Privacy policy

1. Information we collect

We store the minimum information required to order products and manage your account.

• Account details: email address, name, phone number and (optional) gender.
• Delivery details: the order address and the coordinates you select on the map.
• Order history: products, quantities, amounts, payment and delivery status.
• Technical data: browser session identifiers (cookies) and your theme (light/dark) choice.
• When you consent, usage analytics: random device and session identifiers, page path (without query strings or fragments), product and basket actions, device class, language and the time the page was visible. We do not store your IP address or your browser description.
• If you enable notifications, your device’s push-notification token for sending order-status updates.

2. How we use your information

• To accept an order, check the delivery zone and hand the order over.
• To give you access to your account and show your order history.
• To link orders placed as a guest to your account through your email address.
• When you consent, to measure which parts of the store are useful.
• When you enable them, to send order-status updates by push notification.
• To keep the financial and accounting records that applicable law requires.

3. Guest mode and data stored on your device

You can shop without signing in. Your basket is then kept only on this device, in your browser's local storage (localStorage), and is not sent to us. Clearing the device storage removes the guest basket.

4. Third parties

We do not sell your data. It is shared only with the technical partners needed to run the service and only for the relevant task: the Supabase cloud database; OpenStreetMap and address-lookup services when you choose a delivery point on the map; Google Maps when an authorised staff member edits delivery zones; a photo-processing service when a staff member chooses to enhance a product photograph; and Apple Push Notification service or Firebase Cloud Messaging when you enable notifications.

5. How long we keep it

Account and order data are kept while your account is active and for the period set by legislation. If you ask for your account to be deleted, personal data is erased except for records we must keep, such as financial documents.

6. Your rights

Deletion erases the name, phone number and delivery address on your orders; amounts and status history stay as anonymised accounting records the law requires us to keep. If those sections are not available to you, write to us at the contact address below.

• View and correct the data we hold about you (from the Profile and Addresses sections).
• Download everything we hold about you as one file (Account → Security).
• Delete your account and your personal data yourself (Account → Security).
• Ask for an explanation about an order.

7. Security

Login sessions are protected over a secure protocol (HTTPS, TLS 1.2 or newer), and direct access to the database is restricted by permission levels (RLS). The Website does not currently offer online card payment; card numbers, expiry dates and CVC codes are not sent to the Website or stored on our servers.

8. Children's privacy

The service is not intended for users under 18, and we do not knowingly collect personal data from children.

9. Changes to this policy

When this page is updated, the date shown changes with it. Material changes may be notified through the email address recorded on your account.