Privacy policy
How we handle personal data.
What we collect
Account details (name, email, password hash), order and delivery details, payment status returned by our payment provider, and support correspondence. We do not store full card numbers — card data is handled by the payment provider.
Why we process it
To create your account, process and deliver orders, handle returns and support requests, meet tax and accounting obligations, and — only with your consent — send marketing email.
Legal bases (GDPR)
Performance of a contract (orders), legal obligation (tax/accounting records), legitimate interest (fraud prevention, service security) and consent (marketing email, non-essential cookies).
Retention
Order and invoice records are kept for the statutory accounting period. Marketing consent is kept until you withdraw it. Support tickets are kept as long as needed to resolve and evidence the request.
Your rights
You may request access, rectification, erasure, restriction, portability and object to processing, and withdraw consent at any time. Contact support to exercise them; you may also complain to your national supervisory authority.
Processors and transfers
We use processors for hosting, email delivery and payments. Data is stored in the EU; where a processor operates outside the EU, transfers rely on the European Commission’s standard contractual clauses.