Privacy policy

What we collect

When you order. Your name, delivery and billing address, email address, phone number and the contents of your order. We need these to perform the contract with you — an order cannot be delivered without them.

When you create an account. Your email address and a hashed password. We never store the password itself and cannot read it.

When you subscribe. Your email address, the date you subscribed and the page you subscribed from. We keep the last two as evidence of consent.

When you browse. Standard server logs — IP address, page requested, timestamp, browser — retained for 30 days and used to keep the site working and secure.

We do not collect anything else, and we do not buy data about you.

Why we can hold it

Order data: performance of a contract. Newsletter: your consent, which you can withdraw at any time using the link in every email. Logs: our legitimate interest in operating a working shop securely. Accounting records: a legal obligation.

Who we share it with

Only who has to see it, and only what they need:

• The workshop fulfilling your order — your name and delivery address.
• The courier — your name, address and phone number, so they can deliver and call ahead.
• Our payment and accounting providers — the amount, the reference and the invoice.
• Our email provider — your address, to send order and account email.

We do not sell personal data, we do not share it for advertising, and we do not transfer it to anyone else without telling you.

How long we keep it

Order and invoice records: 7 years, because tax law requires it. Account details: until you close the account. Newsletter consent: until you unsubscribe, plus a record that you did. Server logs: 30 days.

Your rights

You can ask us for a copy of what we hold, to correct it, to delete it, or to stop using it for a given purpose. Write to [email protected] and we will answer within one month.

If you are unhappy with how we have handled your data, you can complain to the data protection authority in the country you live in.

Security

Traffic to this site is encrypted. Passwords are hashed and salted. Access to customer data inside our team is limited by role and is logged, so we can tell who looked at what.