Data we collect
- Account data: name, email address, and a securely hashed password when you create an account
- Order data: shipping address, contact details, and order history needed to fulfil your purchases
- Payment data: processed entirely by our payment provider (Worldpay) — we never store card details
- Contact messages: messages you send via the contact form
How we use your data
We use your data solely to operate the store: processing orders, providing customer support, maintaining your account, and meeting legal obligations. We do not sell or share your personal data with third parties for marketing purposes.
Data security
Account passwords are hashed using industry-standard algorithms. Payment is handled entirely by our PCI-DSS compliant payment provider. Data is stored in secured databases with access restricted to authorised personnel.
Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data, and to object to or restrict its processing. To exercise these rights, contact us via the contact page.
Cookies
Either remove Google Analytics/Tag Manager entirely, or: add a cookie-consent banner that blocks them until accepted, and rewrite this section: “We use essential cookies to run the site, and — with your consent — Google Analytics to understand site usage. You can decline analytics cookies at any time via [link].” Also add data retention periods, lawful basis, and the right to complain to the ICO.