1. Information We Collect
We collect personal information when you:
-
Place an order (e.g. name, billing and shipping address, email, and payment details).
-
Contact us (e.g. via email or phone).
-
Interact with our website, including through optional cookies and analytics tools.
We only collect data when necessary to provide our services, with your consent, or to meet legal obligations.
2. How We Use Your Information
We use your information to:
-
Process and fulfill orders (performance of contract).
-
Improve our website, products, and services (legitimate interest).
-
Communicate updates, promotions, and customer support (with your consent, where required).
We do not use your data for automated decision-making or profiling.
3. Sharing Your Information
We never sell your personal data. We may share it with trusted third parties only when necessary:
-
Payment processors (e.g. Stripe) — for secure transaction processing.
-
Shipping providers (e.g. Royal Mail, DPD) — to deliver your orders.
-
Legal authorities — if required to comply with legal obligations.
These processors are contractually obligated to protect your information and only use it for the purposes outlined.
4. Security of Your Data
We take your privacy seriously and implement strong technical and organizational measures, including:
-
Securing public endpoints with password protection and two-factor authentication.
-
Cloud backups encrypted end-to-end to prevent data loss.
-
Ongoing reviews of our security protocols to align with industry standards.
Payment details are processed securely through Stripe and are never stored on our servers.
5. Your Rights
You have the following rights under the UK GDPR:
-
Access – to know what personal data we hold.
-
Rectification – to correct inaccurate or incomplete data.
-
Erasure – to request deletion of your data, where applicable.
-
Restriction – to limit how your data is used.
-
Objection – to the processing of your data in certain situations.
-
Data Portability – to receive your data in a structured, machine-readable format.
To exercise your rights, please contact us via the contact page. We aim to respond within 14 days.
6. Updates to This Policy
We may update this policy from time to time. Any changes will be posted on this page.