Privacy Policy

Most of what we hold is information you enter yourself. Placing an order requires a name, an email address, a delivery address, a billing address and a telephone number for the carrier.

• Order details — the items ordered, quantities, prices and any note you add.
• Delivery details — the address the parcel goes to and a contact number for the carrier.
• Account details — if you create an account, your saved addresses and order history.
• Correspondence — messages you send us about an order, a return or a product question.

You do not need an account to order. Checking out as a guest works exactly the same way, and we keep the order record either way because we are required to.

We never see or store your full card number. Card details are entered directly into the payment provider's secure fields and processed by them. What reaches us is confirmation that a payment succeeded or failed, the payment method type, and the last four digits for identifying the transaction.

This means we cannot take a card number by email or telephone, and we will never ask you for one. If you receive a message that appears to come from this store asking for card details outside the checkout, it did not come from us.

This site runs on the Shopify platform. Like almost every hosted store, it records basic technical data when a page loads: the pages requested, approximate location derived from network address, referring page, browser and device type, and the time of the request.

This keeps the store working and shows us in general terms which pages and categories are used. It is not used to build a profile of you as an individual, and we do not attempt to identify visitors from it. What is stored in your browser, and how to control it, is set out in the Cookie Policy.

Every piece of information we keep serves at least one of the following purposes.

• To fulfil an order. An order cannot be picked, dispatched or delivered without a name, address and contact detail.
• To handle returns and faults. Resolving a return or a warranty claim requires the original order record.
• To meet legal and accounting duties. Sales and tax records must be retained for the periods the law requires.
• To prevent fraud. Order and payment data is checked for signs of fraudulent use.
• To keep the store secure. Technical logs help identify faults, abuse and attacks.

We do not use your data for advertising profiles, and we do not add customers to a marketing list without a clear opt-in that you can withdraw at any time.

Running a store requires service providers. Each receives only what it needs, and none may use your information for its own purposes.

• Ecommerce platform. Shopify hosts the store and processes orders.
• Payment providers. They process the payment and carry out fraud checks.
• Carriers. They receive the delivery name, address and contact number needed to deliver the parcel.
• Email provider. Order confirmations and replies are sent through a commercial email service.
• Accounting software. Invoice and tax records are maintained there.

Some providers store data on servers outside your state or country. Where information moves internationally, we rely on the safeguards the provider commits to under its own data protection terms.

Order records, including what was bought and where it was sent, are kept for six years from the date of the order. This reflects the period in which a dispute or a tax enquiry could reasonably arise.

Enquiries that do not lead to an order are kept for twelve months. Account details are kept until you delete the account, after which the account is removed and only the underlying order records are retained for the period above.

Marketing consent records are kept for as long as the consent stands, plus two years after withdrawal, so we can show when and how consent was given and withdrawn.

Depending on where you live you may have specific statutory rights. We apply the following to every customer as a matter of practice, whatever their location.

• Access. Ask what we hold about you and receive a copy.
• Correction. Ask us to fix information that is wrong or incomplete.
• Deletion. Ask us to erase data we no longer have a reason to keep.
• Objection. Ask us to stop a particular use of your data.
• Portability. Ask for the data you gave us in a common, readable format.
• Withdraw consent. Unsubscribe from marketing at any time using the link in any marketing email.

Requests are completed within thirty days. We may need to verify your identity first, and we may keep material where a legal or accounting duty requires it, in which case we tell you and explain why.

A request to delete your data does not cancel an order in progress, and it cannot remove records we are legally required to retain, such as tax invoices.

This store sells to adults and is not directed at children. We do not knowingly collect personal information from anyone under sixteen. If you believe a child has provided information here, tell us through the store's contact channel and we will delete it promptly.

The store runs over an encrypted connection, and payment data is handled entirely by the payment provider. Access to order records is limited to those who need it to fulfil, support or account for orders, and administrative accounts are protected by strong credentials and multi-factor authentication.

No system is completely secure and we do not claim otherwise. Please do not send card numbers, passwords or other sensitive credentials by email. If we become aware of a breach affecting your personal data, we will notify affected customers and the relevant authority as required by law.

This policy is reviewed whenever our practices change and at least once a year. The date shown at the top of the page is when the current version took effect, and it replaces all earlier versions in full.

Where a change materially affects how we handle existing customer data, we notify affected customers directly rather than relying on the published page alone.