What we collect, why we collect it, and the control you have over it.
Last updated 16 July 2026
This policy explains how we handle your personal data when you visit this website or buy from us. We are the data controller for the information described below.
Our registered business name, address and contact email are shown at the end of this page and in the site footer.
We do not collect or store your full payment card details at any point.
We use your data to process and deliver orders, provide customer support, handle returns, send marketing you have opted into, prevent fraud, and improve the store.
Our lawful bases are: contract (to fulfil your order), consent (marketing and non-essential cookies), legitimate interests (to run and secure the business), and legal obligation (to keep tax records).
We share data only with the providers who make the store work: our ecommerce platform (Shopify), payment processors, delivery couriers, and email and analytics providers. Each processes data on our instructions.
We never sell your personal data.
Some providers may process data outside the UK or EEA. Where that happens, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
Essential cookies keep your cart and checkout working and cannot be switched off. Analytics and marketing cookies are only set with your consent, and you can withdraw that at any time through your browser settings or our cookie banner.
Order and transaction records are kept for 7 years to meet UK tax and accounting requirements. Marketing data is kept until you unsubscribe. Support enquiries are kept for 2 years.
Under UK GDPR you have the right to access your data, correct it, have it erased, restrict or object to how we use it, request portability, and withdraw consent at any time.
To exercise any of these, email us using the address below. We respond within 30 days and never charge for it.
If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk.
This site is served over HTTPS and payments are handled by PCI-DSS compliant processors. No system is perfectly secure, but we take appropriate technical and organisational measures to protect your data.
This store is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has provided us with personal information, contact us and we will delete it.
We may update this policy from time to time. The “last updated” date at the top of this page always reflects the current version.
