Privacy Policy

1. Information we collect

We collect the following categories of personal information:

Information you give us:

• Contact details: name, email address, phone number (if you provide it), shipping address, and billing address;
• Order details: the items you buy, order value, and order history;
• Payment information: this is entered directly with our payment providers. We receive a confirmation and limited details such as the card type and last four digits, but not your full card number;
• Communications: messages you send us by email or through forms, and marketing preferences.

Information collected automatically:

• Device and usage data: IP address, browser type, operating system, referring pages, pages viewed, and dates and times of visits;
• Cookies and similar technologies (see the Cookies section below).

Information from third parties: We may receive fraud-screening results and delivery status updates from our payment processors and shipping carriers, and aggregated analytics from our analytics providers.

We do not knowingly collect sensitive categories of data (such as health, precise geolocation, or government identifiers) and ask that you do not send them to us.

2. How we use your information

• To process and deliver your orders, take payment, and issue refunds;
• To provide customer support and respond to your questions and warranty claims;
• To send transactional messages such as order confirmations and shipping updates;
• To prevent, detect, and investigate fraud, abuse, and security incidents;
• To send marketing emails where you have opted in, and to measure whether they are useful;
• To understand and improve our website, products, and service through analytics;
• To comply with legal, tax, and accounting obligations and to enforce our terms.

Where required by law, our legal bases for processing are: performance of our contract with you (to fulfil orders), our legitimate interests (to run and secure the business and improve our service), your consent (for optional cookies and marketing), and compliance with a legal obligation.

3. How we share your information

We do not sell your personal information. We share it only with:

• Payment processors (such as card processors and PayPal) to take payment and screen for fraud;
• Shipping carriers (such as USPS and UPS) to deliver your order and provide tracking;
• Technology providers that host the website, send our email, and provide analytics and security services, acting on our instructions;
• Professional advisors and authorities where necessary to comply with the law, respond to a lawful request, or protect our rights, property, or safety;
• A successor entity if the business is involved in a merger, acquisition, or sale of assets, subject to this policy.

4. Cookies and tracking technologies

We use cookies and similar technologies to:

• Essential: keep your cart and session working and secure the checkout. These cannot be switched off;
• Analytics: understand how the site is used so we can improve it;
• Advertising: measure our marketing and, where enabled, show relevant ads on other sites.

You can control non-essential cookies through our cookie banner (where shown) and through your browser settings. Blocking some cookies may affect how the site works. Where we offer a "Do Not Sell or Share My Personal Information" control, you can also use it to opt out of advertising cookies.

5. Marketing communications

We send marketing email only if you opt in. You can unsubscribe at any time using the link in any marketing email or by contacting us. Unsubscribing from marketing does not stop transactional messages about your orders.

6. Data retention

We keep order and transaction records for as long as needed to provide the service and then for the period required by tax and accounting law (generally up to 7 years). Support messages are kept for up to 3 years. Marketing data is kept until you unsubscribe or ask us to delete it. Analytics data is retained on a rolling basis according to each provider's settings.

7. Security

The website uses TLS encryption. Payments are handled by PCI-DSS compliant processors, and we do not store full card numbers. We limit access to personal data to staff and providers who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to notify you and the authorities of a data breach where the law requires it.

8. International data transfers

We are based in the United States and process data there. If you contact us from outside the United States, your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for transfers of data from the EEA or the UK.

9. Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and request a copy;
• Correct information that is inaccurate or incomplete;
• Delete your personal information, subject to legal record-keeping requirements;
• Opt out of marketing and of "sale" or "sharing" of personal information for targeted advertising;
• Restrict or object to certain processing, and request data portability;
• Withdraw consent where processing is based on consent;
• Not receive discriminatory treatment for exercising your rights.

To make a request, email us at [email protected]. We will verify your request and respond within the time required by law (generally 45 days under US state laws or one month under the GDPR). You may use an authorized agent where the law allows.

10. California privacy rights

California residents have the rights described above under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information, and to limit the use of sensitive personal information. In the past 12 months we have collected the categories of information described in "Information we collect" for the purposes described in "How we use your information", and disclosed identifiers, commercial information, and internet activity to the service providers described in "How we share your information". We do not sell personal information for money and do not knowingly sell or share the personal information of anyone under 16.

11. EEA and UK privacy rights

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. We would appreciate the chance to address your concern first, so please contact us before doing so.

12. Children's privacy

This website is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Third-party links

Our website may contain links to other sites. This policy does not apply to those sites, and we are not responsible for their content or privacy practices. Please review their policies before providing any information.

14. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The "last updated" date shows when it last changed. Significant changes will be highlighted on this page or communicated by email where appropriate.