Privacy Policy

1. Who we are

This Privacy Policy explains how Reveal Kits collects, uses, and protects your personal data when you use our services.

Company: Reveal Kits
Address: The Meydan Hotel, Grandstand, Meydan, Dubai, United Arab Emirates

We operate services and fulfil orders in both the United Kingdom and the United Arab Emirates. Depending on your location and stock availability, your order and support may be handled from either region.

2. Scope of this policy

This policy applies when you use our website, mobile apps, games, and related services, including:

• Purchasing mystery football shirt boxes or other products
• Completing a Digital Reveal session (including confirmations and optional rerolls where available)
• Creating an account and managing your profile, orders, and collection
• Using our fantasy football games, streaks, rewards, leaderboards and other in-app experiences
• Using collection features such as albums, shareable pages, or community feeds (where enabled)
• Using trading / transfer-style features (for example, swapping or trading items where available)
• Receiving marketing communications and push notifications

3. Information we collect

We may collect the following categories of information:

• Account information – name, email address, password, username, profile photo, country or region.
• Order and delivery information – billing and shipping address, contact details, products purchased, order history, and delivery status.
• Payment information – processed securely by our payment providers (such as Stripe). We do not store your full card details on our servers.
• Digital Reveal and session data – reveal session IDs, reveal state, timestamps, confirmations, and other actions taken during the digital reveal experience.
• Store credit / rewards data – where applicable, records of credits, rewards, redemptions, and related account activity.
• Gameplay and engagement data – your cards, lineups, fantasy scores, streaks, achievements, trades, and other actions within our games and apps.
• User-generated content – content you choose to submit or publish (for example, reviews, comments, images, or public album/shareable page settings where available).
• Technical and usage data – IP address, device type, browser type, app version, log data, pages and screens visited, and interaction data collected via cookies or similar technologies.
• Security and fraud-prevention data – signals used to protect accounts and payments, prevent abuse, and keep our services secure (for example, suspicious login indicators, payment risk signals, and audit logs).
• Communication data – messages or enquiries you send to us, support requests, social media interactions, and marketing preferences.

4. How we use your information

We use your information to:

• Process and deliver your orders and manage payments
• Provide the Digital Reveal experience, including maintaining session history and confirmation flows
• Provide and personalise your account, collection, and game experience
• Run fantasy competitions, streaks, leaderboards, rewards, and related experiences
• Operate community / collection features (for example, shareable album pages or feeds where enabled) based on your settings and choices
• Send service messages (for example, order confirmations, delivery updates, or important account notices)
• Send marketing communications where permitted by law and your preferences
• Improve and protect our website, apps, and services (including analytics, debugging, moderation, and fraud prevention)
• Comply with legal obligations and enforce our terms

5. Legal bases for processing (UK / EU users)

Where applicable data protection laws (such as the UK GDPR or EU GDPR) apply, we rely on the following legal bases:

• Contract – to process your orders, provide access to your account, Digital Reveal sessions, games, and deliver customer support.
• Legitimate interests – to run and improve our services, prevent fraud, operate our games and community features, and understand how users engage with our products, provided these interests are not overridden by your rights.
• Consent – for certain marketing activities, cookies, analytics, or push notifications where local law requires consent. You can withdraw your consent at any time.
• Legal obligation – to comply with tax, audit, and other legal requirements.

6. Cookies and similar technologies

We use cookies and similar technologies to recognise your browser or device, remember your preferences, understand how you use our services, and improve your experience.

Depending on your location, you may see a cookie banner or settings tool where you can manage your cookie preferences. You can also control cookies through your browser settings, but some features may not function properly if certain cookies are disabled.

7. Push notifications and marketing

With your permission, we may send push notifications or marketing messages about new products, rewards, game updates, Digital Reveal changes, or special offers.

You can manage push notifications in your device settings and unsubscribe from marketing emails at any time by using the “unsubscribe” link in the message or updating your account preferences.

8. How we share your information

We do not sell your personal data. We may share it with:

• Service providers – such as payment processors, hosting providers, database providers, analytics services, customer support tools, email/push notification providers, and logistics / shipping or fulfilment partners (including in the UK and UAE).
• Business partners – for example, clubs, brands, manufacturers, or sponsors involved in providing licensed products or rewards, where necessary.
• Professional advisers – such as lawyers, accountants, or auditors, where needed to protect our business.
• Law enforcement or regulators – if we are required to do so by law or to protect our rights, users, or others.
• Corporate transactions – if we are involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

9. International data transfers

We operate in the United Kingdom and the United Arab Emirates and may use service providers located in other countries (including the UK, UAE, EU, and US). Where required by law, we take steps to ensure appropriate safeguards are in place for international transfers, such as contractual protections.

10. How long we keep your information

We keep your personal data only for as long as necessary to fulfil the purposes described in this policy, including:

• For as long as you have an active account with us
• For as long as needed to provide our services and games to you (including maintaining Digital Reveal and order audit records)
• For the period required by tax, accounting, and legal obligations
• For a reasonable period to resolve disputes, prevent fraud, or enforce our terms

11. Your rights and choices

Depending on your location and local laws, you may have rights over your personal data, which can include:

• Accessing the personal data we hold about you
• Requesting correction of inaccurate or incomplete data
• Requesting deletion of your data in certain circumstances
• Objecting to or restricting certain types of processing, including direct marketing
• Requesting a copy of your data in a portable format
• Withdrawing consent where processing is based on consent

To exercise these rights, please contact us at admin@revealkits.com. We may need to verify your identity before responding.

12. Children's privacy

Our services are not intended for children under the minimum age required by local law (for example, 13 or 16). We do not knowingly collect personal data from children who are not permitted to use our services.

If you believe a child has provided us with personal data in violation of this policy, please contact us so we can take appropriate action.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and may take additional steps to inform you, such as displaying a notice in the app or sending an email.

14. How to contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: admin@revealkits.com
Address: The Meydan Hotel, Grandstand, Meydan, Dubai, United Arab Emirates

This page is for general information only and does not constitute legal advice. You may wish to obtain independent legal advice to ensure this policy meets all applicable legal requirements for your specific situation.