Privacy Policy

This policy explains how we handle personal data under the UK GDPR and Data Protection Act 2018.

Personal data we handle

Name, email, delivery address, order history, and limited payment metadata (we do not store full card numbers).

Lawful basis

Contract (to fulfil orders), legitimate interests (to improve our service), and consent (for marketing).

Cookies, analytics & marketing

See our Cookie Policy. Analytics and marketing cookies run only with your consent.

Processors

Payment providers, shipping carriers, email and analytics tools. We use providers with appropriate safeguards.

Newsletter

Opt-in only. Unsubscribe at any time via the link in any email.

Retention

Order data is retained for 7 years for tax compliance. Marketing data until you withdraw consent.

Your rights

Access, rectification, erasure, restriction, portability and objection. To make a request, contact us.

Complaints

You may complain to the Information Commissioner's Office (ICO) at ico.org.uk.