Privacy policy

[company name] is the controller responsible for processing your personal data.

• Address: [address]
• Email: [email]

Contact us at [email] if you have questions about how we process your data.

When you shop with us, we process:

• your name
• your email address
• your mobile number
• your delivery address
• what you ordered, prices and the delivery option you chose
• payment status, meaning whether your payment went through, and a payment reference
• what you write to us when you contact customer service

We get this data from you. From the payment service provider, we receive the payment status and the contact details you entered on the payment page. We never receive your card details.

• To carry out your purchase: receive and deliver your order, receive your payment, send the order confirmation and handle cancellations and complaints. Legal basis: contract (Article 6(1)(b) UK GDPR).
• To comply with accounting and tax rules, which require us to keep records of our sales. Legal basis: legal obligation (Article 6(1)(c) UK GDPR).
• To reply when you contact customer service. Legal basis: contract when your question concerns a purchase, otherwise our legitimate interest in being able to answer questions (Article 6(1)(f) UK GDPR).
• To prevent fraud and misuse of payments. Legal basis: our legitimate interest in protecting you and us against fraud (Article 6(1)(f) UK GDPR).

We need this data to receive and deliver your order. Without it, you cannot shop with us.

We do not send newsletters or marketing emails. We do not make decisions about you based solely on automated processing.

We share data with the recipients needed to carry out your purchase:

• Our payment service provider, which receives your payment. It receives the order number, items and amount from us, and you enter your payment details directly on its payment page. The provider may itself be a controller for part of the processing, for example to prevent fraud and to comply with payment regulations.
• The email service Brevo, which sends order confirmations and other emails about your order.
• The carriers that deliver your order. They receive your name, delivery address and mobile number, and sometimes your email address, so that they can deliver your parcel and notify you.
• Our hosting provider, where the online shop and its database are hosted.
• Meta Platforms Ireland (Facebook, Instagram), only if you have accepted cookies: see the section on cookies below.

If a recipient processes data outside the UK, this only happens with the safeguards required by UK data protection law, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the standard contractual clauses.

We may also be required to disclose data to public authorities when the law requires it.

• Data that forms part of our accounting records, for example about your order and payment, is kept for six years because UK tax law requires it.
• Other data about your order, for example your email address and mobile number, is kept for as long as you can bring a claim about the goods, that is six years after delivery, and longer only if a case is ongoing.
• Emails to customer service are kept while the case is open and then for as long as you can bring a claim about the goods.

After that, we delete the data or make it anonymous.

With your consent in the cookie banner, we use the Meta pixel from Meta Platforms Ireland to measure and improve our ads on Facebook and Instagram. It sets cookies (_fbp, _fbc) and tells Meta which pages and products you view and what you add to your cart. Once you have paid, our server also sends the purchase to Meta: order number, items and amount, plus your email address, mobile number, name, postcode and town or city in encrypted form (hash), your IP address and your browser. The legal basis is your consent, as required by the Privacy and Electronic Communications Regulations (PECR) and UK GDPR. Meta may transfer the data to the United States under the UK extension to the EU–US Data Privacy Framework.

Without your consent, nothing is loaded from Meta and nothing is sent there. You can change your choice at any time under “Cookie settings” at the bottom of the page. Your choice is stored in a cookie (consent) for one year.

Your cart is saved in your browser's local storage (localStorage) on your device, so that it is still there when you move between pages or come back later. This storage is strictly necessary for the cart to work, so it does not require consent. You can empty your cart at any time or clear the site data in your browser settings.

When you pay, you are on the payment service provider's payment page, where the provider's own information about personal data and cookies applies.

You have the right to:

• know what data we hold about you and get a copy of it
• have incorrect data corrected
• have your data erased, except data we must keep by law
• ask us to restrict the processing of your data
• receive the data you have given us in a machine-readable format (data portability)
• object to processing based on our legitimate interest

Email us at [email] if you want to use any of your rights.

Do you think we are processing your personal data incorrectly? Please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority under the UK GDPR and the Data Protection Act 2018 (ico.org.uk).

If we change how we process personal data, we will update this policy and the date at the top of the page.