Privacy policy

This describes what this website actually does, not what a template says a website might do.

What we collect

• To take an order: a name, a mobile number and a delivery address. An email address is optional, and without one we cannot email you.
• To keep an account: the same, plus a password we store only as a bcrypt hash and can never read back.
• To send a parcel: your address goes to the courier and to nobody else.

What we do not do

• There is no Google Analytics, and no advertising tag other than the Meta pixel described below.
• Nothing you do here is sold or handed to a data broker.
• Apart from the Meta pixel, no third-party JavaScript runs here.

Your browser and cookies

Your saved items and the products you have looked at recently are kept in your own browser. With an account, your saved items are kept with it too, so they follow you to another device. Clearing your browser data clears the rest.

Your bag is kept with us while you shop, so it is still there after a reload, and a cookie remembers which bag is yours. Signing in sets a cookie that keeps you signed in: signing out ends it, and changing your password ends it on every device. The Meta pixel sets its own cookie, described below.

The Meta pixel

We use the Meta pixel (Facebook and Instagram) to see which of our ads bring people to the shop. Meta’s script tells Meta which pages you open and which products you look at, add to your bag and take to the checkout, with their prices. As on any website that loads it, Meta also receives your IP address and browser details.

When a parcel is delivered, we report the sale to Meta: the order number, what was bought and the total. Your email address and phone number are not sent as they are — they are turned into a one-way code (a hash) first, which Meta compares with its own users’ details to tell which ad the sale came from.

Meta’s script sets a cookie so Meta can recognise a returning browser. An ad blocker stops the pixel, and the shop works the same without it. What Meta does with this is covered by Meta’s own privacy policy.

How long we keep it

Orders are kept as long as the law requires us to keep sales records. Closing your account removes your profile, addresses and saved items; the orders stay, because a receipt is not ours to delete.

If you want to know what we hold about you, or want it removed, ask. We would rather answer that than have you guess.