How we collect, use and protect your data.
Privacy Policy
Legal
Placeholder policy — review with counsel before you rely on it.
Who we are
This store ("we") is the data controller for the personal data described below. Questions about your data? Email [email protected].
What we collect
Account details (name, email, password hash), order and payment history, shipping/billing addresses, support messages, and — if you consent — analytics and marketing cookie data. See our cookie banner to review or change consent at any time.
Who we share it with (processors)
We only share what a processor needs to do its job:
- Stripe — payment processing. Card data goes directly to Stripe; we never store full card numbers.
- Our email provider (SMTP) — transactional and, with your consent, marketing email.
- Cloudflare — CDN, DNS and edge security; it processes request metadata (including IP) to serve and protect the site.
- AI / LLM providers — when you use the on-site AI assistant, your message and the relevant context are sent to the configured large-language-model provider (for example OpenAI, Anthropic or Google) to generate a reply. Don't paste anything into the assistant you wouldn't want processed by a third party.
Your rights
Under the GDPR you can access, export, correct, or delete your data, and withdraw consent. Logged-in customers can do this instantly from your privacy hub: download a machine-readable copy of everything we hold (Art. 15) or delete your account (Art. 17). You can also lodge a complaint with your local supervisory authority.
Retention
We keep order records for as long as tax and accounting law requires, then anonymise them. Everything else is deleted when you close your account.