Privacy policy

Last updated: June 2026

This Privacy Policy explains how JRMJ Ltd (trading as Naked Hockey) collects, uses, stores, and shares your personal data when you visit or make a purchase from www.nkdhockey.com.

JRMJ Ltd is registered in Northern Ireland. Our registered office is 34-36 Bedford Street, Belfast, BT2 7FF, United Kingdom. You can contact us at team@nkdhockey.com.

As a Northern Ireland business selling to customers in the United Kingdom and the European Union, we operate under both UK GDPR (enforced by the Information Commissioner's Office) and EU GDPR (enforced by the relevant EU member state supervisory authority, principally the Irish Data Protection Commission for customers in the Republic of Ireland).

1. Personal data we collect

Data you provide directly

When you place an order or create an account, we collect your name, billing and shipping address, email address, phone number, and payment information. Payment card data is processed directly by our payment provider and we do not store card numbers on our systems.

When you contact us by email or through the site, we collect the content of that communication and your contact details.

If you sign up to our marketing emails or SMS communications, we collect your email address or phone number and record your consent.

Data we collect automatically

When you visit our site, we automatically collect certain technical data including your IP address, browser type, operating system, referring URLs, pages viewed, and time spent on the site. We collect this data using cookies, log files, web beacons, tags, and pixels.

Data from third parties

We may receive data about you from advertising platforms such as Meta (Facebook and Instagram) where you have interacted with our advertising, and from analytics providers.

2. Lawful basis for processing

Contract performance: We process your name, address, payment, and order information to fulfil orders you place with us, process payments, arrange shipping, and provide customer service. We cannot fulfil your order without this data.

Legal obligation: We retain certain financial and transactional records to comply with our obligations under tax and accounting law.

Legitimate interests: We use technical data collected automatically to improve our website, detect fraud, and assess the performance of our marketing. We may send marketing communications to existing customers about products similar to those they have purchased, where we have assessed that our legitimate interest is not overridden by your interests or rights. You can opt out of this at any time.

Consent: Where we send marketing communications to new subscribers, or use non-essential cookies, we do so on the basis of your consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

3. How we use your personal data

We use your personal data to:

Process and fulfil your orders, including payment processing, shipping, and order confirmation.

Communicate with you about your orders, including delivery updates and responses to your enquiries.

Send you marketing communications about our products and offers, where you have consented or where we have a legitimate interest in doing so as an existing customer.

Detect and prevent fraud and other unlawful activity.

Improve and optimise our website and marketing campaigns using analytics data.

Comply with our legal and regulatory obligations.

4. Third-party processors

We share your personal data with the following third parties who process it on our behalf or for their own purposes as described. We have data processing agreements in place with each processor where required.

Shopify Inc: We use Shopify to power our online store. Shopify processes your order and account data on our behalf. Shopify is a US-based company. Data transfers are covered by Standard Contractual Clauses. Shopify's privacy policy is available at shopify.com/legal/privacy.

Google LLC: We use Google Analytics to understand how customers use our site. Google processes anonymised usage data. You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout. Google is a US-based company. Data transfers are covered by Standard Contractual Clauses. Google's privacy policy is available at policies.google.com/privacy.

Meta Platforms Inc: We use Meta's advertising tools, including the Meta Pixel, to measure the performance of our advertising on Facebook and Instagram and to serve relevant advertising to users. Meta processes data about your interactions with our site and advertisements. Meta is a US-based company. Data transfers are covered by Standard Contractual Clauses. Meta's privacy policy is available at facebook.com/privacy/policy.

Klaviyo Inc: We use Klaviyo to manage and send our email and SMS marketing communications. Klaviyo processes your contact details and purchase history on our behalf. Klaviyo is a US-based company. Data transfers are covered by Standard Contractual Clauses. Klaviyo's privacy policy is available at klaviyo.com/legal/privacy-notice.

Pandectes: We use Pandectes to manage cookie consent on our site. Pandectes processes records of your consent preferences and the date and time consent was given or withdrawn. This data is retained to demonstrate compliance with our consent obligations under UK GDPR and EU GDPR. Cookie preferences can be managed at any time via the consent banner on our site. Our full cookie information is published at nkdhockey.com/policies/privacy-policy. Pandectes' own privacy policy is available at pandectes.io.

Shipping carriers: We share your name and delivery address with our shipping partners to fulfil your order. The specific carrier used will depend on your location and chosen shipping method.

We may also disclose your personal data to law enforcement or regulatory authorities where required by law, or to protect our legal rights.

5. International data transfers

We are based in Northern Ireland and your data may be transferred to and processed in countries outside the UK and the European Economic Area, including the United States, where our third-party processors operate.

For transfers from the UK: we rely on the UK Government's adequacy regulations and, where no adequacy decision applies, on Standard Contractual Clauses approved by the ICO.

For transfers from the EU: the UK currently benefits from an EU adequacy decision, meaning transfers of personal data from the EU to the UK are permitted without additional safeguards. For onward transfers to the US and other third countries, we rely on Standard Contractual Clauses approved by the European Commission.

6. Data retention

We retain your personal data for the following periods:

Order and transaction data: seven years from the date of the order, to comply with our tax and accounting obligations.

Account data: for as long as your account remains active, and for two years following your last interaction with us if your account becomes inactive.

Marketing contact data: until you unsubscribe or withdraw consent, at which point we will suppress your details rather than delete them entirely, to ensure we do not contact you again in error.

Website analytics data: in anonymised form, for up to 26 months.

Customer service communications: two years from the date of the last communication.

7. Your rights

Depending on your location, you have the following rights in relation to your personal data.

UK residents have the following rights under UK GDPR: the right to access your personal data; the right to rectification of inaccurate data; the right to erasure in certain circumstances; the right to restrict processing; the right to data portability; the right to object to processing based on legitimate interests or for direct marketing; and rights relating to automated decision-making and profiling.

EU residents have the same rights under EU GDPR, enforceable against us in your member state.

To exercise any of these rights, please contact us at team@nkdhockey.com. We will respond within one month. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with a supervisory authority:

UK residents: Information Commissioner's Office, ico.org.uk, 0303 123 1113.

Republic of Ireland residents: Data Protection Commission, dataprotection.ie.

Other EU residents: your national data protection supervisory authority.

8. Cookies

We use essential cookies to operate our site, and non-essential cookies for analytics and advertising purposes. Non-essential cookies are only placed with your consent. You can manage your cookie preferences at any time using the cookie consent tool provided by Pandectes, which is accessible via the cookie settings banner on our site. You can also adjust your browser settings to refuse cookies, though this may affect the functionality of the site.

The cookies we use fall into the following categories:

Essential cookies: Required for the site to function. These include session cookies, shopping cart cookies, and security cookies. These cannot be disabled.

Analytics cookies: Used to understand how visitors interact with our site, including pages visited and time spent. We use Google Analytics for this purpose.

Marketing cookies: Used to track visits to our site from advertising platforms and to serve relevant advertising. We use the Meta Pixel for this purpose.

Preference cookies: Used to remember your settings and preferences, including your cookie consent choices and currency selection.

You can withdraw or adjust your consent at any time by clicking the cookie settings option in the footer of our site.

9. Children

Our site is not directed at children under the age of 16 and we do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. Your continued use of the site after any update constitutes acceptance of the revised policy.

11. Contact

JRMJ Ltd trading as Naked Hockey
34-36 Bedford Street, Belfast, BT2 7FF, United Kingdom
team@nkdhockey.com