Cosykiller — for the armchair sleuth
Investigator's notebook open across the Site Q entries — the kind of records we keep and never share

Privacy Last updated 11 September 2026

Privacy
policy.

How Cosykiller collects, uses, stores and protects your personal data under the UK GDPR — in plain English where the law lets us.

Ask a question Cookie policy

Who is the data controller?

RHG Events Ltd (company number 12849299), trading as Cosykiller, is the data controller for personal information processed through cosykiller.com. Contact us at [email protected].

What we collect

  • Order data: name, email, phone, billing and shipping address, order history.
  • Payment data: handled entirely by Stripe. We never store card numbers.
  • Contact form data: whatever you send us.
  • Newsletter and event signups: your email address, plus the name, phone number and party details you give us on a live-event form.
  • Marketing preferences: whether you ticked the marketing box, when, and the exact wording you agreed to.
  • Analytics: only if you've consented. See "Cookies and analytics" below.

Why we process it

  • To fulfil your order (performance of contract) — we need a name and a shipping address.
  • To email you about your order (performance of contract) — confirmation, dispatch, refund.
  • To keep a record of your order in our customer database (legitimate interests) — every order is recorded in ActiveCampaign, the system we use to keep track of customers, so we can answer a question about it later and see your history if you get in touch. This does not put you on any marketing list.
  • To send marketing email (consent) — only if you ticked the box at checkout or signed up to the newsletter. Newsletter signups are confirmed by a link we email you. Checkout opt-ins are recorded against your order, with the date and the exact wording you agreed to.
  • To remind you about an unfinished order (consent) — the same tickbox. We don't send these unless you asked for marketing email.
  • To see which pages a customer has visited (consent) — only if you accepted marketing cookies and asked for marketing email. Either one off means no tracking.
  • To answer a live-event enquiry (steps prior to a contract) — so we, or the travel agent handling cabins, can get back to you.
  • To answer your contact form (legitimate interests).
  • To comply with UK tax law (legal obligation) — we have to keep certain sales records for six years.

Who we share it with

We don't sell your data. We use a small number of processors to run the site:

  • Stripe — payment processing.
  • Resend — transactional email (order confirmation, dispatch).
  • Cloudflare — hosting and DDoS protection.
  • Royal Mail (and international postal partners) — shipping.
  • ActiveCampaign — our customer database and marketing email. Based in the United States.
  • Google Analytics 4 and Meta Pixel — analytics and advertising, only if you've given consent.

Our ActiveCampaign account is operated by RHG Events Ltd, which also runs other Red Herring Games brands. Asking for email from Cosykiller is not agreeing to hear from those brands, and we don't treat it that way.

Sending data outside the UK

Some of our processors — ActiveCampaign, Stripe, Cloudflare and Resend — are based in the United States or store data there. Those transfers are covered by the UK Addendum to the EU Standard Contractual Clauses, or by the UK extension to the EU–US Data Privacy Framework where the processor is certified under it. Ask us and we'll tell you which applies to which.

How long we keep it

  • Order records: 6 years (HMRC).
  • Contact form messages: 2 years, then deleted.
  • Analytics: Google Analytics retention set to 14 months.
  • Customer record in ActiveCampaign: while you're a customer, and three years after your last order or message.
  • Marketing consent records: for as long as we rely on them, and three years after you unsubscribe, as evidence we had your permission.
  • Page-visit history: three years.

Your rights

Under UK GDPR you have the right to:

  • Ask for a copy of the data we hold on you.
  • Ask us to correct anything that's wrong.
  • Ask us to delete your data (subject to our legal obligation to retain tax records).
  • Withdraw consent for analytics and advertising cookies at any time, using the Cookie preferences link in the footer.
  • Stop marketing email at any time — every email has an unsubscribe link, and it takes effect immediately.
  • Object to us keeping a record of your order in our customer database, which we rely on legitimate interests for.
  • Complain to the Information Commissioner's Office.

Email [email protected] to exercise any of these rights. We'll reply within 30 days.

Cookies and analytics

See our cookie policy for the full list. Analytics and advertising cookies are off by default and only fire after you accept them on our consent banner.

Changes

Material changes will be notified in the cookie banner for at least 14 days and highlighted on this page.