Privacy policy

When you place an order: your name, email address, shipping address, phone number if you give one, and what you bought.

When you create an account: the above, plus a securely hashed password. We never store your password itself.

If you sign in with Google: your name, email address and Google account identifier, so we can recognise you next time. We never see your Google password.

When you save a delivery address: the address, and a nickname for it if you give one. Saving is optional — the tick box at checkout is yours to leave unticked, and you can delete saved addresses at any time.

When you pay: almost nothing. Card details go directly to Authorize.Net and never touch our servers. We keep their reference to the payment, plus the card brand and its last four digits so you can tell one order from another.

When you email support: the contents of your message, so we can answer it.

To take payment, make your order, ship it to you and answer your questions. That's it.

If you opt in, we'll also email you about new products. You can unsubscribe from any of those emails and we'll stop.

Authorize.Net, to process payments. If you pay with Apple Pay or Google Pay, that wallet provider handles your card and passes us only an encrypted token.

Mailgun, to send email.

Google, if you choose to sign in with a Google account. We use Google's Firebase Authentication to verify who you are; Google receives that sign-in request, and we receive only your name, email address and account identifier in return.

Shipping carriers, to deliver your order.

We do not sell your personal information, and we do not share it with advertisers.

Order records are kept for seven years to meet tax and accounting obligations. Support conversations are kept for two years. Marketing subscriptions are kept until you unsubscribe.

You can change your details and add, edit or delete saved delivery addresses yourself, at any time, from your account settings. Deleting a saved address removes it immediately; it does not change the address on orders already placed, which we have to keep as a record of what we shipped and where.

For anything else, email [email protected] to request a copy of your data, correct it, or ask us to delete it. We'll respond within 30 days.

Deleting your account does not remove order records we're legally required to retain, but it does remove your login and marketing preferences.

We use two cookies: one to keep you signed in and one to remember your cart. Both are strictly necessary for the site to work. We do not use advertising or tracking cookies.