Privacy

What we collect

• Contact details — your name and email address.
• Delivery and billing address — where an order is to be shipped and billed.
• Order history — the products, amounts and status of orders you place.
• Messages you send us — for example through the contact form, plus any order number you choose to include.
• Consent and preferences — your cookie and marketing choices.

We do not store your full payment card details; payment is handled by our payment provider.

Why we use it and our lawful basis

• To fulfil your order (taking payment, packing and delivery, refunds and returns) — lawful basis: performance of a contract.
• To answer your enquiries and provide support — lawful basis: performance of a contract or our legitimate interests in supporting customers.
• To meet our legal and accounting obligations — lawful basis: compliance with a legal obligation.
• Optional analytics and marketing — lawful basis: your consent, which you can withdraw at any time via our cookie preferences. These stay off until you opt in.

How long we keep it

We keep order and transaction records for as long as needed to fulfil the order and to meet UK tax and accounting requirements. Enquiry messages are kept only while needed to resolve your query and for a reasonable period afterwards. Consent records are kept until you withdraw consent.

Who we share it with

We share data only with service providers who help us run the shop under contract: our payment provider, our delivery/fulfilment partner and our site hosting. We do not sell your personal data. We may disclose data where we are legally required to do so.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to erase data, where the law allows;
• restrict or object to how we use your data;
• data portability, where it applies;
• withdraw consent at any time for consent-based processing.

To exercise any right, email [email protected]. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk. We would appreciate the chance to resolve any concern first.

Contact

See our terms and cookies pages for related information.