Privacy Policy

• Messages you send us. When you use the Contact Us form, we receive your name, email address, subject and message so we can reply. They are stored in Google Cloud Firestore, and a copy is emailed to us through our email provider, Resend.
• Purchases. Payments are handled by Stripe Checkout. We never see or store your card details. Stripe shares with us what we need for your order and invoice, such as the products bought, your name, email address and billing details. Stripe's own privacy policy covers the payment itself.
• Analytics, only if you agree. With your consent, Google Analytics (through Firebase) records which pages you view and actions such as adding to cart or starting checkout, along with your device, browser and approximate location. It sets cookies (such as _ga) to do this. It stays off until you choose "Accept" in the cookie banner, and you can change your choice at any time with "Cookie settings" at the bottom of every page.
• Technical data. Our hosting provider, Amazon Web Services, processes your IP address and request details to deliver pages and to protect the site from abuse (for example, limiting how often a form can be sent). We don't use this to identify you.
• Kept only in your browser. Your cart and your cookie choice are saved in your browser's local storage. Your cart is sent to us only when you start checkout.

We don’t sell your personal information, we don’t use advertising trackers, and there are no user accounts or passwords on this site.

Only the service providers that run the site for us, and only for that purpose: Stripe (payments), Google (Firestore storage and, with your consent, Analytics), Resend (email delivery) and Amazon Web Services (hosting). We may also disclose information if the law requires it. These providers may process data in countries other than your own.

• Contact messages: for as long as we need to handle your enquiry and keep a record of it. Ask us and we’ll delete yours.
• Purchase records: for as long as tax and accounting rules require.
• Analytics data: for the retention period set in our Google Analytics account.

You can ask to see, correct or delete the personal information we hold about you, and you can withdraw analytics consent at any time through "Cookie settings". To make a request, use the Contact Us form. You may have further rights under the privacy laws where you live.

This site is not directed at children under 13, and we don’t knowingly collect their personal information.

The site is served only over HTTPS, payment details never reach our servers, stored messages can only be read by us, and access to our systems is restricted.

If we change this policy, we’ll update it here and change the “Last updated” date above.