Privacy Policy
Last updated: June 2025
Overview
This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or place an order. By using our site, you agree to the practices described below.
1. Information We Collect
We collect personal information that you voluntarily provide to us, including:
- Email address — collected when you opt in to our mailing list, create an account, or place an order.
- Name and shipping/billing address — collected at checkout to fulfil your order.
- Payment information — processed securely by our payment provider; we do not store card details.
- Order history and transaction data — retained to manage your purchases and provide customer support.
- Device and browsing data — IP address, browser type, pages visited, and referral source, collected automatically via cookies and analytics tools.
2. How We Use Your Information
We use the information we collect to:
- Process and fulfil your orders, including sending order confirmations and shipping updates.
- Send follow-up communications after you place an order — including satisfaction surveys, related product recommendations, and re-order reminders.
- Send marketing emails to opted-in subscribers (you can unsubscribe at any time via the link in any email).
- Improve our website, products, and user experience based on usage patterns.
- Comply with legal obligations and resolve disputes.
3. Tracking Technologies & Pixels
We use the following third-party tracking technologies on our website:
- Meta (Facebook) Pixel — tracks user actions on our site (page views, add-to-cart, purchases) to measure the performance of our Facebook and Instagram ad campaigns and to build custom audiences for retargeting.
- Google Ads Conversion Pixel — records conversion events (e.g. completed purchases) so we can measure the effectiveness of our Google Ads campaigns.
- Google Analytics 4 (GA4) — collects anonymised behavioural data (sessions, page views, user journeys, demographics) to help us understand how visitors use our site. Data is processed by Google on servers which may be located outside your country.
Cookie Consent
These pixels and analytics tools use cookies and similar technologies. Where required by law (e.g. GDPR, ePrivacy), we will ask for your consent before placing non-essential tracking cookies. You can manage or withdraw your consent at any time via our cookie settings banner.
4. Email Marketing & Follow-Up Communications
When you opt in to our mailing list or place an order on our website, you agree that we may contact you by email. This includes:
• Transactional emails: order confirmations, shipping notifications, and receipts.
• Post-purchase follow-ups: order satisfaction requests, review invitations, and relevant product suggestions based on your purchase.
• Promotional emails: special offers, new arrivals, and updates (opt-in subscribers only).
You may unsubscribe from promotional and follow-up marketing emails at any time by clicking the “Unsubscribe” link in any email or by contacting us directly. Unsubscribing will not affect transactional emails related to an active order.
5. Data Sharing & Third Parties
We do not sell your personal information. We may share data with trusted third parties only where necessary:
- Payment processors (e.g. Stripe, PayPal) — to securely handle transactions.
- Shipping and fulfilment partners — to deliver your orders.
- Email marketing platforms (e.g. Klaviyo, Mailchimp) — to manage and send email communications.
- Advertising platforms (Meta, Google) — hashed or anonymised data may be shared for conversion tracking and audience matching only.
- Analytics providers (Google Analytics 4) — anonymised usage data.
- Legal authorities — where we are required to do so by law or valid legal process.
6. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Order records are typically retained for 7 years for tax and accounting purposes. Email marketing data is held until you unsubscribe and request deletion. Analytics data is retained in line with Google’s default retention policies (up to 14 months for GA4 user-level data).
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right to access — request a copy of the personal data we hold about you.
- Right to rectification — ask us to correct inaccurate or incomplete data.
- Right to erasure — request deletion of your personal data, subject to legal retention requirements.
- Right to restrict processing — ask us to pause processing your data in certain circumstances.
- Right to data portability — receive your data in a machine-readable format.
- Right to object — opt out of direct marketing and certain types of data processing.
- California residents (CCPA) — have the right to know, delete, and opt out of the sale of personal information.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses SSL encryption (HTTPS). Payment data is handled exclusively by PCI-DSS compliant payment processors. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Children’s Privacy
Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page. Continued use of our website after changes are posted constitutes your acceptance of the revised policy.
11. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to opt out of any communications, please contact us at:
privacy@yourwebsite.com
We will respond to all requests within 30 days.
