Privacy Policy

What we collect

We may collect contact details, delivery details, order records, newsletter preferences, cart activity, site analytics, public comments and messages sent through forms. Payment card details are not stored on this website unless a configured payment provider explicitly supports secure tokenization.

Why we use data

We process personal data to operate the shop, fulfil orders, respond to requests, manage events or registrations, send newsletters where consent is given, secure the website, prevent fraud, keep audit records and improve site performance.

Cookies and consent

Necessary cookies support sessions, cart, checkout and security. Analytics and marketing cookies are optional. When consent is the applicable basis, the site records the preference, policy version, timestamp and basic request context.

Your rights

You may request access, correction, deletion, objection, restriction or portability where applicable. Requests are reviewed before action to protect account security and prevent unauthorized disclosure.

Retention rules

Orders

7 years for tax, accounting and dispute handling.

Newsletter

Until consent is withdrawn or the address is inactive.

Privacy Requests

3 years after closure for compliance evidence.

Cookie Consents

12 months, unless replaced by a newer consent choice.

Analytics

Aggregated where possible and retained only for site improvement.

Security and access

Admin access is permission-restricted, sensitive actions are logged, traffic should run over HTTPS in production, and operational backups should be stored securely with restricted access.

Breach response

Suspected personal-data incidents should be escalated immediately to the site owner or privacy contact, investigated, contained, documented and handled under applicable notification obligations.