ReviveByte

Privacy Policy

Last updated: May 2026

1. Who We Are

ReviveByte is a trading division of Richardson Pacific Limited (Company No. 11277808), registered in England and Wales. Our registered office is at 124 City Road, London, England, EC1V 2NX. Richardson Pacific Limited ("we", "us", "our") is the data controller responsible for your personal data.

2. What Data We Collect

When you create an account or sell items to us, we may collect:

  • Name, email address, and phone number
  • Postal address (for shipping label generation)
  • PayPal email address or bank account details (sort code and account number) for payment
  • Order history and transaction records
  • Technical data such as IP address, browser type, and device information

3. How We Use Your Data

We use your personal data to:

  • Process your sell orders and generate shipping labels via Royal Mail or DHL Express (chosen per order based on value)
  • Send payment to you via PayPal or bank transfer
  • Communicate with you about your orders and account
  • Comply with legal and regulatory obligations
  • Improve our website and services

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following bases:

  • Contract: Processing is necessary to fulfil our purchase agreement with you
  • Legal obligation: We are required to retain certain records for tax and accounting purposes
  • Legitimate interest: To improve our services and prevent fraud

5. Data Sharing

We share your data only with the following processors and service providers, all of which are bound by data-processing agreements:

  • Royal Mail (Click & Drop): name, address, phone, parcel weight, and item reference — used to generate prepaid shipping labels for standard-value orders.
  • DHL Express: name, address, phone, parcel weight, and item reference — used to generate prepaid shipping labels for higher-value orders that require enhanced insurance cover.
  • PayPal: your PayPal email — used to issue payment.
  • Supabase (database & authentication provider, EU-hosted): encrypted storage of account data, profile, orders, and authentication sessions.
  • Resend (transactional email): your email address and order context — used to send order confirmations, label emails, status updates, and password resets.
  • Tidio (live-chat widget, only loaded after you accept non-essential cookies): name, email (if you provide them), chat content, IP, and basic device data — used to operate the in-page chat.
  • Vercel (hosting): minimal request logs (IP, user-agent, path) for security and operational diagnostics.

We do not sell your personal data to any third party.

6. Data Retention

We retain your personal data for as long as your account is active and for a further 6 years after your last transaction to comply with UK tax and accounting requirements. You may request deletion of your account at any time, subject to these legal obligations.

Blocked accounts: if your account is suspended or terminated for fraud prevention reasons (for example, repeated counterfeit or stolen Items, abusive behaviour, or chargebacks), we retain limited identifying information — including name, address, phone, email, and where applicable PayPal email or last 4 digits of bank account — on a fraud-prevention list for as long as is reasonably necessary. This is processed under our legitimate interest in preventing repeat fraud against the business. You may request review of inclusion on this list at any time.

7. Your Rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal retention requirements)
  • Object to or restrict processing of your data
  • Data portability — receive your data in a structured, machine-readable format
  • Lodge a complaint with the Information Commissioner's Office (ICO)

8. Cookies

We use cookies in two categories:

  • Strictly necessary cookies — set by Supabase to maintain your authenticated session and by our consent banner to remember your cookie choice. These are exempt from consent under PECR / UK GDPR.
  • Functional cookies (with your consent) — set by our live-chat provider Tidio when you accept non-essential cookies via our banner. These let you chat with us in-page; declining means the chat widget will not load.

We do not use advertising or cross-site tracking cookies. You can change your cookie choice at any time by clearing the rb_cookie_consent_v1 entry in your browser’s site data and reloading the page.

9. Contact Us

For any data protection enquiries, please contact us at [email protected] or write to us at 124 City Road, London, England, EC1V 2NX.