SuperChallenge

Privacy policy

Last updated: 6 August 2026

SuperChallenge is a small operation, and this website is deliberately simple. It
sells nothing directly, sets no cookies, and runs no analytics or advertising.
This page explains the little that does happen with your data, in plain English.

Who we are. SuperChallenge is the data controller for
this website. You can reach us at
[email protected] or by post - address available on request by email.

The short version

  • We do not set cookies on this website, so there is no cookie banner to click.
  • We do not use Google Analytics, advertising trackers, social media pixels, or
    any other tracking tools.
  • Our fonts are hosted on our own server, so loading a page does not tell
    Google — or anyone else — that you visited.
  • We do not have accounts, newsletters, or a shopping basket. There is nothing
    here to sign up for.
  • Everything you buy from us is bought through eBay, and eBay handles that data,
    not us.

What we actually collect

Server logs

Like effectively every website, our web server keeps a log of requests made to
it. Each entry records your IP address, the date and time, the page requested,
the referring page, and your browser's user-agent string.

We use these logs only to keep the site running and secure — diagnosing errors,
investigating abuse, and spotting attacks. We do not use them to build a profile
of you, and we do not combine them with anything else.

  • Lawful basis: legitimate interests (running a secure, functioning website).
  • Retention: 30 days, after which entries are deleted.

Our content delivery and security provider

This site sits behind Cloudflare, which serves the site quickly and filters
malicious traffic before it reaches us. To do that, Cloudflare necessarily
processes your IP address and request details.

Cloudflare may occasionally set a strictly necessary cookie (typically
__cf_bm) to tell human visitors apart from automated bots. This is a security
measure, not tracking, and under the Privacy and Electronic Communications
Regulations it does not require your consent. We do not set any cookies of our
own.

Cloudflare acts as our data processor. Their privacy policy is at
cloudflare.com/privacypolicy.

  • Lawful basis: legitimate interests (site security and availability).

If you email us

If you contact us, we keep your message and email address so we can reply and,
where relevant, keep a record of what was agreed — for example if we have
sourced a specific item for you.

  • Lawful basis: legitimate interests (responding to your enquiry), or
    performance of a contract where your message relates to a purchase.
  • Retention: we keep correspondence for as long as it is useful, and delete
    it when it no longer is. Anything relating to a sale is kept for six years to
    meet HMRC record-keeping requirements.

What happens when you click through to eBay

Every item on this site links out to our eBay listing. Once you follow that
link, you are on eBay's website and eBay's privacy policy applies, not ours.
Any purchase, payment, delivery address, message or return is handled entirely
through eBay's systems.

We receive from eBay only what we need to fulfil your order — your name,
delivery address, and the order details. We use that information solely to pack
and post your parcel, and we keep sales records for six years as HMRC requires.
We never sell, rent, or share customer information with anyone for marketing.

eBay's privacy notice:
ebay.co.uk/help/policies/member-behaviour-policies/user-privacy-notice

Where your data is held

Our website and its logs are hosted on servers in the United States.
Cloudflare operates a global network, so your request may be handled by a server
outside the UK; Cloudflare provides appropriate safeguards for those transfers
under UK data protection law.

Your rights

Under UK GDPR you have the right to:

  • ask what personal data we hold about you, and get a copy of it
  • have inaccurate data corrected
  • have data erased, where we have no overriding reason to keep it
  • object to processing we carry out under legitimate interests
  • ask us to restrict how we use your data
  • receive data you gave us in a portable format

To exercise any of these, email
[email protected]. We will respond within one
month. There is no charge.

In practice, the only thing we are likely to hold about a website visitor is a
server log entry, which we cannot link to you by name. If you email us your IP
address and an approximate time, we can look for it.

Complaints

If you think we have handled your data badly, please tell us first so we can put
it right. You also have the right to complain to the Information Commissioner's
Office:

Children

This site is not aimed at children and we do not knowingly collect data about
them.

Changes

If we change how this site handles data, we will update this page and change the
date at the top. We do not keep a mailing list, so there is nobody to notify.