Privacy Policy

When you place an order, we collect the information you give us at checkout:

• Your name and email address.
• Your shipping address.
• The items you ordered and their prices.

We do not collect payment card details. Card payment is still being activated for this store, so no card is taken here and no processor is connected to it yet.

If you create an account, we also store:

• Your email, and — if you set a password — a securely hashed version of it, never the password itself.
• If you sign in with Google instead: your name, your email address, and the account identifier Google uses for you. We store no password for that account, and we never receive your Google password.
• Any phone number or saved address you choose to add.
• Your order history, and your referral code if you have one.
• Your store credit and loyalty point balances, and how each entry in them arose.
• Your marketing preference. We do not currently send marketing email to anyone.

If you use our contact form, we collect your name, email, subject, message, and order number if you provide one. This is stored on our side whether or not the message is successfully forwarded to us by email.

To fulfil your order, keep you updated on its status, respond to you about it, operate your account and any store credit, points or referral balance on it, and maintain our own records. We do not sell your information. We do not share it with advertisers.

Only with the companies that make your order, or your sign-in, work:

• Shipping carriers, to deliver your order.
• A mail provider, to deliver messages sent through our contact form and to send order-related email.
• Google, but only if you choose to sign in with Google. We send Google no information about you. What happens is the reverse: you sign in on Google’s own pages, Google tells us who you are, and in the course of that Google learns that you signed in to this site. Nothing about what you browsed or ordered is shared with them, and you never have to use it — a password works just as well.
• Anyone we are legally required to disclose to.

We do not sell your information, and we do not share it for anyone else’s advertising.

This site uses a small number of first-party cookies and browser-storage entries, and nothing else:

• A session cookie, set when you sign in, so the site knows it’s you on later requests. It is required for account features to work and cannot be turned off without signing out.
• An entry on your device recording that you have passed the age and use acknowledgment.
• An entry on your device holding your cart contents.
• If you sign in with Google, a short-lived cookie that lasts ten minutes and exists only to confirm that the sign-in coming back from Google is the one you started. It is ours, not Google’s, and it is deleted the moment the sign-in finishes or fails.

We do not run third-party analytics, advertising pixels, or cross-site trackers of any kind, and we do not log IP addresses. No third party loads any code in your browser on this site — Google sign-in works by sending you to Google’s own pages and back, not by running Google’s software on ours. If that changes, this section changes with it and we will say so.

We keep order and account records for as long as we need them for business and legal purposes. You can ask us to delete your account information and we will, except where we are required to retain it — for example, order records connected to a completed transaction.

You can ask us, at any time, to tell you what personal information we hold about you, to correct it, to delete it, to receive a copy of it in a portable format, or to stop using it for a purpose you no longer consent to. Email us and we will respond within a reasonable time.

Depending on where you live, you may have further rights under local law, and we will honour them.

We sell and ship within the United States only. If you live in California, you have the right to know what personal information we collect and why, to request a copy of it, to ask us to correct or delete it, and to not be treated differently for asking. We do not sell or share your personal information, so there is nothing for you to opt out of. Other states give similar rights, and we handle every request the same way regardless of where you live.

To make a request, email us. We may need to confirm who you are before we act on it, and we will respond within 45 days.

Passwords are stored using industry-standard hashing and are never stored or transmitted in plain text. If you sign in with Google there is no password here at all, and we never see your Google one. We take reasonable measures to protect the information we hold. No system is perfectly secure, and we will tell you promptly if we become aware of a breach affecting your information.

This site is not directed to anyone under 21, and we do not knowingly collect information from anyone under that age. If you believe a minor has provided us with information, contact us and we will delete it.

We may update this policy from time to time. The date at the top of this page shows when it was last revised.

Questions about this policy, or a request under Section 6, can go to the address in our footer, or through our contact form.