Privacy Policy
We collect only what we need to take your order, ship it, and support you afterwards. This page explains what that means in plain language. Last updated: September 2026.
What we collect
- Order details: your name, email, shipping and billing address, phone (optional), and what you bought.
- Payment: processed by our payment provider. We never see or store your full card number.
- Account data: if you create an account, your login email and order history.
- Messages: anything you send through our contact or newsletter forms.
- Technical data: IP address, browser type and pages visited, collected automatically by our web server and security tools (including Cloudflare) to keep the site running and safe.
How we use it
- To process, ship and support your orders, including order and shipping confirmation emails.
- To answer your questions and handle returns.
- To send newsletter emails only if you sign up. Every email has an unsubscribe link.
- To prevent fraud and keep the store secure.
- To meet legal obligations such as tax and accounting records.
Who we share it with
Only service providers who need it to do their job: our payment processor, shipping carriers, our email provider and our web host. They may only use your data to provide services to us. We never sell your personal information.
Cookies
We use essential cookies for the shopping cart, checkout and login. Our security provider may set cookies to distinguish humans from bots. You can block cookies in your browser, but the cart won’t work without them.
How long we keep it
Order records are kept for as long as required for tax and accounting purposes (generally 7 years). Account data is kept until you ask us to delete it. Newsletter data is kept until you unsubscribe.
Your rights
You can ask us to show you, correct, or delete the personal data we hold about you, and to stop sending you marketing at any time. California residents have additional rights under the CCPA, including the right to know and the right to delete. To exercise any of these, contact us and we’ll respond within 30 days.
Children
Our store is not directed at children under 13, and we don’t knowingly collect personal information from them. If you believe a child has given us data, contact us and we’ll delete it.
Security
The site is served over HTTPS, protected by Cloudflare, and payment details go directly to our PCI-compliant payment processor.
Changes and contact
If we change this policy we’ll update the date at the top. Questions? Reach us through the Contact page.