Privacy Policy

Owner and Data Controller

Types of Data collected

Among the types of Personal Data that this website collects, by itself or through third parties, there are: first name; last name; email address; phone number; billing address (street, town or city, county, postcode, country); password (stored only in encrypted, hashed form); order details (products, amounts, date, payment method); the delivery name, address and phone number (for items sent by post or courier); the mobile number to be topped up (for direct top-ups); details of a device you bring to us for repair or unlocking (make, model and, for unlocking, the IMEI number); messages you send us through live chat or email; Trackers; Usage Data (such as IP address, browser and device type, pages visited, the website that referred you).

Complete details on each type of Personal Data collected are given in the sections below. Personal Data is either provided by you (for example at checkout or at our counter) or, in the case of Usage Data, collected automatically when you use the website.

The data asked for at checkout is needed to deliver your order. If you do not provide it, we cannot complete the order. Fields marked “optional” can be left empty.

If you give us Personal Data about someone else – for example the mobile number of a relative you are topping up – you confirm that you have their permission to do so.

Mode and place of processing the Data

Methods of processing

We take appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of the Data. The whole website uses an encrypted HTTPS connection, passwords are stored hashed and never in plain text, and card details are entered directly into the payment provider’s secure fields – we never see or store your full card number.

The Data is processed using computers and IT tools, following procedures strictly related to the purposes described here. Besides the Owner, the Data may be accessible to the external service providers named in this policy (payment, delivery, hosting and analytics providers), acting as Data Processors or as independent controllers. An up-to-date list of these parties may be requested from the Owner at any time.

Place

The website and its database are hosted on servers in the United Kingdom. Some of the service providers named below may process Data outside the UK (for example in the European Union or the United States). Where this happens, the transfer is protected by safeguards recognised under UK data protection law, such as UK adequacy regulations or the UK International Data Transfer Agreement / Addendum. Details are given for each service below.

Retention time

• Orders and invoices: 6 years from the end of the financial year in which the order was placed, as required by UK tax law.
• Customer account: until you ask us to delete it (order records are still kept for the tax period above).
• Repair records: for as long as the repair warranty runs, then deleted unless needed for the tax records above.
• Emails and chat messages you send us: up to 2 years after our last contact.
• Server logs: up to 90 days.
• Identity documents (only if we ask for them to verify an order): deleted once the check is complete, and no later than 30 days.

The purposes of processing

The Data concerning you is collected to allow us to provide our service, meet our legal obligations, respond to enforcement requests, protect our rights and interests (or those of our Users or third parties), and detect fraudulent or malicious activity, as well as for the following purposes: Handling payments; Processing and delivering orders; Repairs and services in our shop; Registration and authentication; Contacting the User; Managing support and contact requests; Interaction with live chat platforms; Platform services and hosting; Traffic source statistics; Analytics; Security and fraud prevention.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Handling payments

Payment services let us take payments by debit or credit card, PayPal and Google Pay. The Data used for the payment is collected directly by the payment provider. We only receive confirmation of the payment, the payment method and limited information such as the payer’s name and email address.

Processing and delivering orders

Repairs and services in our shop

Registration and authentication

Contacting the User

Managing support and contact requests

Platform services and hosting

Traffic source statistics

Analytics

Security and fraud prevention

Cookie Policy

This website uses the following cookies and similar Trackers:

Analytics cookies are used for statistics only, as allowed by the Data (Use and Access) Act 2025; click “Reject” on the cookie bar to turn them off. To change your choice later, use the “Cookie settings” link at the bottom of any page. Essential cookies are needed for the basket, checkout and account to work. You can block or delete cookies in your browser settings, but the shop will not work properly without the essential ones.

Further information for Users

Legal basis of processing

We process Personal Data relating to you on one or more of these legal bases under the UK General Data Protection Regulation (UK GDPR):

• Contract: processing is needed to take and deliver your order, carry out a repair and run your customer account.
• Legal obligation: we must keep accounting and tax records.
• Legitimate interests: preventing fraud, keeping the website secure, answering your questions, and understanding which channels bring us orders and how the website is used (Google Analytics statistics – you can object by clicking “Reject” on the cookie bar).

Your rights under the UK GDPR

You have the right to:

• Access your Data and receive a copy of it.
• Correct Data that is inaccurate or incomplete.
• Delete your Data, unless we must keep it, for example for tax purposes.
• Restrict the processing of your Data in certain cases.
• Object to processing based on our legitimate interests, and to direct marketing at any time.
• Data portability: receive your Data in a structured, commonly used format and have it sent to another company.
• Complain to the Information Commissioner’s Office (ICO), the UK data protection authority: ico.org.uk/make-a-complaint, telephone 0303 123 1113. We would appreciate the chance to deal with your concern first.

How to exercise these rights

Email info@mobilelinks.co.uk or speak to us in the shop. Requests are free of charge and we will answer within one month. We may ask you to confirm your identity before acting on a request.

Additional information about Data collection and processing

Legal action

Your Personal Data may be used by the Owner in court or in the steps leading to possible legal action arising from improper use of this website or its services, and may be disclosed to public authorities when the law requires it.

Automated decisions

We do not make decisions about you based solely on automated processing.

Children

This website is not aimed at children under 13 and we do not knowingly collect their Personal Data.

Changes to this privacy policy

We may update this policy, for example when we add a new payment method or service. The date at the top shows when it was last changed. Please check this page from time to time.

Definitions

Personal Data (or Data): any information that directly or indirectly identifies a living person.

Usage Data: information collected automatically through this website, such as IP address, browser, device, pages visited and time of visit.

User: the person using this website or our shop.

Data Controller (or Owner): the person or company that decides why and how Personal Data is processed – here, JDF Tech LTD, trading as Mobile Links.

Data Processor: a company that processes Personal Data on behalf of the Data Controller.

Tracker: any technology, such as a cookie, that records information on your device.