Legal & policies.

• Identity & contact data: name, billing and shipping address, email, phone number.
• Order data: products purchased, order history, transaction amounts, currency.
• Payment data: handled by our payment providers; we never store full card numbers.
• Technical data: IP address, browser type, device, pages visited, referral source.
• Marketing data: preferences for email communications and your subscription status.

• To process and deliver your orders, including customs and carrier handover.
• To provide customer support and respond to your enquiries.
• To send order, shipping and account notifications.
• To send marketing emails — only where you have opted in.
• To improve our website, products and customer experience.
• To meet legal, tax and regulatory obligations.

We process your personal data on the basis of contract performance (to fulfil your orders), legitimate interest (to operate, secure and improve the service), legal obligation (tax, accounting, consumer protection), and consent (for marketing communications and non-essential cookies).

We share personal data only with trusted service providers strictly to operate the business — including payment processors, fulfilment and logistics partners, email and analytics providers, and professional advisors. We do not sell your personal data.

Your information may be transferred to and processed in countries outside your country of residence. Where required, we put appropriate safeguards in place, such as standard contractual clauses.

We retain personal data only as long as necessary for the purposes described above and to comply with legal, accounting and reporting obligations.

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete your data, subject to legal retention requirements.
• Restriction & objection: limit or object to certain processing activities.
• Portability: receive your data in a structured, machine-readable format.
• Withdraw consent: opt out of marketing at any time via the unsubscribe link.

We use technical and organisational measures — including encryption in transit, access controls and vendor due diligence — to protect your data from unauthorised access, alteration or disclosure.