Last updated: 4 October 2026

EJECT SYSTEMS respects your privacy and is committed to protecting personal information.

This Privacy Policy explains how EJECT SYSTEMS collects, uses, stores and shares personal data when you visit our store, place an order, contact us or subscribe to our mailing list.

We process personal data in accordance with applicable UK data-protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Electronic marketing and certain uses of cookies or similar technologies may also be subject to the Privacy and Electronic Communications Regulations 2003 (PECR).

1. WHO IS RESPONSIBLE FOR YOUR DATA?

For personal information where EJECT SYSTEMS decides why and how it is used, EJECT SYSTEMS acts as the data controller.

For privacy enquiries or requests relating to your personal information, contact:

EJECT SYSTEMS

2. PERSONAL INFORMATION WE MAY COLLECT

Depending on how you interact with EJECT SYSTEMS, we may collect:

• Your name

• Email address

• Billing and delivery information

• Order details and purchase history

• Transaction and payment-related information

• Messages submitted through our Contact form

• Newsletter subscription information

• Returns and refund information

• Information you voluntarily provide when communicating with us

• Technical information relating to use of the website, where provided by our ecommerce, security or website providers

We aim to collect only information reasonably necessary for the purpose for which it is being used.

Please do not send unnecessary sensitive personal information through our Contact form.

3. HOW AND WHY WE USE YOUR INFORMATION

We may use personal information to:

• Process and fulfil orders

• Arrange delivery

• Provide order confirmations and updates

• Manage returns and refunds

• Respond to customer enquiries

• Maintain transaction and accounting records

• Prevent and investigate fraud

• Protect our website and communication systems from abuse

• Comply with legal obligations

• Send marketing communications where permitted

• Operate and improve the EJECT SYSTEMS store

4. OUR LAWFUL BASES UNDER THE UK GDPR

The UK GDPR requires us to have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Contract

Where processing is necessary to enter into or perform a contract with you.

For example, we need your delivery information in order to send you a product you have purchased.

Legal obligation

Where we are required to process or retain information to comply with applicable law, including certain tax, accounting or regulatory requirements.

Legitimate interests

Where processing is reasonably necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• Operating and securing our store

• Providing customer support

• Preventing fraud

• Detecting spam or abuse

• Protecting EJECT SYSTEMS and its customers

• Maintaining appropriate business records

Where we rely on legitimate interests, we consider whether the processing is necessary and proportionate.

Consent

Where you have freely chosen to give us permission for a particular use of your personal information.

For example, we may rely on consent when you voluntarily subscribe to our marketing newsletter.

The ICO requires businesses to determine their lawful basis before using personal data and to explain that basis in their privacy information.

5. ORDERS AND PAYMENTS

Our online storefront is operated using Payhip.

When you place an order, your information may be processed to:

• Accept and fulfil your purchase

• Confirm your order

• Process payment

• Arrange delivery

• Provide customer support

• Process returns or refunds

• Prevent suspected fraud

Payments may be handled by third-party payment providers connected to our ecommerce platform.

EJECT SYSTEMS does not need to receive or store your complete payment-card details in order to fulfil your order.

Payment providers may process certain information under their own privacy policies and legal responsibilities.

6. CONTACT FORM

Information submitted through our Contact page will be used to deal with your enquiry.

This may include communications concerning:

• Existing orders

• Products or sizing

• Delivery

• Returns and refunds

• Collaborations

• Business enquiries

• General customer support

We may process and retain communications where reasonably necessary to detect or prevent:

• Spam

• Harassment

• Fraud

• Threats

• Automated abuse

• Malicious activity

• Attempts to interfere with our website

Where appropriate, this processing may be based on our legitimate interest in protecting EJECT SYSTEMS and users of our services.

Messages may be blocked or filtered where we reasonably believe our systems are being abused.

This will not be used to prevent customers from making genuine complaints or exercising their legal rights.

7. NEWSLETTER AND DIRECT MARKETING

You may choose to join the EJECT SYSTEMS mailing list.

Marketing communications may include:

• Product launches

• Restocks

• New systems or collections

• Offers and promotions

• EJECT SYSTEMS announcements

Where required, we will obtain your consent before sending electronic direct marketing.

Newsletter consent is separate from purchasing a product. You are not required to subscribe in order to place an order.

Consent must involve a genuine positive choice and cannot rely on a pre-ticked box.

You may unsubscribe at any time using the unsubscribe option contained in a marketing email or by contacting us.

