PRIVACY POLICY

This website is operated by Limits Are Fiction.

• Trading name: Limits Are Fiction
• Legal entity: Limitless Drop Ltd
• Company number: 17244617
• Registered address: 128 City Road London, EC1V 2NX
• Email: support@limitsarefiction.com

For the purposes of UK data protection law, we are the controller of your personal information.

// information you provide directly

• name; email address; phone number;
• billing address; delivery address;
• order details; payment-related information;
• returns and support messages;
• newsletter signup, survey, competition or event registration details;
• if you leave a product review: your star rating, review text, optional headline and the display name you choose to show;
• if you use the help chat on our site: the messages you send us, and your email address if you choose to send the conversation to a human;
• if you work with us as a rep or agency: your name, email address, social media handle and commission or payout details;
• any information you send us through forms, email or social media.

// information collected automatically

• IP address, browser type, device type;
• pages viewed, products viewed, referring website;
• approximate location (country or city level, derived from your IP address only, see section 18);
• cookie and tracking information, analytics and performance data;
• basket and checkout activity, including items added to your basket and whether a basket was left without completing checkout.

// payment information

Payments are processed by third-party payment providers. We do not usually store full card details ourselves. Your payment provider may process your payment information according to its own privacy terms.

We use your information to:

• process and fulfil your orders; take payment;
• send order confirmations and delivery updates;
• provide customer support; handle returns, refunds and exchanges;
• invite customers who have ordered to review their purchase, and publish approved reviews on product pages;
• manage fraud prevention and site security;
• send marketing emails where you have opted in;
• manage Signal Society access and benefits;
• run our rep and agency programme, credit referrals and pay commissions;
• improve our website, products and customer experience;
• understand site performance and customer behaviour;
• comply with legal, tax and accounting obligations;
• respond to enquiries, complaints or legal requests.

Under UK data protection law, we need a lawful basis to use your personal information.

Contract - to process orders, take payment, deliver products, manage returns and provide customer support.

Consent - to send marketing emails where consent is required, and to use non-essential cookies where required. You can withdraw consent at any time.

Legitimate interests - to run and improve our business, prevent fraud, respond to customers, manage limited drops, understand site performance and protect our brand, provided your rights do not override those interests.

Legal obligation - to keep records for tax, accounting, consumer law, fraud prevention and other legal requirements.

If you sign up to our mailing list, we may send you emails about drops, restocks, Signal Society, events, products, zines, tools and brand updates.

If you opt in to our mobile message service, we may send you text messages about the same subjects. See section 17 for full details of how we handle mobile numbers and text message consent.

You can unsubscribe at any time using the link in our emails, by replying STOP to a text message, or by contacting us at support@limitsarefiction.com.

We do not sell your personal information to advertisers.

We use cookies and similar technologies to make the website work, understand how it is used and support marketing.

Some cookies are essential for the site to function, such as basket, checkout, security and login cookies. Other cookies, such as analytics and advertising cookies, may require your consent.

Limitless Drop Ltd's website uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This information is used to determine when to send cart reminder messages by email and by text message.

These cookies, along with our ecommerce platform and marketing plugins, record which products you view, which items you add to your basket, and whether you completed checkout. If you have opted in to email or text message marketing, we may use that information to send you a reminder about the items you left behind.

See our Cookie Policy for more information.

We may share your information with trusted third parties who help us run the website and fulfil orders, including:

• ecommerce platform providers, such as Shopify;
• payment processors;
• delivery and courier partners;
• fulfilment and warehouse partners;
• email marketing platforms;
• analytics providers (Google Analytics and PostHog), only if you accept analytics cookies - covering the pages you visit, how you move around the site, your device and browser type and approximate location. You can withdraw consent at any time via Cookie settings;
• advertising platforms (Meta and TikTok), where consent or another lawful basis applies - including the products you view, add to your bag or check out with (only if you accept marketing cookies), and order confirmations with identifiers such as your email address converted to an unreadable (hashed) form, so we can measure whether an advert led to an order and show relevant adverts. You can withdraw consent at any time via Cookie settings;
• accountants, lawyers and professional advisers;
• IT, hosting and security providers;
• regulators, authorities or law enforcement where required.

We only share what is necessary for the relevant purpose.

The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties, other than the messaging platform we use to deliver the messages you asked for. We do not sell your personal information.

Some of our service providers may process personal information outside the UK. Where this happens, we will take steps to ensure appropriate safeguards are in place, such as approved contractual protections or other lawful transfer mechanisms.

