Privacy Policy
Last updated on 13 July 2026
This Privacy Policy explains how Neklatura (“we”, “us”, “our”) collects and uses personal data when you
use neklatura.org or rent games from us. We process personal data in line with the UK GDPR, the
Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025), and the Privacy and
Electronic Communications Regulations 2003 (PECR).
Data Controller
Neklatura is the data controller for the personal data described in this policy.
Contact information
For any privacy question or request, email info@neklatura.org
1 St Peter’s Square, Manchester, M2 3AE, United Kingdom
+44 161 850 37 24
Personal data we collect
Depending on how you use our service, we may collect:
Rental order data: the games rented, rental periods, dates, order reference, prices, and deposit
details.
Customer contact information: name, email address, telephone number, and address.
Collection or delivery information: delivery address, collection preferences, and tracking references.
Payment and transaction information: payment confirmations and deposit records. Card payments are processed by our payment provider; we do not store full card numbers.
Customer service communications: emails and messages about rentals, returns, extensions, damage, or complaints.
Contact form data: the details you submit through our contact form.
Technical and usage data: IP address, device and browser information, and site usage collected via cookies and similar technologies (see below).
Customer contact information: name, email address, telephone number, and address.
Collection or delivery information: delivery address, collection preferences, and tracking references.
Payment and transaction information: payment confirmations and deposit records. Card payments are processed by our payment provider; we do not store full card numbers.
Customer service communications: emails and messages about rentals, returns, extensions, damage, or complaints.
Contact form data: the details you submit through our contact form.
Technical and usage data: IP address, device and browser information, and site usage collected via cookies and similar technologies (see below).
Legal bases for processing
We rely on the following legal bases under the UK GDPR:
Performance of a contract — to take and fulfil rental orders, arrange collection or delivery, manage
deposits, extensions, returns, and refunds.
Legal obligation — to keep tax, accounting, and consumer-law records.
Legitimate interests — to run and secure our business, prevent fraud and loss, recover games or proportionate charges, and improve our service, provided these interests are not overridden by your rights.
Consent — for optional electronic marketing and for any non-exempt cookies, which you can withdraw at any time.
Legal obligation — to keep tax, accounting, and consumer-law records.
Legitimate interests — to run and secure our business, prevent fraud and loss, recover games or proportionate charges, and improve our service, provided these interests are not overridden by your rights.
Consent — for optional electronic marketing and for any non-exempt cookies, which you can withdraw at any time.
Cookies and similar technologies
We use cookies to make the site work, remember preferences, understand usage, and (only with your
consent) support marketing. Under PECR as amended by the Data (Use and Access) Act 2025 (in force
5 February 2026), strictly necessary cookies and certain low-risk analytics and functionality cookies do
not require consent, but we still tell you about them and offer a free opt-out. Advertising and cross-
site tracking cookies require your prior consent. Full details are in our Cookie Information section
following the Terms of Service.
Website analytics
We use analytics to understand how visitors use the site so we can improve it. Where analytics is used
solely for aggregate statistics and does not significantly affect you, it may operate on an opt-out basis
under the amended PECR rules; you can opt out at any time.
Electronic marketing communications
We only send marketing emails where you have consented, or where you are an existing customer
and we are contacting you about similar rental services (the “soft opt-in” permitted under PECR).
Every marketing message includes an easy unsubscribe link, and you can opt out at any time.
Data retention
We keep personal data only as long as necessary:
Rental and transaction records: normally 6 years to meet tax and accounting obligations.
Customer service and complaint records: normally up to 2 years after resolution.
Marketing consent records: until you unsubscribe, then a suppression record to honour your choice.
Contact form enquiries that don’t lead to a rental: normally up to 12 months.
Customer service and complaint records: normally up to 2 years after resolution.
Marketing consent records: until you unsubscribe, then a suppression record to honour your choice.
Contact form enquiries that don’t lead to a rental: normally up to 12 months.
Data sharing
We share personal data only where needed to run the service — for example with couriers to deliver
and collect games, and with our payment provider to take payment. We do not sell your personal
data. We may disclose data where required by law or to establish, exercise, or defend legal claims.
Service providers and processors
We use trusted providers for payment processing, delivery, website hosting, and email. These act as
our processors under written contracts requiring appropriate security and lawful processing on our
instructions.
International data transfers
We aim to keep personal data within the UK. Where a provider processes data outside the UK, we
ensure appropriate safeguards are in place — such as UK adequacy regulations or the ICO’s
International Data Transfer Agreement — consistent with the data protection test introduced by the
Data (Use and Access) Act 2025.
Data security
We use appropriate technical and organisational measures — including access controls, encryption in
transit, and secure payment processing — to protect personal data against loss, misuse, or
unauthorised access.
Your data protection rights
Under the UK GDPR you have the right to:
– be informed about how we use your data;
– access a copy of your data;
– have inaccurate data corrected;
– have data erased in certain circumstances;
– restrict or object to certain processing;
– data portability;
– withdraw consent at any time;
– object to direct marketing.
To exercise any right, email info@neklatura.org. We normally respond within one month; this may be extended for complex requests, and the clock may pause where we reasonably need more information to identify your request, as provided under the Data (Use and Access) Act 2025.
– be informed about how we use your data;
– access a copy of your data;
– have inaccurate data corrected;
– have data erased in certain circumstances;
– restrict or object to certain processing;
– data portability;
– withdraw consent at any time;
– object to direct marketing.
To exercise any right, email info@neklatura.org. We normally respond within one month; this may be extended for complex requests, and the clock may pause where we reasonably need more information to identify your request, as provided under the Data (Use and Access) Act 2025.
Children's privacy
Our service is intended for adults aged 18 or over. We do not knowingly collect personal data from
children. If you believe a child has provided us with data, please contact us and we will delete it.
Automated decision-making
We do not make decisions producing legal or similarly significant effects about you based solely on
automated processing.
Policy updates
We may update this policy to reflect changes in our service or the law. The “last updated” date shows
the current version. Significant changes will be highlighted on this page.
Complaints procedure
If you’re unhappy with how we’ve handled your personal data, please contact us first at
info@neklatura.org. In line with the complaints requirements that took effect on 19 June 2026 under
the Data (Use and Access) Act 2025, we will acknowledge your complaint and respond within the
statutory timeframe.
If you remain dissatisfied, you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO):
If you remain dissatisfied, you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO):
Website: ico.org.uk
Helpline: +443031231113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF