Privacy policy

[TO REVIEW] This privacy notice is a starting draft. Name the person responsible for data ("data controller") and check it before going live.

What we collect When you order, we collect your name, email address, phone number and delivery address. Payments are handled by Stripe, so we never see your full card details.

Why we use it - To deliver your order and send you order and dispatch emails. - To contact you about your order (for example on WhatsApp if you message us). We don't sell your details and we don't send marketing unless you ask us to.

Who we share it with - Stripe — to take payment. - Our delivery company — to deliver your parcel. [TO REVIEW: e.g. Royal Mail] - Resend — to send order emails. - Supabase and Vercel — the services that host our website and orders.

How long we keep it We keep order records for 6 years for tax and accounting reasons, then delete them.

Cookies This site only uses essential storage — for example to remember what's in your bag. We don't use advertising or tracking cookies, so there's no cookie banner. If we add analytics later we'll ask first.

Your rights You can ask to see, correct or delete the information we hold about you by messaging us. You can also complain to the Information Commissioner's Office (ico.org.uk).

Contact: [TO REVIEW: email address]