Privacy Policy
Last updated: 09 September 2025
We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy explains what data we collect, how we use it, and your rights under the GDPR and applicable privacy laws.
1. Data We Collect
- Information you provide: name, email, phone, shipping/billing address, order details, support messages.
- Payment data: processed by PCI-compliant payment providers; we do not store full card numbers.
- Technical data: device, browser type, IP address, pages visited, and cookies for functionality and analytics.
- Marketing preferences: newsletter opt-ins and communication choices.
2. Legal Bases for Processing (GDPR)
We process your data to fulfill orders, provide support, improve services, prevent fraud, and meet legal obligations.
3. How We Use Your Data
- Process and deliver orders, provide customer support, and manage returns.
- Personalize your experience and improve our website and product offerings.
- Send service emails (order confirmations, shipping updates) and, with consent, marketing communications.
- Detect, prevent, and investigate fraud or security incidents.
4. Cookies & Similar Technologies
We use essential cookies for core functionality (e.g., cart), and optional analytics cookies to understand site usage. You can manage preferences via your browser settings or consent tools where available.
5. Sharing & Transfers
- We share data with service providers (e.g., payment processors, couriers, IT/hosting) under contracts that protect your data.
- We do not sell or rent your personal data.
- Where data is transferred outside the EEA/UK, we rely on appropriate safeguards (e.g., Standard Contractual Clauses).
6. Data Retention
We keep personal data only as long as necessary for the purposes described, including legal, tax, or accounting requirements. Typical retention: orders (6–10 years as required by law), support tickets (up to 2 years), marketing preferences (until you opt out).
7. Your Rights
- Access, rectify, or erase your personal data.
- Restrict or object to processing; data portability where applicable.
- Withdraw consent at any time (does not affect prior lawful processing).
- Lodge a complaint with your local data protection authority.
8. Security
We implement technical and organizational measures to protect your data, including encryption in transit, access controls, and vendor due diligence. No method of transmission is 100% secure; we strive for industry-standard protection.
9. Children
Our services are not directed to children under 16. We do not knowingly collect data from children. If you believe a child provided personal data, contact us to delete it.
10. Changes
We may update this policy periodically. We will post the revised version with an updated date.
11. Contact
For privacy requests or questions, contact us via the “Support” section. We will respond within applicable legal timeframes.