Legal

Privacy policy

Last updated:

1. Who we are

("we", "us", "our") operates , trading as . We are the data controller for the personal data described in this policy.

  • Registered address:
  • Company number:
  • Contact for privacy matters:
  • Phone:
  • ICO registration number:

2. What data we collect

  • Identity and contact data: name, billing and delivery address, email, and phone number.
  • Order and payment data: items ordered, order history, and payment confirmation. Card details are handled by our payment provider — we do not store full card numbers.
  • Technical data: IP address, device and browser type, and cookie data (see our cookie section below).
  • Communications: messages you send us by email, contact form, or chat.
  • Marketing preferences: whether you have opted in to marketing.

3. Why we use it and our lawful basis

PurposeLawful basis (UK GDPR)
Processing and delivering your order, and managing your accountPerformance of a contract
Responding to enquiries and providing supportLegitimate interests / contract
Sending marketing emailsConsent (or soft opt-in for existing customers)
Fraud prevention and site securityLegitimate interests
Analytics to improve the websiteConsent (via cookies)
Meeting legal and tax obligationsLegal obligation

4. Who we share it with

We share data only with the parties who help us run the business, including payment processors, delivery and courier partners, our website and hosting platform, email and marketing tools, and analytics providers.

We may also disclose data where legally required, for example in response to a court order or a request from a tax authority. We do not sell your personal data.

5. International transfers

Where a provider stores data outside the UK, we make sure it is protected by an adequate-country decision or by appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or the Addendum to the EU Standard Contractual Clauses.

6. How long we keep it

  • Order and transaction records: , to meet UK tax and accounting rules.
  • Account data: while your account is active, then after closure.
  • Marketing data: until you unsubscribe.
  • Support messages: .

7. Your rights

Under UK GDPR you have the right to access your data; correct it; erase it; restrict or object to processing; port your data; and withdraw consent at any time.

To exercise any right, contact us at . We will respond within one month, and we may ask you to verify your identity first.

8. Complaints

If you are unhappy with how we handle your data, you can complain to us directly at and we will investigate. You also have the right to complain to the Information Commissioner's Office (ICO) — ico.org.uk, or 0303 123 1113.

9. Cookies

Our website uses cookies. Non-essential cookies, such as analytics and advertising, are only set with your consent through our cookie banner. You can change your preferences at any time.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date above shows the latest version, and we will notify you of any material changes on this page or by email.

This policy has been prepared against UK GDPR, the Data Protection Act 2018, PECR, and the Data (Use and Access) Act 2025. It is a starting point, not legal advice — please have it reviewed if you are unsure.