Privacy policy

Who is responsible for your data

[Registered company name Ltd], [Street address], [City], [Postcode], [Country], is the controller of your personal data under the UK GDPR and the Data Protection Act 2018. Contact: [support@your-domain].

What we collect and why

• Orders: name, delivery and billing address, email, phone and order details, to process and deliver your order and handle returns (performance of a contract), and to keep accounting records (legal obligation).
• Your account: email address, and the name, phone number and delivery addresses you choose to save, so you can sign in, check out faster and see your orders (performance of a contract). We send sign-in links by email; there is no password to store.
• Customer service: the messages you send us, to answer them (legitimate interest).
• Payments are handled by our payment provider, Stripe; we never see or store your full card details.

Cookies

We use only strictly necessary cookies: ts_cart remembers the contents of your basket for up to 30 days and contains no personal data; when you sign in, authjs.session-token keeps you signed in for up to 30 days, and short-lived authjs.* cookies protect the sign-in form. We do not currently use analytics or advertising cookies; if that changes, we will ask for your consent first.

Who we share data with

Delivery companies (to deliver your order), our payment provider (Stripe), our email provider (to send sign-in links and order emails), and IT service providers that host our systems, all under contracts that protect your data. We never sell your data.

How long we keep it

Order records are kept for six years for tax and accounting purposes. Customer service messages are kept for two years. Your account and saved addresses are kept until you ask us to delete them; past orders are then kept only as long as the law requires.

Your rights

You can ask for a copy of your data, and ask us to correct, delete or restrict it, or object to its use. Email us at the address above. You can also complain to the Information Commissioner's Office (ICO) (ico.org.uk).