Privacy policy

We process identity and contact details, delivery addresses, order and support history, device and security logs, and the minimum payment information needed to reconcile an order. We never ask you to upload card credentials.

Manual-transfer proof images can contain financial identifiers. Please obscure unrelated balances and transactions before uploading.

We use data to fulfil orders, prevent fraud, provide support, meet accounting and legal duties, and—only with consent—send newsletter messages. First-party commerce events help us understand product and checkout performance without selling your data.

Payment-proof images and the related transaction record are retained for five years after the end of the relevant fiscal year, then securely deleted or irreversibly anonymised, unless an unresolved dispute or applicable law requires longer retention.

Support requests are retained for two years after closure. Inactive newsletter records are deleted within 90 days after unsubscribe. Security logs are normally retained for 180 days.

Data is shared only with processors needed to operate the store, such as hosting, private object storage, delivery carriers, email delivery, and error monitoring. Access is restricted by role and audited. Cross-border processing is subject to contractual and legal safeguards.

You may request access, correction, deletion, restriction, or withdrawal of newsletter consent by contacting [email protected]. Some transaction records cannot be deleted before mandatory retention ends. We verify identity before fulfilling a request.