Privacy
What we collect, why we have it, who else touches it, and how to make us delete it. No trackers, no advertising, nothing sold.
Last reviewed 13 August 2026
The short version
We collect what an order needs and almost nothing else. There are no advertising trackers on this site, no third-party analytics, and no arrangement under which anybody pays us for information about you.
We do not sell or share personal information, and we never have. If that ever changes it will be announced here before it happens rather than after, and this sentence will be the one that goes.
What we hold
- To ship an order
- Name, delivery address, email, and a phone number when you give one. The carrier needs the address and the phone; we need the email to tell you it has gone.
- To take payment
- The billing address and the last four digits of the card. The number itself never reaches our servers - it goes to the payment processor and we get a token back.
- If you have an account
- Your order history, saved addresses, and a hash of your password. The hash is one-way; nobody here can read your password, including us.
- Server logs
- IP addresses and request paths, for a short window, because that is how a site is debugged and how abuse is spotted. Not joined to your account and not used to build a profile.
Cookies
Two, and they are both doing a job. One remembers your cart so it survives a refresh; one keeps you signed in if you have an account. Neither follows you anywhere else, and there is no consent banner because neither of them needs one.
Clearing them logs you out and empties the cart. Nothing else happens.
Who else sees it
As few as it takes to get a parcel to you, and each of them gets only the part they need.
- The payment processor, which sees the card and the billing address. We see neither in full.
- The carrier, which sees the delivery address and the phone number.
- The mail relay that sends order confirmations, which sees your email address and what the message says.
- For an item shipped direct by a supplier, that supplier - who gets a purchase order carrying the delivery address and what is on it, and nothing about how you paid.
No advertising network, no data broker, no analytics vendor. There is nobody on this list who is there because it was commercially convenient.
How long
Order records are kept for seven years, because tax and warranty both reach back further than feels intuitive and a warranty claim without the order behind it is one we cannot honour.
An account you close is deleted within thirty days, apart from what has to survive on the completed orders. Logs are days, not months.
What you can ask for
- A copy of everything we hold about you. Sent as a file, within thirty days.
- A correction, if something is wrong. Usually same-day.
- Deletion of your account and everything not legally required to survive it.
- An explanation of anything on this page, from a person rather than a form.
Email us and say which. We do not require the request in a particular format, and we will not make you create an account to ask us to delete your account.
Security
The site is served over TLS throughout. Passwords are hashed. Stored credentials that the store itself needs - carrier accounts, mail relay, anything a downstream channel signs with - are encrypted at rest with keys held separately from the database.
If you think you have found a problem, tell us before you tell anybody else and we will fix it and credit you. We do not send lawyers at people who report vulnerabilities.