Privacy Policy

Last updated: March 2026

1. Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under UK GDPR.

2. Information We Collect

(a) Information you provide: name, email address, postal address, order details, messages sent via contact forms, and newsletter signup details.

(b) Payment information: payments are processed by Stripe. We do not receive or store your full card details.

(c) Automatically collected data: device/browser information, IP address, and analytics data gathered via cookies where consented.

3. How We Use Your Information

To process and deliver orders and provide customer support.

• To communicate about orders, enquiries, and updates.

• To send newsletters if you have opted in (you can unsubscribe at any time).

• To maintain website security, performance and improve user experience (including analytics where consented).

• To comply with legal, tax and accounting obligations.

4. Legal Bases for Processing

We process personal data under one or more of the following legal bases: Contract (to fulfil your order), Consent (for marketing/newsletters and non‑essential cookies), Legitimate Interests (analytics, site operations), and Legal Obligation (tax and accounting).

5. Sharing Your Information

We share data only with trusted providers necessary to operate the website and fulfil orders, such as hosting, payment processing (Stripe), email newsletter platforms, security and analytics tools. These providers process your data under appropriate contractual safeguards. We do not sell your personal data.

6. Cookies and Similar Technologies

We use essential cookies for core site functionality and, with your consent, analytics/marketing cookies to understand site usage and improve performance. You can manage preferences through the on‑site cookie banner/settings. For details, see our Cookie Policy.

7. Data Security

We use appropriate technical and organisational measures to protect your data, including SSL encryption, firewall/WAF, malware protection and backups. Access is limited to essential systems and authorised personnel.

8. Data Retention

Order and account records may be retained for up to 6 years to meet legal and tax requirements. Newsletter data is stored until you unsubscribe. Contact form messages may be retained for a reasonable period for customer service and record‑keeping.

9. Your Rights

You have the right to request access, correction, deletion, restriction, or portability of your personal data, and to object to certain processing. You may withdraw consent to marketing at any time. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.

10. International Transfers

Where service providers are located outside the UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data.

11. Children’s Data

Our website is not intended for children. We do not knowingly collect data relating to children.

12. Updates to This Policy

We may update this Privacy Policy periodically. We will post the updated version on this page with a revised “Last updated” date.

13. Contact

For privacy requests or questions, please contact us via the Contact Me page on the website.