Privacy Policy

Last updated: 1/8/2026

1. Introduction

Welcome to Top Drawer ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

Identity Data includes first name, last name, and username.
Contact Data includes your email address used for account creation and communications.
Profile Data includes your avatar, bio, supported team, kit collection data (photos, descriptions, purchase history), interests, and preferences.
Technical Data includes internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform.
Usage Data includes information about how you use our platform, such as your journey through the site, time spent on specific pages, features navigated, posts you like, users you follow, and notifications read.

3. How We Use Your Data

We use your data to:

Create and manage your Top Drawer account.
Allow you to catalog and share your football kit collection.
Provide social features like following other collectors and liking posts.
Send you relevant notifications about your account activity and community updates.
Improve our platform through analytics and technical monitoring.

4. Third-Party Services

We work with selected third-party service providers to ensure a high-quality, secure experience. These partners help us with:

Infrastructure & Hosting: Storing your data and hosting the platform securely.
Authentication & Storage: Managing secure user login and photo archival.
Performance & Error Monitoring: Ensuring the platform remains stable and fast.
Security & Analytics: Protecting against malicious activity and analyzing community growth. We use PostHog to understand how users engage with our platform, track session duration, and improve user experience through aggregate data.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the services. If you choose to delete your account, we will remove your personal data from our active databases, though some information may persist in backups for a limited period or as required by law.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We use industry-standard encryption and security practices provided by our infrastructure partners (Supabase and Vercel).

7. Your Legal Rights

Under the UK GDPR and equivalent data protection laws, you have rights including access to your data, correction of errors, and the right to erasure ("right to be forgotten"). You can manage most of your data directly through your profile settings or by contacting us.

8. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at topdrawerkits@outlook.com