Privacy policy

 

Authentic Mystery Kit Limited operates this e-commerce store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Authentic Mystery Kit Limited is a registered private company limited by shares, incorporated under the laws of Ireland with Company Registration Number (CRO) 805000, and having its registered office address at Creewood, Slane, Navan, Co. Meath, Ireland, C15CC6K.

For the purposes of applicable European Union data protection legislation (including the General Data Protection Regulation - GDPR), Authentic Mystery Kit Limited functions as the primary Data Controller of your personal information. Our e-commerce Services are powered by Shopify Inc., which operates as our data processor to safely transmit and process your information.

This Privacy Policy describes exactly how we collect, utilize, safeguard, and disclose your personal information when you visit, use, or complete a transaction within our Services, or otherwise communicate with our team. If a technical conflict arises between our general Terms of Service and this Privacy Policy, this document takes absolute legal precedence with respect to the collection, processing, and disclosure of your personal data. Please read this Privacy Policy carefully to understand our strict consumer data practices.

 

PERSONAL INFORMATION WE COLLECT AND PROCESS

When we utilize the term "personal information," we are referring to any data that directly identifies you or can reasonably be linked to your unique identity. Personal information does not include data that has been permanently de-identified or anonymized. Authentic Mystery Kit Limited collects and processes the following specific categories of personal information depending on how you interact with our Services:

Contact Details: Including your official name, physical billing address, verified shipping address, contact phone number, and direct email address.

Financial Information: Including credit card, debit card, or alternative payment account numbers, transaction details, selected forms of payment, and automated payment confirmations. All transaction metrics are securely encrypted via our primary payment gateways, and Authentic Mystery Kit Limited never directly stores or holds your raw card details.

Customer Account Information: Including your unique username, account password configurations, order history, and personal team exclusion settings.

Transaction Information: Including specific mystery kit tiers you view, items added to your shopping cart, completed purchases, size exchanges, returns, or plan cancellations.

Direct Communications: Including any customer support text, order notes, or diagnostic images you securely share when sending an inquiry to our support email.

Device Identifiers: Including your specific electronic IP address, hardware device metrics, browser profiles, and unique network connection identifiers.

Usage Information: Data regarding how, when, and for how long you navigate, browse, or interact with our digital storefront interface.

 

PERSONAL INFORMATION SOURCES

Authentic Mystery Kit Limited collects and processes personal data from three primary categorical sources, strictly in adherence to the lawful bases defined under the General Data Protection Regulation (GDPR):

Directly From You (Performance of a Contract): Data you choose to provide directly to us when creating a customer profile, managing your team exclusion notes, communicating with our backroom staff via email, or filling out forms during your transactional checkout sequence.

Automatically Through the Services (Legitimate Interests): Operational data collected programmatically from your hardware device when you navigate our storefront. This includes data gathered using standard security cookies, tracking pixels, and encrypted backend synchronization tools designed to keep your active shopping cart intact.

From Our Verified Service Providers (Fulfillment & Operations): Data processed securely on our behalf by infrastructure integrations critical to running our store. This comprises our e-commerce platform provider (Shopify Inc.), our encrypted payment processors (Shopify Payments, PayPal, Klarna), and our primary logistics carrier networks who manage your tracking data.

From Independent Marketing and Analytics Partners: Anonymized optimization indicators gathered via digital platform trackers (such as Google Analytics) to monitor aggregate traffic patterns, calculate store visibility, and detect potential bot-driven fraud on our payment channels. Authentic Mystery Kit Limited explicitly guarantees that we never buy, sell, or rent your private personal details from external data brokers.

