Privacy Policy

1. Information We Collect

When you place an order or create an account, we collect your name, email address, shipping address, and payment information (processed securely by Stripe — we never store your card details). We also collect browsing data via server logs to improve your experience.

2. Legal Basis for Processing

We process your personal data on the following legal bases: (a) to perform the contract of sale when you place an order; (b) to comply with legal obligations such as tax and accounting requirements; and (c) for our legitimate interests in operating and improving our business, where those interests are not overridden by your rights.

3. How We Use Your Information

• To process and fulfil your orders.
• To send order confirmation and shipping updates.
• To respond to customer service enquiries.
• To improve our website and product offerings.

4. Sharing Your Information

We do not sell your personal information. We share data only with service providers required to run our business: Stripe (payments), shipping carriers (to fulfil your order), and Clerk (account authentication). All providers are contractually bound to protect your data. Where we transfer data outside your country of residence, we ensure appropriate safeguards are in place.

5. Cookies

We use essential cookies to keep your shopping cart between visits and to authenticate your account. We do not use tracking or advertising cookies.

6. Data Retention

Order and account data is retained for seven years for legal and tax compliance. You may request deletion of your account at any time by contacting us.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us. We will respond within 30 days.

8. Security

All data is transmitted over HTTPS. Payment card data is handled entirely by Stripe and never touches our servers. We follow industry best practices to protect your information against unauthorised access.

9. Changes to This Policy

We may update this policy as our practices change. We will notify registered customers of material changes via email. Continued use of the site after changes constitutes acceptance.