Privacy policy
Last updated: September 23, 2026
Privacy Policy
1. What we collect
From you: name, email, shipping and billing address, phone number, order contents, support messages and reviews.
Automatically: IP address, browser and device type, operating system, referring page, pages viewed, and similar data from cookies.
From others: payment confirmation and fraud signals from payment processors; delivery status from carriers. We never receive or store full card numbers.
2. Why we use it
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order | Contract |
| Order and shipping notifications | Contract |
| Customs declarations for import into the US | Legal obligation |
| Returns, refunds and support | Contract |
| Fraud prevention and security | Legitimate interests |
| Analytics | Consent |
| Marketing emails and advertising | Consent |
| Accounting and tax records | Legal obligation |
Note on customs: because every shipment into the United States now requires a customs entry, your name and address are transmitted to US Customs and Border Protection and to our carrier's customs broker. This is unavoidable and required by law.
3. Cookies
Strictly necessary cookies run without consent. Analytics and advertising cookies are set only after you accept them, and you can withdraw consent at any time.
4. Retention
Order and accounting records: 5 years from the end of the tax year. Support correspondence: 24 months. Marketing consent: until withdrawal plus 12 months. Analytics: 14 months.
5. Security
Data is encrypted in transit. Access is limited to people who need it to fulfil orders and answer support.
6. Children
The store is not directed at children under 16 and we do not knowingly collect their data.
7. US state privacy rights
If you live in California, Colorado, Connecticut, Virginia, Texas, Oregon or another state with a comprehensive privacy law, you may have the right to:
- know what personal information we hold and how we use it
- request a copy in a portable format
- correct inaccurate information
- request deletion
- opt out of sale, sharing, or targeted advertising
- not be discriminated against for exercising these rights
California residents (CCPA/CPRA): in the past 12 months we have collected identifiers, commercial information (purchase history), internet activity and geolocation inferred from IP. We have not sold personal information. You may exercise your rights, including through an authorised agent, by emailing [SUPPORT EMAIL].
To make any request, email [SUPPORT EMAIL] with the subject "Privacy request". We verify identity by matching the details against an order. We respond within 45 days, extendable once by a further 45 days.
8. Changes
The version in force is the one published here, dated above.