Privacy & Cookie Policy

What we collect and why

We ask for as little as the order needs. Nothing here is used to build a profile of you beyond running the shop and measuring our advertising.

Data	Used for	Lawful basis
Name, delivery address, phone	Packing and delivering your order	Performance of a contract
Email address	Order confirmations, dispatch and tracking, replies to your questions	Performance of a contract
Order and payment status	Taking payment, refunds, accounting and tax records	Contract and legal obligation
Account password (hashed)	Letting you sign in to see past orders	Performance of a contract
Confirmation of research use	Selling these products lawfully	Legal obligation
Pages viewed, basket activity, device type	Keeping the site working and seeing which products people look at	Legitimate interests
Advertising identifiers and cookies	Measuring which adverts lead to orders	Your consent

We never take or store your card number. Card details are entered on the payment provider's own secure form and are never sent to our servers.

Cookies

There are two kinds on this site, and you control the second.

Essential cookies keep your basket, your sign-in and your order working, and remember your cookie choice. The site cannot function without them, so they are always on and need no consent.

Measurement and advertising cookies are set only if you press "Accept all". They let Google and Meta tell us that an advert we paid for led to an order. Until you agree, those tags are loaded in a restricted mode that stores nothing and sends no identifiers, and the Meta pixel is not loaded at all.

You can change your mind at any time — it takes effect immediately, and you can also clear cookies in your browser.

Who else sees your data

Only the companies that make an order possible, and only the part each of them needs. We do not sell your personal information, and we do not share it for anyone else's marketing.

Payment providers — to take payment and handle refunds. They receive your name, email and the amount; we receive only whether it was paid.
Delivery carriers — your name, address and phone, so the parcel arrives.
Email provider — to send order confirmations and dispatch notices.
Hosting and infrastructure — servers in the UK and EU that run this site.
Google (Google Ads) and Meta (Facebook, Instagram) — advertising measurement, only with your consent. They may process data outside the UK; those transfers rely on the UK International Data Transfer Addendum and equivalent safeguards.

How long we keep it

Order and payment records are kept for six years, because tax law requires it. Account details are kept until you ask us to close the account. Website measurement data is kept for up to 26 months. Anything we no longer need is deleted.

Your rights

Under UK GDPR you can ask us to:

give you a copy of the data we hold about you;
correct anything that is wrong;
delete your data, where we are not required to keep it;
stop using it for a particular purpose, including advertising measurement;
send your data to another provider.

Email [email protected] and we will reply within one month. If you are not happy with the answer you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first so we can put it right.

Age

This site is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us their details, tell us and we will remove them.

Contact

Questions about this policy, or about your data: [email protected].