1. What we collect
Order data: name, email, shipping address, and the contents of your order. This is necessary to fulfil the contract.
Account data: email address and a salted password hash. We never store passwords in plain text.
Technical data: IP address, user agent, and pages requested, retained in server logs for security and abuse prevention.
2. What we do not collect
We do not store card numbers. Payment details are entered directly with the payment provider.
We do not sell personal data, and we do not build advertising profiles from purchase history.
3. Cookies and advertising
Essential cookies keep your session and cart working. Advertising cookies are used only if you consent, and consent is requested before any advertising script runs.
Where Google AdSense is enabled, Google may use cookies to serve ads based on prior visits to this and other sites. You can opt out of personalised advertising in your Google ad settings.
4. Processors
We share the minimum data necessary with payment processors, shipping carriers, our hosting provider and our email provider. Each is bound by a data processing agreement.
5. Retention
Order records are kept for as long as tax and consumer-protection law requires. Account data is kept until you delete the account. Server logs are kept for 30 days.
6. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing.
Requests can be sent to the address in the footer. We respond within 30 days.