Privacy, in plain terms.

Who handles your information.

The seller identified above is responsible for the personal information processed by this shop. Contact the listed support address about a privacy question or request. This notice describes the supplied implementation and must reflect the merchant's actual hosting and email providers before launch.

Information used by the shop.

Order records contain the purchased items, gross GBP total, timestamps, payment state, PayPal order/capture references, payer name and email returned by PayPal, and your recorded digital-supply choices. We do not receive or store PayPal passwords or card numbers.

Support uses the name, email, message, topic and optional reference you provide. Recovery uses the purchase email and payment reference and sends links only to the original purchase address. Necessary browser storage retains the basket and checkout-recovery details. Short-lived abuse-limit records use a keyed address hash, not the raw connection address. Hosting and payment providers may keep separate security/access logs.

Why information is used.

Order and delivery data is used to perform the purchase contract and answer related requests. Some records are retained for legal/accounting duties and claims. Proportionate security and abuse checks support the legitimate interest in protecting the shop and buyers. A support message is used to answer your request, not to add you to an advertising list.

Payment, hosting and email.

PayPal processes payment under its own terms and notices. The shop receives information needed to fulfil the order. Hosting and email providers process the information needed to run the website and deliver transactional messages. These providers may process data internationally; the seller must identify them and review relevant transfer arrangements before opening the shop.

No advertising pixel, analytics tag or newsletter integration is included by default. Re-review this notice if those services are added.

Retention and your rights.

The supplied default target is six years for completed orders, subject to the seller's reviewed legal needs and disputes. Abandoned unpaid orders can be cleared after 30 days and rate-limit records after two days. These periods require actual maintenance and appropriate mailbox/log/backup retention. The merchant must document its final policy.

Depending on the circumstances, you may ask to access, correct, erase, restrict or object to processing or receive eligible information in portable form. Legal duties or claims may require retention. Identity verification may be needed. UK users may also complain to the Information Commissioner's Office.

Protect your private link.

The order link is a bearer link: possession may allow access to purchased files. Do not publish it or forward it as a public preview. Save your receipt and backups securely and contact support if a link is exposed.