Privacy

The short version

We collect what we need to take your order and get it to you, and nothing else. We never see your card number. There is no advertising tracking here: nothing on this site follows you to other websites, and nothing about you is sold or shared for marketing.

We do count page views, through Cloudflare Web Analytics. It sets no cookies, does not identify you, and cannot follow you anywhere else — it tells us which pages get visited, and nothing about who visited them.

What we collect

If you place an order: your email address, the shipping name, address and phone number you give us, anything you write in the order note, and what you bought. Once it ships, the carrier and tracking number.

If you make an account: your email address, and optionally a name and phone number. Your password is stored only as a one-way hash — it cannot be read back, by us or by anyone who obtained the database. Saved addresses are kept until you delete them.

To keep accounts secure: when you sign in we record the time, your IP address and your browser's user-agent string, against a random device identifier. This is what lets the site recognise a familiar device and challenge an unfamiliar one, and what makes an unauthorised sign-in visible to you afterwards.

If you bid: your bids, and the maximum you set. Other bidders never see your maximum — only the current price.

Payment — and why we never hold your card

Card details are entered into fields hosted by Square, our payment processor. They travel from your browser to Square directly. What reaches this website is a single-use token standing in for the card, which can be used once, for that one payment, and is worthless afterwards.

This is not a promise about our good intentions — the card number never arrives here, so there is nothing for us to keep, leak or be careless with. We do store the last four digits and the card brand shown on your receipt, so you can tell one order from another.

Square handles that payment under its own privacy policy.

Who else sees your information

Only the companies that have to, and only the part they need:

• Square — processes the payment. Receives the payment details and the amount.
• ShipStation — prices and labels the delivery. Receives the destination postcode and parcel weight for a quote, and the full delivery address once a label is bought.
• Cloudflare — sits in front of the site to keep it fast and to absorb attacks. It sees the traffic passing through, including your IP address. It also runs the page-view counting described above.
• Hostinger — hosts the site and its database, and sends our email.

We do not sell your information, and we do not share it for advertising. If the law obliges us to hand something over, we will.

We also synchronise stock levels with our own eBay shop. That exchange covers our listings and quantities only — no customer information is sent to eBay, and no eBay customer's information is brought here.

Cookies

All of them are ours. None are for advertising.

• Session — keeps you signed in. Deleted when you sign out.
• Basket — remembers a basket before you have an account, so it survives closing the tab. It is signed, so it cannot be edited to change a price.
• Display preferences — your theme and accessibility choices. It is readable by the page on purpose, so the setting applies before anything is drawn and the page does not flash the wrong colours at you.
• Device recognition — a random identifier used for the security checks described above. It says nothing about you.

Blocking them will break signing in and the basket, but nothing here follows you to other websites.

How long we keep it

Orders are kept as business and tax records for as long as the law requires. Account details are kept until you ask us to close the account. Sign-in and device records are kept while they are useful for security. Temporary things — shipping quotes, anti-bot checks — expire on their own within a day.

Your choices

Email [email protected] and we will:

• tell you what we hold about you,
• correct anything that is wrong,
• close your account and delete what we are not legally required to keep.

Completed orders usually have to stay, because tax records are not ours to delete. We will say exactly what was kept and why.

Much of it you can do yourself: addresses, contact details and display preferences are all editable from your account.

Age

This shop is not intended for anyone under 18, and we do not knowingly collect information from them. If you believe someone under 18 has given us their information, email us and we will remove it.

Getting in touch

Questions about any of this go to [email protected].

If this page changes, the date at the top changes with it.