 

HOW WE USE YOUR PERSONAL INFORMATION

Depending on how you choose to interact with our store and which specific Services you utilize, Authentic Mystery Kit Limited processes your personal data for the following legitimate business purposes, structured in accordance with EU consumer regulations:

Providing, Tailoring, and Fulfilling the Services (Performance of a Contract): We process your data to execute our direct transactional contract with you. This includes securely processing your checkouts, managing warehouse fulfillment for your mystery jerseys, arranging tracking data with our delivery networks, managing size exchanges, and facilitating subscription plans within "The Boardroom". To ensure total compliance with our Terms of Service, any personal data utilized to publish customer reviews is processed impartially; we maintain an absolute policy against manipulating, editing, or filtering genuine customer feedback.

Marketing and Targeted Advertising (Consent-Based): We utilize your personal metrics to share EARLY access to limited jersey drops, special promotions, or member-only pricing via email newsletter channels. If you explicitly choose to opt-in to text-message (SMS) marketing alerts at checkout, your contact details will be processed securely for that specific channel. You possess an absolute statutory right to withdraw your consent and opt-out of any marketing communications at any time by clicking the "Unsubscribe" hyperlink in our emails or utilizing the designated keyword opt-out in text alerts.

Store Security and Fraud Prevention (Legitimate Interests): We process transaction details and device identifiers to authenticate user accounts, enforce secure payment verification via Shopify Payments, and programmatically detect, investigate, or block fraudulent checkout attempts or malicious bot activities. This processing is critical to maintaining a safe, stable shopping environment for our consumers.

Direct Customer Communications: We utilize your email address and provided telephone numbers to offer direct customer support from our backroom staff, answer sizing inquiries, resolve shipping exceptions, and keep you updated regarding your active orders.

Legal Compliance and Governance: We will process and retain specific transaction indicators if required to comply with applicable Irish corporate laws, respond to valid legal processes from regulatory authorities, or enforce and investigate potential material violations of our core terms and policies.

 

HOW WE DISCLOSE PERSONAL INFORMATION

In strict adherence to applicable data protection laws, Authentic Mystery Kit Limited does not sell, rent, or trade your personal data. We only disclose your personal information to verified third parties for explicit operational and legitimate business purposes as outlined below:

With Essential Service Processors: We share data with our core e-commerce platform provider (Shopify Inc.) and our integrated technical vendors who perform vital operational tasks on our behalf. This comprises encrypted payment processors (Shopify Payments, PayPal, Klarna), cloud infrastructure hosts, and our primary logistics carrier networks who manage physical label creation and tracking delivery updates.

With Data and Analytics Partners: We utilize standard, anonymized marketing tools (such as Google Analytics) to measure storefront visibility, analyze traffic, and ensure technical optimization. These platforms process behavioral data in strict accordance with their own comprehensive privacy frameworks.

Upon Your Explicit Direction or Consent: We transfer data to external networks only when you intentionally request a transaction integration, such as interacting with our official social media handles or accessing third-party login metrics.

For Vital Corporate Governance and Legal Requirements: Authentic Mystery Kit Limited will disclose personal records to official regulatory bodies or law enforcement authorities if strictly required to (1) comply with statutory legal obligations under Irish or European Union law, (2) enforce or investigate material breaches of our live Terms of Service, or (3) protect the transaction safety, infrastructure security, and legal rights of our consumers.

 

DATA MANAGEMENT AND RELATIONSHIP WITH SHOPIFY

Our e-commerce Services are securely hosted by Shopify Inc., which functions as our primary data processor under applicable European Union data protection laws. Shopify Inc. collects, securely stores, and programmatically processes personal metrics relating to your interactions with our storefront to guarantee stable checkout infrastructure, prevent network fraud, and maintain service continuity.

Information you submit through our checkout channels is securely transmitted to and processed by Shopify Inc. across global data centers, which may include secure infrastructure located outside of the European Economic Area (EEA), such as the United States. To guarantee total compliance with the General Data Protection Regulation (GDPR), all cross-border data transfers executed by Shopify are structurally shielded by recognized legal data protection mechanisms, including official Standard Contractual Clauses (SCCs).

