Privacy policy

1. The data we collect

• Order details: your name, email address, delivery and billing address, phone number, and what you ordered.
• Account details: if you create an account, your name, email address, saved addresses and order history.
• Messages: what you send us through the contact form (name, email address, phone and order number if you give them, and your message).
• Newsletter and "notify me" sign-ups: your email address and the product you asked about.
• Technical data: the cookies described below, and the usual server logs (IP address, browser, pages requested) kept for security.
• Usage statistics: which pages you view and what you do in the store (products viewed, added to the cart, checkout steps), measured without cookies. They are not linked to your name or email address.

Card details go straight to our payment provider. We never receive or store them.

2. Why we use it

• To take, deliver and support your order, including returns and refunds (performance of the contract with you).
• To answer your messages (our legitimate interest in helping customers).
• To send the newsletter and product alerts you signed up for (your consent, which you can withdraw at any time).
• To keep the accounting records the law requires and to prevent fraud (legal obligation and legitimate interest).
• To understand how the store is used and improve it, with usage statistics that do not identify you (our legitimate interest).

We do not sell your personal data, and we do not use it for automated decisions.

3. Who we share it with

Only the companies that need it to do their part of the job:

• Stripe, which processes your payment;
• the supplier that prepares your order and the carrier that delivers it, which receive your name, address and phone number;
• the hosting, email and infrastructure providers that run this site on our behalf;
• PostHog, which measures how the store is used (servers in the European Union);
• public authorities, when the law requires it.

4. Transfers outside your country

Some of these companies are outside the European Economic Area. In particular, many of our products are shipped by suppliers in Asia, who need your delivery details to send your parcel. Where data leaves the EEA, we send only what is needed and rely on the safeguards the law provides, such as standard contractual clauses or the transfer being necessary to carry out your order.

5. Cookies

We use only the cookies the store needs to work: they remember your cart, keep you signed in and store your language. At checkout, our payment provider sets its own cookies to prevent fraud. We do not use advertising cookies. We measure visits without cookies or any other storage on your device: PostHog counts visitors from an anonymised hash of the connection that changes every day, so it cannot follow you from one day to the next or across other sites.

6. How long we keep it

• Order and invoice data: for as long as tax and accounting law requires.
• Account data: until you ask us to delete your account.
• Messages: for as long as needed to deal with your request and any follow-up.
• Newsletter and alert sign-ups: until you unsubscribe.
• Usage statistics: at most 7 years, then deleted.

7. Your rights

You can ask us for a copy of your data, to correct or delete it, to restrict or object to how we use it, or to receive it in a portable format. You can withdraw a consent at any time. To use any of these rights, write to us through the contact form: we answer within one month.

If you think we have mishandled your data, you can also complain to the data protection authority of the country you live in.

8. Security

The site is served over an encrypted connection, payments are handled by a certified payment provider, and access to order data is limited to the people who need it to deal with your order.

9. Changes to this policy

We may update this policy when the store or the law changes. The date at the top shows the latest version.

10. Contact

For any question about your data, write to us through the contact form.