Issued 29 July 2026 · UK GDPR, Data Protection Act 2018, PECR
Privacy policy
Plain version: we take the details needed to quote, deliver and invoice an order, we keep the paperwork for as long as tax law says, and we never sell anything about you. The clauses below say the same thing properly.
1. Who we are
(“we”, “us”, “our”) trades as and runs . We are the data controller for everything described here.
2. What we collect
- Identity and contact data — name, billing and delivery address, email address, phone number.
- Order and payment data — the lines you ordered, your order history, and confirmation that payment succeeded. Card details go straight to our payment provider; we never see or store a full card number.
- Technical data — IP address, device and browser type, and cookie data.
- Correspondence — what you write to us by email or through the order request form, and notes from phone calls about an order.
- Marketing preference — whether you have opted in to email from us.
3. Why we use it
Every use has a lawful basis under UK GDPR:
| Purpose | Lawful basis |
|---|---|
| Quoting, processing and delivering an order | Performance of a contract |
| Answering questions and helping after a sale | Contract, or our legitimate interest in supporting customers |
| Sending marketing email | Consent, or the soft opt-in for existing customers |
| Preventing fraud and keeping the site up | Legitimate interests |
| Measuring how the site is used | Consent, given in the cookie banner |
| Keeping tax and accounting records | Legal obligation |
4. Who else sees it
Only the suppliers who help us run the shop, and only the part of it they need:
- Payments: Stripe and PayPal.
- Delivery: Royal Mail and DPD.
- Hosting: Shopify.
- Email and order correspondence: Mailchimp.
- Site measurement: Google Analytics.
We also disclose data when the law requires it, such as a court order or a request from the tax authority. We do not sell personal data and we do not hand it to anyone for their own marketing.
5. Data leaving the UK
Some of those suppliers store data outside the United Kingdom. Where they do, the transfer runs either on a UK adequacy decision or on appropriate safeguards — normally the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
- Order and transaction records: 6 years, as UK tax and accounting rules require.
- Account data: while the account is open, then 24 months after it closes.
- Marketing data: until you unsubscribe, which we action within 5 working days.
- Quotes and support messages: 24 months from the last message.
At the end of a period we delete the data or strip it of anything that identifies you.
7. What you can ask for
Under UK GDPR you can ask us for a copy of your data, ask us to correct or erase it, ask us to restrict how we use it, or ask us to send it to another provider. You can object to anything we do on the basis of legitimate interests, and you can withdraw consent whenever you like — withdrawing it does not undo what was lawful beforehand.
Write to and we answer within one month. We may check who you are first, so that your data does not go to someone else.
8. If we get it wrong
Tell us first at and we will look into it and reply. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113, and speaking to us first does not affect that right.
9. Cookies
Strictly necessary cookies load the pages and remember whether you are reading prices in euro or sterling. Analytics and advertising cookies are set only if you accept them in the banner, and you can change that answer at any time by reopening the banner from the footer.
10. Changes
We update this policy when the way we handle data changes. The date at the top is always the current version, and if a change materially affects you we say so on this page and email the people it affects.