Privacy policy
This explains what we collect, why we collect it, and how to get it removed.
What we collect
When you order: your name, email, phone if you give it, and a delivery address. When you subscribe to the newsletter: your email only. When you use the contact form: your name, email and message. Card details are entered on Stripe and never reach our servers.
Who processes it
Stripe handles payments, [your email provider] sends our email, and [your host / Cloudflare] serves the site and keeps short-lived access logs containing IP addresses. Each of these only receives what it needs to do its job.
Why we keep it
To fulfil and support your order, to prevent fraud, and to meet accounting and tax record-keeping duties. We do not sell personal data, and we do not share it for anyone else advertising to you.
How long
Order records are kept for [7] years because tax law requires it. Newsletter subscriptions are kept until you unsubscribe. Contact-form messages are kept for [24] months.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email [[email protected]] and we will respond within [30] days. Deletion requests cannot remove records we are legally required to retain, such as invoices.
Cookies
The site sets a cookie to keep your cart, and a session cookie for staff signing into the admin. Stripe sets its own cookies during checkout, and our CDN sets one to route and protect traffic. We do not run advertising or cross-site tracking cookies.
Children
This is not a product for children, and the site is not directed at anyone under 16. We do not knowingly collect their data.