legal
Privacy
What this site collects, where it goes, and how to have it removed. It describes what the code actually does, not what a template says.
What we collect
If you open an account: your first and last name, email address, phone number if you give one, and the addresses you save. Your password is stored as a hash, never as text. If you sign in with Apple or Google we keep the identifier they return and nothing else from them.
If you place an order: the shipping address, a contact email, what you bought, and the totals. Orders can be placed as a guest, in which case there is no account, only the order.
If you subscribe to the newsletter: your email address, and nothing beside it.
If you write to us through the contact form: your name, email and message.
Card details
We never see them. Payment is handled by Stripe; your card is entered on their form and stays with them. What reaches us is a payment reference and whether it succeeded.
What is kept in your browser
Five things, all in local storage on your own device: your bag, your session token if you are signed in, your account summary, your language, and whether you chose the dark or light view.
There is no analytics script on this site, no advertising pixel, and no third-party tracker. Nothing here follows you to another site. This is a statement about the code as it stands, and it is worth checking rather than trusting.
Who else sees it
Stripe, to take the payment. The courier, who is given the delivery address and a phone number. DigitalOcean, where the site and its database are hosted. No one else, and nothing is sold to anyone.
How long it is kept
Order records are kept for as long as accounting and warranty obligations require. An account and its saved addresses are kept until you ask for them to be deleted. A newsletter subscription is kept until you unsubscribe.
Having it removed
Write to us and ask. You may ask for a copy of what we hold, ask us to correct it, or ask us to delete it. An order we are legally required to keep is the one thing we may not be able to erase, and we will say so plainly if that is the case.
Who we are
[FACT REQUIRED] The registered company name, its licence number and the emirate of registration belong here, along with the law this policy is read under. A privacy policy that does not name the party bound by it is not one.
Last updated 20 August 2026
