Privacy Policy

Data We Collect

When you place an order or create an account, we collect:

• Name and email address
• Shipping address and phone number
• Order history
• Hashed password (account holders only — never stored in plain text)

How We Use Your Data

We use your personal data solely to process and fulfil your orders, communicate with you regarding your orders, and (if you have an account) to provide order history access. We do not sell, share, or rent your data to third parties.

Data Retention

Order data is retained for 7 years for legal and accounting purposes. Account data is retained until you request deletion. You may request deletion of your data at any time by contacting us.

Cookies

We use only essential cookies required for the operation of our website, including session management. We do not use tracking, advertising, or analytics cookies.

Your Rights

Under UK GDPR, you have the right to access, correct, and delete your personal data. To exercise these rights, contact us at the email address listed on our Contact page.

Security

All data is transmitted over HTTPS. Passwords are hashed using bcrypt before storage. We take reasonable technical and organisational measures to protect your personal data.