Privacy & Security

What we collect

When you place an order or contact us, we collect the information you provide: name, email, shipping address, and order details. When you create an account, we store your email and an authentication identifier. We do not sell your personal data.

Payments

Payments are processed by our third-party payment provider. We never see or store your full card number, CVV, or banking credentials on our servers.

How we protect your data

• All traffic is served over HTTPS.
• Passwords are hashed by our authentication provider; we never store them in plain text.
• Database access is restricted by row-level security so customers can only read their own orders and messages.
• Administrative actions require a verified admin role on the server, not just a client-side check.
• Secrets and API keys are stored in a server-side secret manager and are never shipped to the browser.

Email

We send transactional email (order confirmations, shipping updates, password resets) to the address on your account. You can unsubscribe from non-essential email at any time using the link in the footer of those messages.

Your rights

You can request a copy of your data or ask us to delete your account by emailing us via the contact page. We will respond within a reasonable timeframe.

Reporting a security issue

If you believe you have found a security vulnerability, please report it through our contact page and we will investigate.