[DRAFT — have this reviewed before taking real payments.] This explains what we collect when you use this site, why, and what you can do about it. The controller is [LEGAL ENTITY NAME], [REGISTERED ADDRESS], contactable at [CONTACT EMAIL].
What we collect
When you order: your name, email address, delivery address, phone number if you give one, and what you bought. We keep an order record so we can ship it, answer questions about it and meet our tax and accounting obligations.
When you pay: nothing. Payment is handled entirely by Stripe or PayPal on their own pages. We receive a confirmation, a reference and the delivery address — never your card number.
When you sign up for the email list: your email address, and nothing else, until you unsubscribe.
When you write to us: your name, email address and whatever you put in the message.
Automatically: a session cookie that remembers what is in your bag. It carries no personal data and expires when you close the browser. We do not run advertising or cross-site tracking.
Why we are allowed to
To perform the contract when you buy something; with your consent for the email list; and for our legitimate interest in keeping the shop working and free of fraud. Where we keep records for tax, that is a legal obligation.
Who else sees it
Only the companies that make the shop work: our host [HOSTING PROVIDER], our payment providers Stripe and PayPal, and the carrier that delivers your parcel. We do not sell or rent personal data to anyone, ever.
How long we keep it
Order records for [NUMBER] years, because tax law requires it. Email list entries until you unsubscribe. Contact messages for [NUMBER] months.
Your rights
You can ask for a copy of what we hold, ask us to correct or delete it, object to how we use it, or withdraw consent for the email list at any time. Email [CONTACT EMAIL] and we will respond within [NUMBER] days. If you are not satisfied you can complain to [SUPERVISORY AUTHORITY].
Changes
If this policy changes materially we will say so on this page. Last updated [DATE].