Last updated: 2026-06-19
What we collect
- Order data — email, shipping address, items ordered. Required to fulfil your order.
- Payment data — handled entirely by Stripe and PayPal. We only receive a payment reference, never card numbers.
- Account data — your email, used only to send you sign-in magic links and order updates.
- Analytics & advertising data — IF you accept the cookie banner, we may load Google Analytics, Meta (Facebook) Pixel, and/or TikTok Pixel. These tools see pages you visit, items you view, and purchases (without payment data). If you reject the banner, none of these load.
How we use it
To fulfil orders, handle returns, prevent fraud, send transactional email, and — with your consent — measure marketing performance. We do not sell your data.
Cookies
We use first-party cookies to keep your cart, theme preference, and consent decision. If you accept analytics, the providers listed above set their own cookies — you can change your mind any time by clearing site data in your browser.
How long we keep it
Order records are kept for 7 years to comply with tax law. Wishlist + chat history are kept until you ask us to delete them. You can request deletion of your account data at any time by emailing hello@example.com.
Your rights (GDPR / UK GDPR / CCPA)
You can request access to, correction of, deletion of, or a copy of your personal data. Email hello@example.com and we'll respond within 30 days. EU/UK residents can also lodge a complaint with their national data protection authority.
Sub-processors
- Cloudflare — hosting, CDN, database, edge analytics (no personal data)
- Stripe — card payments
- PayPal — PayPal payments
- Resend — transactional email (sign-in links, receipts, shipping notifications)
- Google, Meta, TikTok — analytics/advertising, opt-in only