Legal
Your business stays yours. Here is exactly what we collect, who sees it and why, written in plain English.
The Key Points
The details needed to run your account and deliver your order, plus basic technical information about how the site is used.
Your data is only shared with the companies that help us run the shop, such as payment providers and couriers.
Ask to see, correct or delete your data at any time, and unsubscribe from marketing with one click.
Who Sees What
These are the only companies that receive any of your information. Tap one to see exactly what it gets and why.
Payments
Card payments, Apple Pay and Google Pay
What They Receive
Why
To take your payment securely. Your card details go straight to Stripe. We never see or store them.
Last updated: November 2026
In ShortThe details you give us when you order or create an account, plus some technical information collected when you visit.
When you create an account, place an order or contact us, we collect:
Your password is stored securely in a form that cannot be read, not even by us.
Payment details. Payments are handled by Stripe and PayPal. We never see or store your full card details. You can read their privacy policies here: Stripe and PayPal.
Health information. We never ask for health information. We know that what you buy from us is personal, so we treat your order history as confidential and only the people who need it to fulfil your order can see it.
When you visit the site, we collect some technical information:
Analytics information is only collected if you accept analytics cookies.
In ShortTo run your account, deliver your orders, help you when you get in touch and keep the site secure.
In ShortWe only use your data when the law allows it, such as to complete your order or because you have given us permission.
Under UK data protection law, we rely on the following legal bases:
In ShortOnly the companies that help us run the shop, and each one only receives what it needs. We never sell your data.
We share information with the following services. You can also explore this in Who Sees What above.
We may also share information where the law requires it, or with a new owner if our business is ever sold or merged. In that case, your information would remain protected by this policy.
In ShortYes. Essential cookies keep the site working. Optional cookies only run if you accept them.
Essential cookies keep your basket, checkout and account working. Optional cookies, such as Google Analytics, only run if you accept them in our cookie banner, and you can change your choice at any time.
For full details of every cookie we use, see our Cookie Policy.
In ShortSome of our providers process data outside the UK. When they do, it stays protected by safeguards recognised under UK law.
Some of our providers, including Google, Stripe, PayPal, Porkbun and Wordfence, may process data outside the UK, for example in the United States. When this happens, we rely on safeguards recognised under UK law, such as the UK US data bridge or the UK International Data Transfer Agreement.
If you order from outside the UK, your delivery details will also be shared with couriers and customs authorities in your country so your order can be delivered.
In ShortOnly as long as we need it. Order records are kept for six years because the law requires it.
When we no longer need your information, we delete it or make it anonymous.
In ShortWe use strong security to protect your data, and access to it is strictly limited.
The site runs on a secure, encrypted connection. We use a Wordfence firewall, two factor authentication on our admin accounts, reCAPTCHA spam protection and regular backups. Payments are handled by Stripe and PayPal, and only the people who need your information to fulfil your order can access it.
No website can ever be completely secure, but if a security incident ever puts your information at risk, we will tell you and the Information Commissioner's Office where the law requires us to.
In ShortNo. AfterHours Club is for adults aged 18 and over.
We do not knowingly collect data from, or market to, anyone under 18. By using the site, you confirm that you are at least 18. If we learn that we have collected data from someone under 18, we will delete it straight away. If you have any concerns, email hello@afterhoursclub.co.
In ShortYou can see, correct, delete or move your data, and object to how we use it. Just email us.
Under UK data protection law, you have the right to:
To use any of these rights, email hello@afterhoursclub.co. It is free, and we will respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office, although we would appreciate the chance to put things right first.
In ShortIf your browser asks sites not to track you, our cookie banner respects it.
If your browser sends a Global Privacy Control or Do Not Track signal, our cookie banner treats it as a refusal of optional cookies.
In ShortIf you live in the US, your state may give you extra privacy rights. We do not sell your personal information.
The table below shows the categories of personal information we collect:
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, email address, IP address, account name | Yes |
| Customer records | Name, delivery address, phone number | Yes |
| Payment card details | Held by Stripe and PayPal, never by us | No |
| Commercial information | Order history and transactions | Yes |
| Internet activity | Pages viewed on our site | Yes |
| Approximate location | Town or region, based on IP address | Yes |
| Precise location | GPS location from your device | No |
| Protected characteristics | Gender, age, race, ethnicity | No |
| Biometric information | Fingerprints, voiceprints | No |
| Audio or visual data | Recordings, images | No |
| Professional information | Job title, employment history | No |
| Sensitive personal information | Government ID, health records | No |
To use your US state privacy rights, email hello@afterhoursclub.co.
In ShortWherever you are, you can ask to see or correct your data, and complain to your local regulator.
You have the same rights under the EU GDPR as UK customers, and you can complain to the data protection authority in your country.
We handle your data in line with Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. You can ask to see or correct your personal information at any time.
We handle your data in line with POPIA. If you are unhappy with how we handle your data, you can contact the Information Regulator of South Africa.
In ShortSometimes. If anything important changes, we will let you know.
We may update this policy from time to time. The date at the top shows when it was last changed. If we make an important change, we will tell you by email or with a clear notice on the site.
In ShortEmail hello@afterhoursclub.co and a real person will reply.
If you have any questions about this policy or your data, get in touch:
Data Controller
AfterHours Club Ltd
61 Bridge Street, Kington, HR5 3DJ, United KingdomIn ShortUpdate your details in My Account, or email us to get a copy of your data or delete it.
You can update your account details at any time in My Account. To get a copy of your data or have it deleted, email hello@afterhoursclub.co. We may ask you to confirm your identity before we act, to keep your information safe.
Get In Touch
We are happy to explain anything about your data in plain English. Just ask.