Authentic Mystery Kit Limited coordinates with Shopify's enhanced merchant analytics to optimize our localized storefront visibility and protect our payment ecosystem. In specific structural contexts where Shopify utilizes anonymized, aggregated browsing indicators across multiple merchant platforms to enhance network fraud detection, Shopify acts as an independent Data Controller for that specific optimization data.

To review a comprehensive breakdown of how our infrastructure provider manages consumer details and data safety, you can read the official Shopify Consumer Privacy Policy. If you reside within the European Union or another regulated region and wish to exercise your data access, deletion, or portability rights directly regarding Shopify’s independent ecosystem tools, you may access the secure Shopify Privacy Portal.

 

THIRD-PARTY WEBSITES, EXTERNAL LINKS, AND SOCIAL MEDIA WIDGETS

The Services operated by Authentic Mystery Kit Limited may occasionally feature outbound hyperlinks or integrated digital plugins connecting to independent websites or online platforms managed by third parties. If you choose to follow links to external destinations that are not owned, affiliated, or controlled by our company, you should carefully review their individual privacy notices, security practices, and statutory terms of service.

Authentic Mystery Kit Limited does not guarantee, audit, or accept legal responsibility for the data privacy frameworks, encryption security, or content reliability found on external third-party platforms.

Furthermore, our digital storefront may include active social networking integrations or tracking widgets (such as Instagram, Facebook, and TikTok pixels). Any personal information or visual assets you choose to share on public or semi-public social venues are subject to the specific privacy parameters established by those external networks. In accordance with applicable European Union data protection standards, any data tracking or browser processing executed by third-party social widgets on our storefront remains strictly subject to your explicit cookie preference selections. We do not claim, enforce, or utilize unlimited data processing rights over your public social interactions.

 

CHILDREN’S PRIVACY AND YOUTH ACADEMY APPAREL DATA

Authentic Mystery Kit Limited offers a dedicated "Youth Academy" product tier featuring children's football kits. However, our digital e-commerce storefront and purchasing services are strictly intended to be accessed and utilized exclusively by adults, parents, or legal guardians who are at least the age of majority in their respective jurisdictions.

We do not knowingly collect, process, or solicit personal identification data directly from children under the age of 16 without explicit parental or guardian verification.

If you are the parent or legal guardian of an individual under the age of 16 and have reason to believe they have provided private personal details to our storefront without your explicit consent, please contact our support team immediately at info@authenticmysterykits.com. Upon verification, we will permanently purge and delete that personal information from our databases within 48 business hours. Authentic Mystery Kit Limited maintains total compliance with the General Data Protection Regulation (GDPR) age of digital consent protocols and firmly guarantees that youth user profiles are never subjected to profiling or targeted advertising tracking.

 

DATA SECURITY AND RETENTION FRAMEWORKS

Authentic Mystery Kit Limited implements robust physical, administrative, and digital security measures designed to safeguard your personal data from unauthorized access, loss, or alteration. Our digital storefront operates over a mandatory, forced HTTPS architecture utilizing verified Transport Layer Security (TLS) and Secure Sockets Layer (SSL) encryption protocols. This infrastructure ensures that any contact form data, billing profiles, or customer credentials you transmit directly to our platform are fully encrypted while in transit. While no digital data architecture can be mathematically guaranteed as 100% impenetrable, we coordinate with our infrastructure provider, Shopify Inc., to continuously audit and update our payment security protocols.

Authentic Mystery Kit Limited retains your personal information strictly for the duration necessary to satisfy the specific business purposes for which it was gathered, in alignment with local statutory rules:

Account and Subscription Metrics: Retained continuously for as long as you maintain an active customer profile or rolling subscription plan within "The Boardroom."

Fulfillment and Tracking History: Retained in accordance with corporate reporting guidelines to complete standard transit verification, execute size exchanges, and process manual returns under our 30-day consumer protection policy.

Legal and Financial Compliance: Retained for the statutory durations required to comply with applicable Irish corporate laws, settle regulatory tax reporting thresholds, resolve transactional disputes, and enforce our material contractual terms.

