Privacy Policy

1. Who We Are

We are the data controller responsible for your personal data.

2. Information We Collect

We may collect and process the following personal data:

a) Information You Provide to Us

• Name
• Billing and delivery address
• Email address
• Phone number
• Account login details (if applicable)
• Order details and correspondence

b) Payment Information

Payments are processed securely via Stripe. We do not store or process your card details. Stripe may collect and process payment data in accordance with their own privacy policy.

c) Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Cookies and similar technologies

3. How We Use Your Data

We use your personal data to:

• Process and fulfil orders
• Manage payments and prevent fraud
• Communicate with you about orders or enquiries
• Provide customer support
• Improve website performance and user experience
• Comply with legal and accounting obligations
• Send marketing communications (only if you have opted in)

4. Legal Basis for Processing

Under UK GDPR, we process your data on the following legal bases:

• Contract: To fulfil orders and provide services
• Legal obligation: For tax, accounting, and regulatory compliance
• Legitimate interests: To operate and improve our business
• Consent: For marketing communications and cookies (where required)

5. Sharing Your Data

We may share your data with trusted third parties, including:

• Payment processors (e.g. Stripe)
• Delivery and courier services
• Website hosting and IT service providers
• Accounting and professional advisors
• Analytics and marketing platforms (e.g. Google Analytics, if used)

All third parties are required to handle your data securely and lawfully.

6. International Data Transfers

Some service providers (such as Stripe) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK GDPR-approved transfer mechanisms.

7. Data Retention

We retain personal data only for as long as necessary:

• Order and invoice data: up to 6 years for legal and tax purposes
• Marketing data: until you withdraw consent
• Website analytics: according to platform retention settings

8. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Withdraw consent at any time
• Request data portability
• Lodge a complaint with the Information Commissioner's Office (ICO)

ICO website: https://www.ico.org.uk

9. Cookies

We use cookies to:

• Enable core website functionality
• Analyse traffic and usage
• Improve performance and user experience

You can manage or disable cookies through your browser settings. For more information, please see our Cookie Policy.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

• Secure servers and encryption
• Restricted access controls
• SSL protection on our website
• PCI-compliant payment processing via Stripe

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and recommend reviewing their policies separately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact: