Privacy Policy

We may update this policy to reflect changes to our practices or for operational, legal or regulatory reasons. We post the revised policy on the Site, update the “Last updated” date, and take any other steps required by law.

Contact details (name, address, phone, email); order information (name, billing and shipping addresses, payment confirmation, email, phone); account information (username, password and security details); shopping information (items viewed, carted, purchased, loyalty points, reviews, referrals, gift cards); and customer-support information you include in messages to us.

We automatically collect interaction data — device, browser, network connection, IP address and how you use the Site and your account — using cookies, pixels and similar technologies. This store runs on the PlatformDTC commerce platform, which sets cookies needed to keep your cart, session and checkout working. Most browsers accept cookies by default; blocking them may break features. Our Site honours the Global Privacy Control (GPC) opt-out signal.

We may receive information from vendors and service providers acting on our behalf — including PlatformDTC, the commerce platform this store runs on, and our payment processors Stripe and PayPal, which collect payment details (bank, card, billing address) to fulfil your orders. Tracking technologies from us or our partners may also collect information when you visit, open our emails, or interact with our ads.

Providing products and services (payments, fulfilment, shipping, returns, account management); marketing and advertising (email, SMS, post and tailored ads — EEA basis: legitimate interest); security and fraud prevention (account safety is your responsibility too — never share credentials); and customer support and service improvement.

To vendors performing services for us (IT, payments, analytics, support, storage, fulfilment, shipping); to the commerce, advertising and analytics partners we use to run and market the store; when you direct us to (e.g. shipping, social logins); within our corporate group; and in business transactions or to comply with legal obligations, enforce our terms, or protect rights. We have sold/shared identifiers, commercial information and usage data with business and marketing partners for advertising in the past 12 months. We do not use or disclose sensitive personal information to infer characteristics about you.

Depending on where you live, you may have the right to access, correct, delete or port your personal information, to opt out of sale/sharing and targeted advertising (including via GPC), and to appeal denied requests. To exercise these rights, email [email protected] or use the Contact page; see Your Privacy Choices for the opt-out route and the GPC signal. We respond within applicable legal timeframes and never discriminate for exercising your rights.

The Services are not for children and we do not knowingly collect their data — parents may request deletion by emailing [email protected]. No security is perfect; avoid sending sensitive data over insecure channels. We retain information as long as needed for the purposes above, including legal, tax and operational requirements.