.

 

9. Your rights (UK/EU residents)

If you are located in the UK/EU you have rights under the UK GDPR, including:

  • Right of access — ask what data we hold.
  •  Right to rectification — correct inaccurate data.
  • Right to erasure — request deletion (subject to legal obligations).
  • Right to restrict processing — limit use of your data.
  • Right to data portability — receive your data in a portable format.
  • Right to object — to direct marketing and profiling.
  • Right to withdraw consent — where processing is based on consent.

 

To exercise your rights, contact hello@thebreakouthack.co.uk. You may also complain to the Information Commissioner’s Office (ICO). 

 

10. Security

We use industry standard technical and organisational measures to protect personal data. No system is 100% secure; if a breach affecting you occurs we will notify you and the ICO where required.

 

11. Changes to this Policy

We may update this Privacy Policy. The “Last updated” date at the top will show the revision date. If changes are material we will notify you by email (where possible) or via a notice on our Site.

 

12. Contact & complaints

If you have questions or a complaint about this Policy or our data handling, contact: hello@thebreakouthack.co.uk. You can also raise a complaint with the ICO (https://ico.org.uk)