Legal

Privacy notice

Version draft-2026-10
Draft for legal review. Not yet approved by the owner.

What we collect

Your name, mobile number, email address, delivery address, order history, and the payment proofs you send us (reference numbers and screenshots).

Why

To take and fulfil your orders and pre-orders, verify payments, send order updates by SMS or email, issue invoices, and handle refunds and complaints.

Who can see it

Shop staff, limited by role. Payment screenshots and refund account details are visible to the owner and manager only, and every view is logged.

Our service providers: Supabase (database and sign-in), Vercel (hosting), Semaphore (SMS) and Resend (email).

How long we keep it

Until you ask us to delete it. Invoices and payment records are kept as required for tax record-keeping even after an account is deleted; the rest of the account is anonymised.

Your rights

You can ask for a copy of your data, a correction, or deletion through Report a problem (choose “My data”). We respond within 7 days.

Consent

We ask for your consent to this notice when you sign in for the first time and at checkout. We record the version you agreed to and when.