Privacy Policy

Last updated: October 17, 2026

This policy explains what we do with the information you give us when you visit this shop, place an order, or get in touch, and what you can ask us to do with it. It applies to this site and to the emails we send you.

We ask for as little as the job needs, we do not sell it, and you can ask us to show you what we hold or to delete it.

What you give us. Your name, email address, delivery and billing addresses, and a telephone number where a carrier needs one. If you open an account, the password you choose, stored only as a one way hash that nobody here can read back.

What the order creates. What you bought, when, what you paid, the delivery service chosen, and anything you write in the order notes or send us by email.

What your browser sends. Your IP address, the kind of device and browser you are using, the pages you looked at and what you searched for, and the site that sent you here. This arrives automatically with every request and is how the basket remembers what is in it.

What we never see. Your full card number. Card details go straight from your browser to the payment processor, which returns a token we use to take the payment. We hold the last four digits and the expiry so you can recognise the card, and nothing else.

To take the order, charge for it, pack it, send it and tell you where it is. To answer you when you write. To deal with returns, refunds and warranty claims. To keep the accounts the law requires us to keep.

To check an order is genuine, which can mean comparing an address and a payment against patterns that look like fraud. To keep the site working and to understand, in aggregate, which pages and products people actually use.

To send you marketing only where you asked for it, and to stop the moment you ask us to.

Where the law asks us to name a basis for holding your information, it is one of these. To perform the contract you entered when you ordered. To meet a legal obligation, such as keeping tax records. Because you consented, which covers marketing and any non essential cookies. Or because we have a legitimate interest in running the shop safely, which covers fraud checks, security and basic analytics, and which never overrides your rights.

Only the firms that do a job we cannot do ourselves, and only the part they need:

• The payment processor, to take the payment and handle any refund or chargeback
• The carrier, to deliver the parcel, which means your name, address and often a phone number
• The company that sends our email, so a receipt or a dispatch note reaches you
• Our hosting and analytics providers, who hold the data the site runs on
• Anyone we are legally required to tell, such as a tax authority or a court order

We do not sell your information, and we do not share it for anyone else to advertise to you. If this shop were ever sold, the records would pass to the buyer, who would be bound by this policy until they told you otherwise.

Some cookies the shop cannot work without: the one that holds your basket, the one that keeps you signed in, and the one that protects forms from being submitted by somebody else. These are set whatever you choose.

Others are not needed to shop but help us understand how the site is used, or let an advertising network recognise a visit. Where this shop uses them, they are named in the list above. You can refuse or remove them at any time through your browser settings, which every browser offers, and the shop will still work.

If your browser sends a Do Not Track or Global Privacy Control signal, say so and we will act on it. We do not sell your information to anyone in any case.

We send marketing email only to people who asked for it. Every one carries an unsubscribe link that works immediately and does not ask you why.

Messages about an order you placed are a different thing: the receipt, the dispatch note and anything about a delay or a refund are part of the sale, so they are sent whether or not you take our marketing.

Write to us and we will do any of the following, free, within a month:

• Tell you what we hold about you, and give you a copy
• Correct anything that is wrong
• Delete it, where we are not required to keep it for the accounts
• Hand it to you, or to another shop, in a form a computer can read
• Stop using it for marketing, profiling or anything based on our legitimate interest
• Restrict what we do with it while a dispute is sorted out

We will not treat you differently for asking. If you think we have got it wrong, tell us first and we will look again; you can also complain to your data protection regulator, and nothing here takes that right away.

Order records for as long as the tax and accounting rules require, which is several years in most places. An account for as long as you keep it, and then deleted when you close it, apart from what the order records must retain.

Marketing consent until you withdraw it. Analytics in aggregate, where it stops being about you. Anything else only as long as the reason for holding it lasts.

The whole site runs over an encrypted connection. Passwords are hashed, never stored as you typed them. Card numbers never reach our servers. Access to order records is limited to the people who need it to do the job.

No system is perfect, and anybody who tells you otherwise is selling something. If a breach ever put you at real risk, we would tell you and the regulator promptly, and say plainly what happened.

Some of the firms above operate in other countries, so your information may be processed outside the one you live in. Where that happens we rely on the safeguards the law provides, such as standard contractual clauses, so the protection travels with it.

This shop is not meant for children and we do not knowingly collect anything about them. If you believe a child has given us information, tell us and we will delete it.

We update this policy when what we do changes, or when the law does. The date it was last changed is shown at the top of this page, and anything significant will be said plainly rather than slipped in.

For anything in this policy, including a request about your own information, use the contact page and mark it for the attention of whoever looks after data protection.