We keep your information only for as long as necessary.

• order and transaction records: up to 6 years for tax and accounting purposes;
• customer support messages: as long as needed to resolve the issue and maintain records;
• marketing data: until you unsubscribe or your data is no longer active/relevant;
• cookie data: for the period stated in our Cookie Policy;
• fraud prevention records: as long as reasonably necessary to protect our business and customers.

We may keep some information for longer if required by law or to resolve disputes.

Depending on the circumstances, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate information;
• ask us to delete your information;
• restrict how we use your information;
• object to certain uses of your information;
• receive your information in a portable format;
• withdraw consent where we rely on consent;
• complain to the ICO.

You have the right to object to us using your personal information where we rely on legitimate interests, including certain profiling, analytics or marketing-related activity.

You can also opt out of direct marketing at any time.

To exercise your rights or ask a privacy question, contact:

• Email: support@limitsarefiction.com
• Address: 128 City Road London, EC1V 2NX

We may need to verify your identity before responding.

If you are unhappy with how we use your personal information, please contact us first so we can try to resolve it.

You also have the right to complain to the UK data protection regulator: Information Commissioner's Office - ico.org.uk

We use reasonable technical and organisational measures to protect your personal information.

However, no website, email system or online service is completely secure. You are responsible for keeping your account details, passwords and devices secure.

Our website is not intended for children. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated date.

We operate a mobile message service. You can only join it by giving us your express written consent, for example by ticking a box at checkout or on a signup form, or by texting a keyword to our number. We never add a number to the service without that consent.

// what we collect

• your mobile number;
• your first name, where you give it;
• a record of your consent, including the date, time and where you signed up;
• message delivery, open, click and opt-out records;
• your order and browsing activity, where you have consented to cookies, so messages are relevant.

// how we use it

• to send drop, restock, event and Signal Society updates you asked for;
• to send basket and checkout reminders, as described in section 06;
• to handle your opt-out requests and keep a suppression record;
• to measure whether our messages are working.

// who we share it with

We share your mobile number only with the messaging platform and mobile network operators needed to deliver the messages you asked for. They act on our instructions and cannot use your number for their own marketing.

We do not sell, rent or share text message opt-in data or consent records with any non-affiliated third parties, and we do not use them for any purpose other than running this service.

// opting out

Reply STOP to any message to leave the service, or HELP for help. You can also email support@limitsarefiction.com. Message and data rates may apply. See our Mobile Terms of Service on the Terms page for the full terms of the programme.

We keep consent and opt-out records for as long as we run the service, and afterwards where needed to prove compliance.

We do not track your precise location and we do not offer location-based services. We do not request GPS or device location permissions, and we do not build location profiles.

Our website and analytics providers derive an approximate location, usually country or city level, from the IP address your device uses to connect. We use that only to show prices and shipping options in the right region, to understand at a broad level where our audience is, and to detect fraud and abuse.

Delivery and billing addresses you enter yourself are used to fulfil your order and are handled as described in sections 03 and 07.

If you arrive through a rep or agency link, we remember which code you followed. That memory is a small note stored on your own device for 30 days - it is not a tracking cookie and it is not shared with anyone - and it is used to credit the rep if you place an order.

If you order using a rep's discount code, we report the number of orders and the total value to that rep and, where they work through one, their agency. We do not share your name, contact details or what you bought with them - only counts and totals.

If you work with us as a rep or agency, we hold the details described in section 02 to run the programme, create your login and pay commissions. You can ask us to correct or delete your details at any time using the contact details in section 12.

If you place an order, we may email you after your order inviting you to review the products you bought. These invitation emails are a normal part of your order and are not marketing, so you receive them even if you have not joined our mailing list.

Leaving a review is entirely optional. If you do, we collect your star rating, your review text, an optional headline and the display name you choose to show (for example "Sam, London"). We never publish your email address, delivery address or any other personal detail.

Reviews are checked by us before they appear on the site, and they are shown with a "verified buyer" mark because the invitation link is tied to the products in your order. We may edit or decline a review that breaks our guidelines (for example one containing personal details, abuse or spam), but we do not change the meaning of what you wrote.

You can ask us to remove or edit your review at any time by contacting us using the details in section 12, and we will take it down. We keep a record of your review for as long as it is published on the site, and afterwards where needed to resolve any dispute about it.

The private review link we send you is tied to your order and the products in it. Please don't share it - anyone who uses it could leave a review pretending to be you.