Privacy Policy

We use your personal data for the following purposes:

• Order processing and fulfilment — to process your orders, arrange delivery, and handle returns or exchanges.
• Customer support — to respond to your questions, complaints, or product enquiries.
• Fraud prevention and security — to detect and prevent fraudulent transactions and maintain site security.
• Marketing (with your consent) — to send you promotional emails about products, offers, or news if you have opted in. You can unsubscribe at any time.
• Site improvement and analytics — to analyse how customers use our website so we can improve navigation, content, and performance.

We rely on the following lawful bases for processing: contractual necessity (for order fulfilment), legitimate interest (for fraud prevention and analytics), and consent (for marketing).

Our website uses cookies and similar tracking technologies to ensure the site works properly, remember your preferences, and understand how you interact with our pages. We also use analytics cookies (such as those from Google Analytics) to collect anonymised data about visitor numbers and behaviour.

For full details on the cookies we use and how you can manage your preferences, please see our Cookie and Privacy Information page. You can control cookies through your browser settings at any time.

For more information on how cookies are regulated in the UK, visit the ICO cookies guidance.

We share your personal data only with trusted third parties who help us run our business. These include:

• Payment processors — to handle secure card transactions.
• Delivery companies — to ship your orders.
• IT and platform providers — who host our website and manage our systems.
• Fraud prevention agencies — to verify transactions and prevent fraud.

We do not sell your personal data to third parties. Where we share data, we require those recipients to comply with UK data protection law and use the data only for the specified purposes. We may also disclose data if required to do so by law or in response to a legal request.

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law (for example, to comply with tax and accounting obligations, which typically require us to hold order data for six years).

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include secure servers, encryption where appropriate, and access controls.

Under UK data protection law, you have the following rights concerning your personal data:

• Right of access — to request a copy of the data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete data.
• Right to erasure — to request deletion of your data, subject to certain exceptions.
• Right to restriction — to limit how we process your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We primarily store and process your data within the UK and the European Economic Area (EEA). Where we use service providers based outside the UK or EEA (for example, cloud hosting), we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses, to protect your data in accordance with UK GDPR requirements.