Your data
Privacy Policy
Last updated 23 August 2026
Draft for review. This wording is a working draft and has not been reviewed by the business owner or a solicitor. It should not be relied on as legal advice, and must be reviewed before launch.
What we collect
- Account details — email, and the name and phone number you choose to add.
- Order details — what you bought, the amount, and the delivery address.
- Usage — cart and wishlist contents, so they follow you between devices.
We never see or store your card details.Payment happens on Stripe's own checkout; we keep only Stripe's reference to the payment and the amount.
Why we hold it
To take payment, deliver the order, answer questions about it, and keep the records the law requires us to keep. We do not sell personal data, and we do not share it for anyone else's advertising.
Who processes it for us
- Stripe — payments.
- Supabase — the database holding your account and orders.
- Vercel — hosting this site.
- Resend — sending order and account email.
- Cloudinary — product imagery.
Each is bound to handle the data only on our instructions.
How long we keep it
Order records are kept as long as tax and accounting rules require. An account you close is deleted, other than what must remain attached to an order record.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email us via the contact page and we will reply within one month.
Cookies
What we set, and what you can turn off, is described in the cookie policy.