6. Use of Cookies & Tracking Technologies

We use cookies and similar technologies to improve your experience on our website, analyze usage, and for advertising and marketing purposes. You can control or disable cookies via your browser settings, but this may affect some functionality. We will provide a cookies notice or banner describing which types of cookies we use, what purposes they serve, and how you can opt out where required under UK law.

7. How We Share Your Information

We may share your personal data with:

• Service providers and payment processors who help us run our business (e.g. shipping, fulfilment, email providers)

• Third parties for analytics, marketing (where you have consented)

• Legal or regulatory bodies if required by law or to protect our legal rights

• Other businesses in case of sale, merger, reorganisation

We ensure that any third party we share data with has appropriate safeguards in place to protect your data.

8. International Data Transfers

If any of your data is transferred outside the UK or European Economic Area (“EEA”), we will ensure that such transfers comply with applicable legal requirements (for example, using standard contractual clauses or ensuring the recipient country has adequate protections in place).

9. Retention of Data

We will retain your personal data only for as long as is necessary for the purposes for which it was collected, or otherwise required by law. When data is no longer required, it will be securely deleted or anonymised.

10. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• The right to access the data we hold about you

• The right to correct inaccurate or incomplete data

• The right to erase data (“right to be forgotten”) in certain circumstances

• The right to restrict processing of your data

• The right to object to processing (including for direct marketing)

• The right to data portability, where applicable

• The right to withdraw consent at any time (if processing is based on consent)

If you wish to exercise any of these rights, please contact us using the details above.

11. Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration, or destruction. This includes using secure connections (HTTPS), secure servers, encryption, access controls and staff training.

However, no method of transmission over the internet, or method of electronic storage, is 100% secure, so we cannot guarantee absolute security.

12. Children

Our services are not intended for children under 16 without parental consent. We do not knowingly collect personal information from children under this age. If you believe we may have collected data from a child under 16, please contact us so we can delete it.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on this page with the date of revision. If changes are significant, we may give you additional notice (for example, via email or via a notice on our website).