Privacy Policy
This policy explains what we do with your personal data, why, and what you can ask us to do about it. It is written to be read, not to be survived.
Last updated: 10 August 2026.
The short version
We collect very little. Browsing this site sets no cookies and runs no analytics, no advertising pixels and no third-party trackers of any kind. We only hold personal data when you give it to us, by writing to us, creating an account, or placing an order, and we never sell it.
1. Who is responsible for your data
HYPERION MOTION LTD, trading as Obsidian Keys, is the data controller. We are registered in England and Wales under company number 17358996, at Academy House, 11 Dunraven Place, Bridgend, Mid Glamorgan CF31 1JF, United Kingdom.
For anything in this policy, write to info@obsidiankeys.com.
2. When you browse the site
We run no analytics and no tracking. There is no Google Analytics, no advertising pixel and no third-party script on our pages.
Our hosting provider keeps standard server logs, which include IP addresses, for security and troubleshooting. We do not use them to build a profile of you.
Browsing sets no cookies. Cookies appear only once you do something that needs them: adding to your cart, signing in, or applying a filter. Our Cookie Policy lists them.
3. When you write to us
Our contact form asks for your name, your email address and your message. That is all it stores. It does not record your IP address.
Why: to read your message and reply to it.
Legal basis: our legitimate interest in answering people who contact us, and taking steps at your request before entering a contract.
How long: we keep enquiries for up to 12 months so we can follow up and see a history if you write again, then delete them.
4. When you create an account
An account holds your email address, an encrypted form of your password, and any name or address you choose to add. We never see your password itself.
Why: so you can sign in, see your orders, and get your keys again if you lose them.
Legal basis: performance of our contract with you.
How long: for as long as you keep the account. Ask us to close it and we delete it, apart from anything we must keep for tax or fraud records.
5. When you buy something
An order holds what you bought, what you paid, your email address, and the billing details the payment step requires.
Card details never reach us. Payment is handled by our payment provider, who processes your card data under their own terms. We receive confirmation that a payment succeeded, not your card number.
Why: to supply your key, keep records, and meet our legal obligations.
Legal basis: performance of our contract with you, and our legal obligation to keep accounting records.
How long: six years from the end of the tax year in which you ordered, because UK tax law requires it.
6. Who else sees your data
Only the people who have to, and only to do their job for us:
- Our hosting provider: Hostinger, who host this site and our email.
- Our payment provider, who takes payments and holds card data we never see.
- Professional advisers and authorities: accountants, or a regulator or court where the law requires it.
Our catalogue supplier receives nothing about you. We read their catalogue; we do not send them your data.
We do not sell your personal data, and we do not share it for anyone else’s marketing.
7. Sending data outside the UK
Our providers may process data outside the United Kingdom. Where they do, we rely on the safeguards UK data protection law requires: an adequacy decision, or standard contractual clauses with the UK addendum.
8. Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong;
- delete it, where we do not have to keep it;
- restrict what we do with it, or object to us using it;
- send it to you or another provider in a portable form.
Ask by writing to info@obsidiankeys.com. We answer within one month. There is no charge unless a request is clearly unfounded or excessive.
If you are unhappy with how we handled it, you can complain to the Information Commissioner’s Office at ico.org.uk, or call 0303 123 1113. We would rather you told us first, so we can put it right.
9. Keeping your data safe
The site runs over HTTPS. Passwords are stored in encrypted form and never in plain text. Access to the admin area is limited to people who need it.
No system is perfectly secure. If a breach ever puts your rights at risk, we will tell you and the Information Commissioner’s Office as the law requires.
10. Children
This site is not intended for children. You must be at least 18 to buy from us, and we do not knowingly collect data from anyone under that age. If you believe we hold data about a child, tell us and we will delete it.
11. Changes to this policy
If we change this policy we update the date at the top. If a change materially affects how we use data you have already given us, we will tell you directly.
12. How to contact us
HYPERION MOTION LTD, trading as Obsidian Keys
Academy House, 11 Dunraven Place
Bridgend, Mid Glamorgan CF31 1JF
United Kingdom
Company number 17358996
info@obsidiankeys.com