This policy explains what we do with your personal data. It is written to be read, not to be impressive.
What we collect, and why
| Data | Why | Lawful basis |
|---|---|---|
| Name, delivery and billing address, email, phone | To take, deliver and support your order | Performance of a contract |
| Order and return history | To handle returns, refunds and warranty claims, and to keep the accounting records we are required to keep | Contract, and legal obligation |
| Your account password | To let you sign in. Stored as a one-way hash — we cannot read it and neither can anybody who obtains the database | Contract |
| Marketing preference | To send you email about new ranges and offers, only if you ask for it | Consent, which you can withdraw at any time |
| IP address and browser details on an order | To detect and investigate fraudulent orders | Legitimate interests |
Payment details
Card details are entered on the payment provider's own form and are never sent to this website or stored by us. We keep only the provider's reference for the payment, which is what lets us issue a refund.
Who else sees it
Only the organisations that have to: the carrier delivering your parcel, the payment provider taking your money, our email provider, and our hosting provider. We do not sell personal data and we do not share it for anyone else's marketing.
How long we keep it
Order records are kept for seven years, because tax law requires it. A marketing preference is kept until you withdraw it. An account you ask us to close is deleted apart from the order records we have to retain.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict what we do with it, or to object to it being used for our legitimate interests. You can also ask for it in a portable form. Use the contact form and we will respond within one month. If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
See our cookie policy for what is set and why.