Privacy policy

Who controls your information

The legal seller shown below controls the personal information used to operate this store. Use the privacy contact shown below for a rights request or complaint.

Support chat and live store activity

Our chat displays an automatic welcome. Replies are written by our support team, not generated by an AI agent. When you send your first message, we ask for your name and email to handle your support request. This does not subscribe you to marketing or verify your identity for account changes. Messages and contact details are encrypted at rest and accessible only to authorised support staff. Conversation access on your browser lasts up to 30 days; inactive support conversations are deleted after 180 days. Do not send card details, passwords or other sensitive information through chat.

With your optional measurement permission, visible pages send a presence update approximately every 25 seconds. Our internal live dashboard shows sessions active in the last 90 seconds, approximate location, market, device category and public page category. We do not retain the raw IP address in this presence data, and map coordinates are rounded to a whole degree. Presence records are removed after five minutes of inactivity. Refusing or withdrawing optional measurement stops new presence updates.

Information we collect

We collect contact and delivery details, order contents and status, payment-provider references, customer-account credentials in hashed form, support correspondence, fraud and security signals, cart-reminder choices, checkout activity needed to avoid treating an active checkout as abandoned, and first-party analytics events when optional measurement is accepted. With that permission, Meta Pixel and Conversions API can receive page and product views, cart and checkout actions, purchase value and currency, Meta browser identifiers, device and connection data, and normalized hashed contact and delivery fields used for event matching. We infer an approximate country, region and city from the connection for market selection and aggregate analytics, but do not store the full IP address in our first-party analytics records. Stripe receives payment details directly through its embedded Payment Element; the store does not receive the full card number.

Why we use it

We use information to form and perform the sales contract, take payment, prevent abuse, fulfil and track orders, provide support, process returns, keep financial and legal records, secure customer and administrator accounts, improve the store with consented analytics, measure advertising performance and build or reach relevant audiences through Meta only after optional consent. Browser and server events use the same event identifier where both are sent so Meta can deduplicate them. If a checkout is left after an email address is entered, we may send no more than four cart reminders after approximately 10 minutes, 4 hours, 10 hours and 24 hours. In Canada and Australia this sequence starts only after affirmative consent. In the United States and United Kingdom we provide a clear opportunity to refuse at collection and an unsubscribe link in every reminder. Depending on the jurisdiction, the legal basis is contract, legal obligation, legitimate interests such as security and service improvement, consent, or the locally applicable electronic-mail rule.

Who receives it

We share only what is needed with Stripe for payment, Arsys for hosting and transactional email infrastructure, the selected delivery carrier, Meta Platforms for consented advertising measurement and audience services, professional advisers and authorities where legally required. These providers may process information outside your country. We use contractual and other safeguards required for an applicable restricted international transfer. We do not sell personal information for money; some privacy laws may treat targeted-advertising disclosures as a sale or sharing, which you can refuse or withdraw through Manage cookies.

Retention and security

Order, payment-reference and tax records are retained for the period required by applicable accounting, tax, chargeback and consumer law. Customer profiles remain while the account or connected orders require them and are then deleted or anonymised where lawful. Expired authentication tokens and sessions are unusable; optional first-party analytics is retained only while needed to measure store performance and is then deleted or aggregated. Meta applies its own retention rules to events it receives under its business tools terms and privacy policy. Contact and delivery data is encrypted at rest, identifiers sent for Meta matching are normalized and hashed, passwords use one-way hashing, and administrative actions are access-controlled and audited. No internet service can guarantee absolute security.

Your choices and requests

You can buy without creating a password and can refuse optional analytics and advertising measurement. Meta Pixel is not loaded and Meta Conversions API events are not queued unless that optional choice is granted. Use Manage cookies in the footer to withdraw the choice and stop new optional events; the store also clears its accessible Meta browser cookies. Canada and Australia customers can leave cart reminders unticked; United States and United Kingdom customers can select the refusal shown beside the email field. Every cart reminder contains a direct unsubscribe link, and completing the purchase stops all unsent reminders for that cart. You may request access, correction or deletion where applicable, object to or restrict certain uses, withdraw consent, or complain. We may need to verify identity and may retain information that the law requires. We do not use solely automated decisions that create legal or similarly significant effects; automatic IP-based market selection only proposes a storefront and currency that the customer can change.

UK data-protection rights

Where UK data-protection law applies, your rights may include access, rectification, erasure, restriction, objection and portability. You may withdraw consent at any time without affecting earlier lawful processing and may complain to the UK Information Commissioner’s Office. Some rights depend on the lawful basis and statutory exceptions.

Children and changes

The store is not directed to children and does not knowingly seek their personal information. We update this policy when practices, providers or law materially change and publish a new effective date. Material changes do not create a new purpose for previously collected information without the notice or consent required by law.