Privacy Policy
Last updated: 4 September 2026
The RePuzzler respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, how and why we use it, who we may share it with, how long we keep it, and the rights you have under UK data protection law.
Who we are
The RePuzzler is operated by Laura Oldham, a sole trader trading as The RePuzzler.
For the purposes of UK data protection law, Laura Oldham trading as The RePuzzler is the data controller responsible for your personal data.
If you have any questions about this Privacy Policy or how we use your personal data, you can contact us at:
Email: hello@therepuzzler.co.uk
What personal data we collect
Depending on how you use The RePuzzler, we may collect:
• your name
• your email address
• your postal address and postcode
• your puzzle preferences and interests
• your delivery and return preferences
• information about your membership, orders, subscriptions and puzzle loans
• messages or information you send to us through our website or by email
• technical information about how you use our website, where this is collected through cookies or similar technologies.
When you make a payment, your payment details are processed securely by our payment provider. The RePuzzler does not receive or store your full card number.
How we use your personal data
We may use your personal data to:
• manage your membership and subscription
• process your orders and payments
• arrange the delivery and return of puzzles
• keep records of which puzzles you borrow and return
• respond to questions or messages you send us
• manage the Founding Member waiting list
• improve The RePuzzler service and website
• send you marketing emails where you have chosen to receive them
• meet our legal, tax and accounting obligations.
We rely on different lawful bases depending on how we use your personal data:
Contract – when we need your information to provide your membership, process your subscription, deliver and receive puzzles, or manage your customer account.
Legal obligation – where we need to keep or use information to comply with legal, tax or accounting requirements.
Consent – where you have chosen to receive marketing emails or where consent is otherwise required.
Legitimate interests – where necessary to run and improve The RePuzzler, respond to enquiries, prevent misuse and keep appropriate business records, provided your rights and interests do not override those interests.
Who we share your personal data with
We only share your personal data where it is necessary to run The RePuzzler, provide our services, or meet our legal obligations.
We may share relevant information with:
• Squarespace, which hosts our website, customer accounts, orders and subscriptions
• Squarespace Payments and payment-processing providers, which securely process membership payments
• Google Workspace, which we use for business email and communications
• delivery and return providers, such as InPost, Evri or Royal Mail, where necessary to deliver or return your puzzles
• professional advisers, such as accountants or legal advisers, where necessary
• HMRC, regulators, courts or other authorities, where we are legally required to provide information.
We do not sell your personal data.
International data transfers
Some of the service providers we use, including Squarespace and Google, may process or store personal data outside the United Kingdom.
Where personal data is transferred outside the UK, we take steps to ensure that it is protected in accordance with UK data protection law. This may include relying on UK adequacy regulations or appropriate contractual safeguards recognised under UK data protection law.
How long we keep your personal data
We keep personal data only for as long as we need it for the purposes described in this Privacy Policy, including to provide your membership, manage orders and subscriptions, respond to enquiries, and meet legal, tax and accounting requirements.
In general:
• membership and customer account information is kept while your membership is active and for a reasonable period afterwards where needed for business, legal or accounting purposes
• order and payment records may be kept for as long as required to meet tax and accounting obligations
• waiting-list information is kept until you join, ask us to remove you, or the waiting list is no longer needed
• contact enquiries are kept only for as long as necessary to deal with your enquiry and any related follow-up
• marketing information is kept until you unsubscribe or withdraw your consent.
We regularly review the personal data we hold and delete or anonymise it when we no longer need it.
Your data protection rights
Under UK data protection law, you may have the right to:
• ask us for a copy of the personal data we hold about you
• ask us to correct personal data that is inaccurate or incomplete
• ask us to delete your personal data in certain circumstances
• ask us to restrict how we use your personal data in certain circumstances
• object to certain uses of your personal data
• ask us to transfer personal data you have provided to us, where the right to data portability applies
• withdraw your consent at any time where we rely on consent, for example for marketing emails.
These rights are not absolute and may depend on the circumstances and the lawful basis we rely on.
To exercise any of these rights, contact us at hello@therepuzzler.co.uk.
You also have the right to complain if you are unhappy with how we have handled your personal data. We would appreciate the opportunity to deal with your concerns first, but you also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK data protection regulator.
Cookies and website analytics
Our website uses cookies and similar technologies. Some cookies are necessary for the website to function properly, for example to support security, customer accounts, shopping and checkout.
We may also use optional cookies or similar technologies to understand how visitors use our website and to help us improve The RePuzzler.
Where consent is required, optional cookies will only be used after you have made a choice through our cookie banner or cookie settings.
You can change or withdraw your cookie choices at any time using the cookie settings available on our website. You can also control cookies through your web browser.
For more information about the cookies used on our website, please see our Cookie Policy.
When you need to provide personal data
Some personal data is necessary for us to provide The RePuzzler membership and services to you.
For example, we need information such as your name, email address, delivery details and payment information so that we can create and manage your membership, process payments and arrange puzzle deliveries and returns.
If you do not provide information that is necessary for us to provide the service, we may not be able to accept or continue your membership or fulfil your order.
Automated decision-making
The RePuzzler does not use your personal data to make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to The RePuzzler, the services we use, or legal requirements.
When we make changes, we will update the “Last updated” date at the top of this page. Where a change significantly affects how we use your personal data, we will take reasonable steps to bring the change to your attention where appropriate.