The current website is committed to protecting your security and privacy and takes our responsibility regarding customer information seriously. We fully comply at all times with UK data protection legislation, including the UK GDPR and the Data Protection Act 2018.
We use secure, encrypted connections for all financial transactions processed through Stripe. We keep your information confidential and only hold it for as long as is legitimate and appropriate.
When you place an order we need to know your name, delivery address, email address, and payment details. Payment information is handled entirely by Stripe — we never store your card details. We use this information to process and fulfil your order, arrange delivery through Royal Mail, and communicate with you about your order.
The personal information you provide may be used for the following purposes:
— To process and fulfil your orders — To communicate with you about your account and purchases — To inform you of new products and exclusive offers (with your consent) — To improve your experience on our website
Your data will only be shared with relevant authorities to the extent necessary to comply with applicable law or as required in legal proceedings.
We share your information only with the partners required to fulfil your order: Stripe (payment processing) and Royal Mail (delivery). These partners are contractually bound to handle your data in accordance with UK GDPR. We do not sell or transfer your personal data to any other third party.
We use cookies and similar technologies (including localStorage) to maintain your shopping session and cart between visits. Stripe may set cookies during the checkout process for fraud prevention.
We also collect pseudonymous, cookieless page-view statistics on a legitimate-interests basis (UK GDPR Art. 6(1)(f)). This involves recording the page visited, device type, country code, and referring domain. Your IP address is irreversibly hashed with a secret key before storage — the raw IP is never retained, and the hash cannot be reversed or linked to you by any third party. No cookie is set for this purpose. You may object to this processing at any time by contacting us.
With your consent we additionally use Microsoft Clarity (operated by Microsoft Corporation, USA), which records anonymised session replays and heatmaps to help us understand how visitors use the site. If you accept analytics cookies, your browsing session is linked across pages using a stable browser identifier stored in localStorage. Microsoft processes data under standard contractual clauses (UK International Data Transfer Agreement) as the basis for transferring data outside the UK. You can manage your cookie preferences at any time via the banner at the bottom of the page.
You can control cookies through your browser settings, though disabling essential cookies may affect the functionality of the site.
Order and account information is retained for as long as your account is active and for up to six years thereafter to comply with our legal and tax obligations.
Cookieless page-view analytics records (pseudonymous IP hash, page path, device type) are retained for 13 months and then permanently deleted.
Cookie consent records are retained for 3 years from the date of your last consent decision. These records are required to demonstrate compliance with UK GDPR.
Newsletter subscription data is retained until you unsubscribe.
Under UK GDPR you have the right to: access the personal data we hold about you; have inaccurate data corrected; have your data erased (subject to legal retention obligations); restrict or object to processing; and receive your data in a portable format.
You also have the right to object at any time to processing based on legitimate interests (including cookieless analytics). We will cease that processing unless we can demonstrate compelling legitimate grounds.
To exercise any of these rights, or to unsubscribe from marketing communications, please contact us. We will respond within one calendar month.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk / 0303 123 1113.
We reserve the right to update this Privacy Policy as required by law or as our practices change. Any changes will be posted on this page and will take effect from the date of publication.
For any privacy enquiry, please contact us.
