Privacy Policy

Data controller

What we collect

• Contact details and messages you send us (e.g., email).
• Order details when you buy from the store: name, email, phone number, shipping address and what you bought. Stripe collects your payment details; we do not receive your full card number.
• If you pay with Apple Pay, Google Pay or Link, the wallet shares your name, email, phone number and shipping address with us and Stripe when you pay. Before that, it shares only your country, city and postcode, so we can price the shipping.
• Basic technical logs needed to operate the website securely (depending on hosting).
• Your approximate country, worked out from your IP address when you open the store, so we can show the right shipping price. We do not store it.

Why we process data

• Responding to messages.
• Processing, shipping and supporting your orders.
• Meeting our tax and accounting obligations.
• Security and abuse prevention.

Legal basis

We process order details to carry out your purchase and to comply with tax and accounting law. We process messages you send us based on our legitimate interest in replying to them.

Where data is processed

• We are based in the United States. If you live in the EU or UK, your data is transferred to the US, where we, Stripe and Vercel process it. Stripe and Vercel use standard contractual clauses for these transfers.
• Payments and order details are handled by Stripe.
• When you enter your address at checkout, we send your country and postcode to Packlink, the shipping platform we book deliveries through, to get a quote.
• As you type your street address at checkout, Stripe suggests matching addresses using Google Maps, so what you type in that field is sent to Google for this.
• After you pay, we share your name, address, phone number and email with Packlink to prepare your shipment, and with the carrier that delivers it and customs authorities when an order crosses a customs border.
• The website is hosted on Vercel, which may process basic technical logs.

Retention

We keep order records for as long as US tax and accounting rules require (generally up to seven years). We keep other messages only as long as we need to reply to them.

Your rights

You can request access, rectification, erasure, restriction, portability, or object to processing. You can also lodge a complaint with the data protection authority in the country where you live.