The store can collect your name, contact details, billing and shipping addresses, order selections, account information and messages. Newsletter signup records include the submitted email address and consent. Website security and commerce functions can also process technical information such as IP address, browser and session data.
Order information supports purchases, delivery, account access and customer service. Messages are used to respond to requests. Technical information supports security and reliable operation. Marketing signup information is used for requested communications. Where UK GDPR applies, relevant bases include performance of a contract, legal obligations, legitimate interests in operating and protecting the service, and consent where required.
Payment options and the provider processing a transaction are shown at checkout when available. Never send card details through the contact form. Hosting, commerce, delivery and payment service providers may process the information needed to supply their services. Provider arrangements and any international transfers must meet the requirements applicable to the data involved.
Information is retained for the purposes for which it is collected and for applicable accounting, dispute-resolution and legal obligations. Retention depends on the record and the requirements that apply. Contact us to ask about a particular record or request deletion. Access should be limited to people who need it, but no online system can promise absolute security.
You may ask to access or correct information, close an account, or withdraw marketing consent through our contact form. Depending on location and applicable law, rights may also include erasure, restriction, objection and portability. Some information may need to be retained for legal obligations. We may need to verify a request before disclosing personal information.
This notice should be reviewed when store operations, providers or data practices change. It is available alongside collection forms and in the footer.
