Privacy Policy

Last updated: 24 June 2026

Introduction

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, products, and services.

For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller of your personal data.

Information We Collect

We may collect and process the following personal data:

  • Name – to identify you and personalise your experience.

  • Email address – to communicate with you, provide support, send updates, and manage your account.

  • Postal address – to deliver products, services, or correspondence.

We collect this information when you voluntarily provide it, for example when you:

  • Complete a contact form.

  • Create an account.

  • Make a purchase.

  • Subscribe to marketing communications.

  • Contact us directly.

How We Use Your Information

We use your personal data to:

  • Provide, operate, and improve our products and services.

  • Process orders and fulfil contractual obligations.

  • Respond to enquiries and support requests.

  • Send transactional communications, including order confirmations and account notifications.

  • Send marketing communications where you have consented to receive them.

  • Maintain the security of our services and prevent fraud.

  • Comply with legal and regulatory obligations.

Lawful Bases for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Contract

Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

Consent

Where you have provided clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.

You may withdraw your consent at any time by contacting us or using the unsubscribe link included in marketing emails.

Legal Obligation

Where processing is necessary to comply with legal or regulatory requirements.

Legitimate Interests

Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. These interests may include improving our services, maintaining security, preventing fraud, and managing customer relationships.

Data Sharing

We do not sell your personal data.

We may share your personal data with:

  • Service providers and processors who assist us in operating our business, such as payment processors, website hosting providers, IT support providers, delivery partners, and email service providers.

  • Professional advisers, including legal, accounting, and insurance advisers where necessary.

  • Regulatory authorities, law enforcement agencies, courts, or government bodies where required by law or to protect our legal rights.

All third-party processors are required to process personal data only on our instructions and to implement appropriate security measures.

International Data Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place as required by UK data protection law. These safeguards may include:

  • Transfers to countries that have been recognised as providing an adequate level of protection.

  • The use of approved International Data Transfer Agreements (IDTAs) or other lawful transfer mechanisms.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, tax, or reporting requirements.

When personal data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in accordance with our retention policies.

Your Rights

Under UK GDPR, you have the following rights:

  • The right to be informed about how your personal data is used.

  • The right of access to your personal data.

  • The right to request correction of inaccurate or incomplete personal data.

  • The right to request erasure of your personal data in certain circumstances.

  • The right to restrict processing in certain circumstances.

  • The right to object to processing based on legitimate interests or direct marketing.

  • The right to data portability where applicable.

  • The right to withdraw consent at any time where processing is based on consent.

  • Rights relating to automated decision-making and profiling, where applicable.

To exercise any of these rights, please contact us using the details provided below.

Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.

Cookies and Similar Technologies

Our website may use cookies and similar technologies to improve functionality, analyse website usage, and enhance user experience.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs.

Any material changes will be communicated through our website or by email where appropriate.

Contact Us

If you have any questions about this Privacy Policy or how we process your personal data, please contact us using our contact form.

Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

You can find more information on the ICO's website at:

https://ico.org.uk