Payment & Security

Payment & Security

We take your privacy and security extremely seriously. When you shop with us, we want you to feel confident that your personal and payment information is protected at every step.

How we protect your data

We process your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We only collect the information we need to:

  • Process and fulfil your order

  • Take payment and prevent fraud

  • Communicate with you about your purchase or account

  • Meet our legal and regulatory obligations

For full details of what we collect, why, and how long we keep it, please read our Privacy Policy.

Secure checkout & encryption

Our website uses secure HTTPS (TLS) encryption across the checkout process. This means that any personal information you enter is encrypted between your browser and our website, and cannot be read by anyone else while in transit.

You’ll know your connection is secure when you see:

  • A padlock icon in your browser’s address bar

  • “https://” at the beginning of the web address

Payments & card security

We use trusted, third-party payment processors (such as [Stripe/PayPal/Worldpay – insert your provider]) to handle card transactions on our behalf.

  • Your card details are sent directly to the payment processor over an encrypted connection.

  • We do not store your full card details on our own servers.

  • Our payment partners are certified as compliant with the Payment Card Industry Data Security Standard (PCI DSS), the global standard for secure card payments.

This setup means your payment information is handled in a secure, compliant environment that is regularly audited.

Sharing your information

We never sell your personal data.

We only share your information with carefully selected third parties where it is necessary to:

  • Process your payment (e.g. payment gateways)

  • Deliver your order (e.g. couriers, postal services)

  • Maintain and secure our website and IT systems (e.g. hosting providers)

  • Meet legal or regulatory requirements

All such service providers are required to keep your information secure and to use it only for the specific purpose we instruct.

Your rights

You have rights over your personal data, including the right to access, correct, or in some cases delete the information we hold about you. You can also object to certain types of processing.

 

For more details on your rights and how to exercise them, please see our Privacy Policy or contact us.