Privacy Policy

1. Introduction

We are committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information when you use our website and services.

2. Information We Collect

We collect the following types of information:

Account Information: Name, email address, phone number, delivery and billing addresses when you register.
Order Information: Products ordered, delivery preferences, order history.
Usage Data: IP address, browser type, pages visited, and login activity for security purposes.
Communications: Messages sent via our contact form.

3. How We Use Your Information

Your information is used to:

Process and fulfil your orders
Manage your account and provide customer support
Communicate order updates and important notices
Protect against fraudulent activity and ensure security
Improve our website and services
Comply with legal obligations

4. Data Security

We implement industry-standard security measures to protect your personal information, including:

Encrypted password storage using BCrypt hashing
Account lockout after failed login attempts
HTTP-only, secure session cookies
Content Security Policy and other security headers
Regular security monitoring and logging

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data only with:

Delivery partners (name and address for delivery purposes only)
Law enforcement when required by law

6. Cookies

We use essential cookies to manage your session and shopping cart. These cookies are necessary for the website to function and cannot be disabled. We do not use advertising or tracking cookies.

7. Your Rights

Under UK data protection law, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Object to processing of your data
Request a copy of your data in a portable format

To exercise any of these rights, please contact us using the details on our Contact page.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Order history is retained for tax and legal compliance purposes. You can request account deletion at any time.