 

YOUR STATUTORY GDPR AND CONSUMER RIGHTS

Because Authentic Mystery Kit Limited operates as an established corporate entity within Ireland, all users navigating our storefront from Ireland, the United Kingdom, and the European Economic Area (EEA) possess absolute, non-excludable statutory rights under the General Data Protection Regulation (GDPR). Authentic Mystery Kit Limited respects and fully facilitates the following data rights:

The Right of Access and Data Portability: You have an absolute right to request a complete, digital copy of any personal data we currently hold regarding your transaction history, account preferences, or profile tracking.

The Right to Rectification (Correction): You have the right to demand that we instantly correct any inaccurate, outdated, or incomplete personal identity metrics we maintain about you.

The Right to Erasure (The Right to be Forgotten): You have the right to request that we permanently purge and delete your customer account records from our digital architecture, provided the data is no longer required for active contract execution or local financial tax auditing compliance.

The Right to Restrict or Object to Processing: You have the right to restrict our backend programmatic processing of your metrics or object entirely to our data operations based on legitimate corporate interests.

The Right to Withdraw Consent: Where our tracking or marketing communication relies strictly on your explicit consent (such as email newsletters or SMS checkouts), you hold an absolute right to withdraw that consent instantly at any time.

Managing Your Choices and Communication Preferences

You can opt-out of promotional email loops instantly by clicking the "Unsubscribe" hyperlink situated at the footer of any marketing transmission. If you opt-out of promotional material, Authentic Mystery Kit Limited will still securely transmit critical, non-promotional transactions (such as order confirmation receipts, VAT-exempt billing breakdowns, and carrier tracking links) necessary to execute your active order contracts.

To officially execute any of your statutory consumer rights, please contact our designated data compliance desk directly at info@authenticmysterykits.com. In accordance with European data privacy statutes:

We will verify your identity before processing any structural deletion or export requests to protect your account security.

We will process your verified request and respond to you completely free of charge within 30 days.

You maintain an absolute right to lodge a formal complaint regarding our data handling with your regional supervisor, such as the Irish Data Protection Commission (DPC).

 

COMPLAINTS AND REGULATORY ESCALATION

If you have any questions, unresolved concerns, or formal complaints regarding how Authentic Mystery Kit Limited processes your personal data or coordinates your privacy metrics, please contact our team directly at info@authenticmysterykits.com. We are committed to working with you to achieve a transparent, rapid, and fair resolution to any privacy disputes.

If you reside within the United Kingdom or the European Economic Area (EEA) and believe that our data practices infringe upon your statutory consumer protection rights under the General Data Protection Regulation (GDPR), you possess an absolute legal entitlement to lodge a formal complaint with your regional privacy authority.

For customers in Ireland, the primary data protection supervisory authority is the Irish Data Protection Commission (DPC), and you can contact them directly by visiting their official portal at www.dataprotection.ie. For consumers residing in other EEA member states, you can locate your specific regional regulatory contact information directly via the official European Data Protection Board Directory.

 

INTERNATIONAL TRANSFERS

Please note that we may transfer, store and process your personal information outside the country you live in.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

 

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

 

DATA COMPLIANCE CONTACT INFORMATION

Should you have any structural questions about our corporate privacy practices, wish to file a data correction request, or want to officially exercise any of your statutory GDPR consumer rights, please contact our data compliance desk directly using the verified corporate metrics detailed below:

Data Controller Entity: Authentic Mystery Kit Limited

Company Registration Number (Ireland CRO): 805000

Registered Office Address: Creewood, Slane, Navan, Co. Meath, Ireland, C15CC6K

Data Compliance Phone: +353 87 364 2774

Data Compliance Email: info@authenticmysterykits.com

Operational Hours: Monday – Friday: 9:00 AM – 5:00 PM (GMT / Irish Standard Time)