Privacy Policy

Who is responsible

This notice explains what happens to personal data when you use this store. The operator of this store is the data controller. Contact details for privacy questions are on our contact page.

What we collect

When you place an order: your name, email address, telephone number, billing and delivery address, the contents of your order, any note you add, and — where you supply one — a company name and VAT number. We also record the IP address the order was placed from.

When you create an account: your email address, a hashed password (never the password itself), and optionally your name, telephone number and saved addresses. If you register a passkey or security key, we store the public credential it issues.

When you contact us: the messages you send through support tickets, contact forms or chat, and the email address you send them from.

As you browse, if you agree to it: pages viewed, the site that referred you, any campaign parameters in the link you followed, your IP address, and your browser's user-agent string. A randomly generated identifier is stored in your browser so repeat visits can be recognised. Decline and none of this is collected.

We never receive your card details. Payments are completed on the payment provider's own systems. We are told only whether a payment succeeded.

Cookies and browser storage

The cookies below are set only where they are needed to run the shop. Anything used for measurement or advertising is set only if you agree to it, and you can change or withdraw that decision at any time using the Cookie settings link at the bottom of every page. Refusing costs you nothing: the shop works the same either way. If your browser sends a Global Privacy Control signal we treat that as a refusal and do not ask again.

Strictly necessary, always set:

• Session cookie — keeps you signed in. Strictly necessary.
• Guest cart cookie — lets you keep a basket without an account, for 30 days. Strictly necessary.
• Support access cookie — set after you verify your email with a one-time code, so you can read your tickets. Strictly necessary.
• Language cookie — remembers the language you chose, for one year.
• Referral cookie — if you arrive through a referral link, the code is kept for 30 days so the referrer can be credited.
• Consent cookie — records what you agreed to and when, so we do not ask on every page. Kept for six months.
• Local browser storage — your chosen currency and language, and whether you passed the age check.

Set only with your agreement:

• Analytics identifiers — a randomly generated visitor identifier stored in your browser, plus a session identifier, used for the measurement described below.
• Third-party cookies — any set by the analytics or advertising tools this store has enabled, under those providers' own terms.

Analytics

None of this happens unless you agree to it. If you decline, no measurement is recorded and no third-party tag is loaded at all.

With your agreement, we record page views and visit sessions ourselves, in this store's own database. This includes the pages you visit, the referring site, campaign parameters, your IP address, your user-agent string and a country derived from your connection. It is used to understand how the shop is used and which products draw interest.

This store may additionally be configured to load third-party analytics or advertising scripts — for example a web analytics tag, a session-recording tool, or an advertising pixel. Those are split into two choices you control separately: analytics and advertising. Where they load, they run under their own providers' privacy terms and may set their own cookies.

Who we share data with

We share only what a given service needs, and only where that service is actually in use by this store:

• Payment providers — to take payment. They receive your email address and the order amount, and handle the card or bank details themselves.
• Delivery carriers — to ship your order. They receive your name, address, email address and telephone number so the parcel can be delivered and tracked.
• Email delivery provider — to send order confirmations and any messages you asked for.
• Invoicing provider — where invoices are issued through an external service, it receives your billing name, address and email address.
• AI provider — if this store runs an AI support assistant, what you type into that chat is sent to the AI provider to generate a reply.

Email tracking

Unless it has been turned off for this store, our emails contain a small invisible image and rewritten links, which let us see whether a message was opened and which links were clicked. A copy of the messages we send you is retained so we can show what was sent.

Fraud prevention

To prevent fraudulent and abusive orders we compare the email address, telephone number and IP address used for an order against previous orders, and we may decline an order, withdraw cash-on-delivery as a payment option, or refuse referral rewards on that basis. Addresses and identifiers associated with confirmed abuse may be recorded to block repeat attempts. If an automated check goes against you, contact us and a person will look at it.

How long we keep it

Order, invoice and accounting records are kept for as long as tax and commercial law requires. Account data is kept while your account exists. Support conversations, analytics records and message logs are kept while they remain useful for running the shop. If you want data removed sooner, ask us — see your rights below.

Your rights

If you are in the EU or UK you have the right to ask for a copy of the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form. You can also complain to your national data protection authority.

Where we rely on your consent — analytics and advertising — you can withdraw it at any time through the Cookie settings link at the bottom of every page. Withdrawing is as easy as giving, and does not affect anything done before you withdrew.

To exercise any of these, contact us using the details on our contact page. We will respond within the time the law allows. There is no self-service button for this yet — a person handles the request.

Changes to this notice

If how we handle personal data changes, this page is updated and the date at the top changes with it.