Privacy
Last updated: 24 August 2026
What we collect
When you order: your name, delivery address, email address, and confirmation that the payment succeeded. Your card details are entered on Stripe’s own checkout and never reach this site — we see the last four digits and nothing else, and we could not charge you again if we wanted to.
When you write to us: your message and your email address, kept for as long as it takes to deal with what you asked.
That is the whole list. There is no account to create, no newsletter signup buried in the checkout, and no profile built about you.
Measuring visits
This site uses Cloudflare Web Analytics to count visits. It sets no cookie, takes no browser fingerprint, and does not follow you from one site to another. There is no advertising pixel on any page here.
The only other technical data processed is what any host records to serve a page and defend itself — IP address and timestamp — held by Cloudflare, our host, for a short retention period.
Who else sees your data
| Who | What they get | Why |
|---|---|---|
| Stripe | Payment details, email, billing address | To take the payment. They are the processor of record for it. |
| The carrier | Name, delivery address | To deliver the parcel. |
| Cloudflare | IP address, timestamp | Hosting and protection against attacks. |
Nobody else. We do not sell data, we do not share it for advertising, and there is no third party on this list that exists for marketing purposes.
How long we keep it
Order records are kept as long as accounting law requires them. Emails are deleted once the matter is closed, unless keeping the thread is the only way to honor a guarantee you might still call on.
Your rights, and who to complain to
Whatever country you are in, you can write to [email protected] and ask for a copy of what we hold on you, ask us to correct it, or ask us to delete it. We do that on request and we do not ask why.
If we get it wrong, the body to escalate to depends on where you live:
- United Kingdom — the Information Commissioner’s Office (ICO). Your rights of access, rectification, erasure, restriction, objection and portability come from the UK GDPR and the Data Protection Act 2018.
- Canada — the Office of the Privacy Commissioner of Canada, under PIPEDA. Quebec residents also have rights under the province’s own private-sector privacy law.
- Australia — the Office of the Australian Information Commissioner (OAIC), under the Privacy Act 1988 and the Australian Privacy Principles.
- United States — there is no single federal privacy authority for this. Several states, California among them, give residents rights over their personal information; write to us and we will honor an access or deletion request from any US resident regardless of state.
Children
This shop is not aimed at children and we do not knowingly collect anything from anyone under 16. If you believe a child has given us data, write to us and we will delete it.
Changes
If this page changes, the date at the top changes with it. Data already collected stays governed by the version that was in force when we collected it.