Privacy Policy

What we collect and why

We collect the personal data needed to run the site and fulfil orders, including name, billing and shipping details, email address, phone details when provided, account information, order history, support messages, and form submissions.

We use this data to process purchases, deliver orders, provide customer support, manage accounts, review suspected fraud or misuse, and meet legal, tax, and accounting obligations.

Payments, processors, and retention

Payment card details are processed by Stripe on our behalf and are not stored in this WordPress or WooCommerce database. Stripe is limited to card-payment processing on payment pages.

We also use Mailgun for transactional and form email, Cloudflare R2 for public media and encrypted recovery backups, and delivery partners for shipment handling. Mailgun open and click tracking are disabled. For a business VAT enquiry, the EU VIES service receives only the country code and VAT number needed for validation. These providers receive only the data needed for their part of the service. We do not use an external CAPTCHA, advertising analytics, or remote tracking service.

Enquiries and rejected partner applications are normally retained for up to 12 months. Delivered email content is removed from our delivery queue after 30 days, while content-free delivery records may remain for up to 12 months. Tax, order, terms-acceptance, and decision evidence may be retained for up to seven years where required for accounting, contracts, disputes, or compliance. Short-lived form feedback expires after 15 minutes, form security tokens expire after 24 hours, and application logs are retained for no more than 30 days.

Encrypted recovery backups retain 30 daily and 12 monthly generations. Data erased from the live service may remain in an immutable backup until that backup expires; backups are isolated, access-controlled, and are not used to answer access requests. A legal obligation or active dispute may require us to retain a specific record longer.

Cookies and your rights

This site uses cookies and similar storage needed for core website functions such as cart state, checkout, login, account security, affiliate referral attribution, one-time form feedback, and session continuity. It does not use optional advertising or analytics cookies.

Where applicable law gives you rights of access, correction, deletion, restriction, objection, or data portability, we will review and respond to valid requests in line with those legal requirements. We verify requests through the email address linked to the relevant order, account, application, or enquiry. Some tax, accounting, contract, fraud-review, legal-claim, or audit records may need to be retained despite an erasure request; we will explain any such retention in our response.