Privacy notice
Who is responsible for your data
(trading as ), , is the controller of the personal data described here. Contact: . ICO registration number: .
What we collect
- Details you enter at checkout: name, email, phone (optional) and delivery address.
- Your order: products, quantities, amount and order reference.
- Your IP address, used briefly to limit repeated checkout attempts.
- Emails you send us.
Order data may imply health-related information about you. We keep it only as described below and never use it for marketing. [LEGAL REVIEW]
Why we use it and our lawful basis
- To take payment, deliver your order and handle cancellations and returns — performing our contract with you.
- To keep tax and accounting records — legal obligation.
- To prevent fraud and abuse, including rate-limiting checkout — our legitimate interests. [LEGAL REVIEW]
Who we share it with
- Niftipay, operated by Retailrus Ltd (Malta), acting as [PLACEHOLDER: processor/controller, as confirmed in writing by Niftipay], and its card processor, to take your payment.
- Our email provider [PLACEHOLDER], to send order emails.
- Our courier [PLACEHOLDER], to deliver your order.
- Any other party that Niftipay confirms receives order events for this shop [PLACEHOLDER: confirm at go-live gate 6].
Some of these providers are outside the UK. Where data is transferred abroad, it is protected by [PLACEHOLDER: adequacy regulations / UK International Data Transfer Agreement]. [LEGAL REVIEW]
Automated fraud screening by the payment provider
When you pay, the payment provider checks the last 4 digits and issuing range (BIN) of your card, your email address and your IP address against disputed payments on this and other merchants' accounts. Payments from VPN, TOR or proxy connections are blocked, and an IP address or email may be blocked automatically after repeated payment disputes. If you think you were blocked in error, contact us via the contact page. [LEGAL REVIEW]
How long we keep it
- Orders that were never paid: deleted after 30 days.
- Paid orders: kept for 6 years for tax purposes.
Cookies and storage
We don't use analytics or tracking cookies. Your cart is saved in your browser's local storage so it survives a page refresh; this is strictly necessary for the shop to work. Fonts are served from this site, not from third parties.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to our use of it, or ask us to restrict it. Email . You can also complain to the Information Commissioner's Office (ico.org.uk).