If you unsubscribe, we may retain limited information on a suppression or “do not contact” list so that we can continue respecting your request.

The ICO specifically recommends maintaining records of opt-outs rather than simply deleting every trace of an unsubscribed address.

We will not sell your email address to third parties for their own marketing purposes.

8. WHO WE MAY SHARE INFORMATION WITH

Where necessary, personal information may be shared with organisations that help us operate EJECT SYSTEMS.

These may include:

• Payhip

• Payment processors

• Delivery and courier providers

• Email or newsletter providers

• Website and hosting providers

• Security and fraud-prevention services

• Professional advisers

• Tax or accounting services

• Regulators, courts or law-enforcement authorities where legally required

We only intend to share information where there is a legitimate reason for doing so.

Some third-party providers may act as processors on our behalf, while others may act as separate data controllers depending on the service they provide.

9. WE DO NOT SELL PERSONAL DATA

EJECT SYSTEMS does not sell your personal information.

We also do not provide personal information to unrelated organisations so that they can market their own products to you without an appropriate legal basis.

10. COOKIES AND SIMILAR TECHNOLOGIES

Our website and the third-party services used to operate it may use cookies or similar technologies.

These may be used for purposes such as:

• Essential website functionality

• Checkout functionality

• Security and fraud prevention

• Remembering preferences

• Website performance

• Analytics

Where UK law requires consent for a non-essential cookie or similar technology, it should not be placed or accessed until the required consent has been obtained.

11. HOW LONG WE KEEP PERSONAL INFORMATION

We will not retain personal information for longer than reasonably necessary for the purpose for which it was collected.

Different types of information may be retained for different periods.

For example:

• Order and transaction records may need to be retained to comply with tax, accounting or legal requirements

• Customer-service communications may be retained while an issue is being handled

• Records relating to fraud, disputes or abuse may be retained where reasonably necessary

• Newsletter information may be retained while you remain subscribed

• Limited suppression information may be retained after an unsubscribe request to ensure that we do not contact you again

When information is no longer required, we will aim to delete or anonymise it securely where appropriate.

12. INTERNATIONAL TRANSFERS

Some companies providing services to EJECT SYSTEMS may process information outside the United Kingdom.

Where UK data-protection law requires safeguards for an international transfer, we will rely on an appropriate lawful transfer mechanism or other recognised protection.

13. YOUR RIGHTS UNDER UK DATA-PROTECTION LAW

Depending on the circumstances, you may have the right to:

• Access personal information we hold about you

• Rectification of inaccurate or incomplete information

• Erasure of personal information in certain circumstances

• Restriction of processing in certain circumstances

• Object to certain processing

• Data portability for certain information

• Withdraw consent where we rely on consent

• Object to direct marketing

Some rights depend on the circumstances and are not absolute.

Withdrawing consent does not make processing that occurred before withdrawal unlawful.

To exercise a data-protection right, contact us using the details in this policy.

We may need to confirm your identity before fulfilling certain requests.

14. DIRECT MARKETING RIGHTS

You have the right to object to the use of your personal information for direct marketing.

If you unsubscribe or otherwise tell us to stop sending marketing covered by your request, we will stop that marketing as soon as reasonably possible.

The ICO states that withdrawing marketing consent must be as easy as giving it and that organisations must stop the affected marketing when consent is withdrawn.

15. SECURITY

We take reasonable organisational and technical measures to protect personal information against:

• Unauthorised access

• Loss

• Misuse

• Alteration

• Disclosure

• Destruction

However, no website or online service can guarantee absolute security.

You should never submit passwords, full payment-card information or other unnecessary confidential information through our Contact form.

16. DATA BREACHES

If a personal-data breach occurs, EJECT SYSTEMS will assess the incident and take appropriate action in accordance with applicable UK data-protection law.

Where legally required, this may include notifying the Information Commissioner’s Office and affected individuals.

17. COMPLAINTS

If you have concerns about how EJECT SYSTEMS has handled your personal information, please contact us first so that we can try to resolve the issue.

You also have the right to raise a concern with the:

Information Commissioner’s Office (ICO)

The ICO is the UK’s independent data-protection regulator.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy where our business operations, suppliers, technology or legal obligations change.

The latest version will be published on this page with an updated revision date.

19. CONTACT

For privacy enquiries or requests relating to your personal information:

EJECT SYSTEMS

Alternatively, use the Contact page on our website.

EJECT SYSTEMS // SYSTEM ACCESS PROTECTED.