Privacy policy

Placeholder privacy policy: review for UK GDPR compliance before launch.

What we collect

• Account details (name, email, password hash) if you create an account.
• Order details (items, delivery address, phone, email).
• Messages you send through our contact form.
• Your email if you join our newsletter.

How we use it

To process and deliver your orders, provide customer service, and (with your consent) send marketing emails. Our lawful bases are contract, legitimate interests and consent.

Who we share it with

Stripe (payments), our delivery partners such as Royal Mail (shipping), Supabase (secure database hosting), Vercel (website hosting) and our email provider. We never sell your data.

Your rights

You can request access to, correction of, or deletion of your personal data at any time by contacting us. You can unsubscribe from marketing in any email. You also have the right to complain to the ICO (ico.org.uk).

Retention

Order records are kept for 6 years for tax purposes; other data is deleted when no longer needed.