Privacy
We collect what is needed to post you a parcel and nothing else. No advertising trackers, no data sold, no consent banner because there is nothing to consent to.
Last updated 10 August 2026
The short version
We collect the minimum needed to send you a parcel and nothing else. No advertising trackers, no data sold to anyone, no profile built about you.
What we hold
Your name, delivery address, email address and what you ordered. That is what an order is; we cannot post a parcel without it.
We never see or store your card details. Payment is handled entirely by Stripe, and card data goes from your browser to them without passing through this site.
Who else is involved
Stripe processes the payment and holds the card data. Royal Mail receives your name and address to deliver the parcel. Microsoft receives usage data through Clarity if you accept analytics cookies. Vercel hosts the website and processes standard server logs including IP addresses.
That is the complete list. We do not share your details with anyone else, we do not sell data, and we do not pass anything to the laboratories linked from our resources page.
Cookies
The basket is kept in your browser's local storage so it survives a refresh. It is not sent to us until you check out and it holds no personal information, only what you put in the basket.
Stripe sets its own cookies on the checkout pages for fraud prevention. We run no advertising cookies.
If you accept on the cookie banner, Microsoft Clarity sets cookies and records how pages are used, including clicks, scrolling and session replays, so we can improve the site. What you type into fields is masked. Card details are entered on Stripe's own pages and are not recorded. If you decline, it never loads. To change your mind, clear this site's data in your browser and the banner will ask again.
How long we keep it
Order records for six years, because HMRC requires it for tax purposes. Email correspondence for two years. Nothing beyond that.
Your rights
Under UK GDPR you can ask for a copy of what we hold, ask us to correct it, or ask us to delete it, subject to the tax records we are legally required to keep. Email us and we will action it within thirty days.
If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk.