Information you give us. When you place an order: your name, shipping address, billing address, email address and, if you provide one, a telephone number for carrier delivery contact. When you write to us: the contents of your message and anything you attach. When you subscribe: your email address. When you submit a product review: the name you choose to display and the text of the review.

Payment information. Card details are entered on our payment processor's form and are transmitted directly to that processor. We never receive, and cannot store, your full card number, expiry date or security code. What returns to us is a transaction reference, the result, the card brand and the last four digits.

Information collected automatically. Your IP address, browser type and version, device type, operating system, referring page, the pages you view on this site and the time of each request. This is written to the web server's access log.

Information we do not collect. We do not ask for and do not want your date of birth, government identifiers, financial account numbers, precise geolocation, biometric data, or any information revealing health, race, religion, political opinion, union membership or sexual orientation. Do not send these to us.

• To take payment for, pack and ship your order, and to hand the delivery address to the carrier.
• To send transactional email: order confirmation, dispatch and tracking, return authorisation and refund confirmation. These are not marketing and cannot be unsubscribed from while an order is open.
• To answer messages you send us, and to keep a record of what was agreed.
• To process returns, exchanges and refunds, and to investigate a lost or damaged parcel with the carrier.
• To detect and prevent fraudulent orders and abuse of the site.
• To meet legal obligations, including tax and accounting record-keeping.
• To send marketing email — only where you subscribed, and only until you unsubscribe.

Where a legal basis is required, we rely on: performance of a contract (fulfilling your order); legitimate interests (site security, fraud prevention, answering enquiries); consent (marketing email and non-essential cookies, each withdrawable at any time); and legal obligation (tax and accounting records).

We share personal information only with the following categories of recipient, only for the purpose stated, and never for their own marketing:

• Payment processing — PayPal and the card networks behind it, to authorise and settle your payment and to handle chargebacks.
• Carriers — USPS Ground Advantage, USPS Priority Mail, UPS Ground and UPS 2nd Day Air, who receive the recipient name, delivery address and, where supplied, a contact telephone number for delivery.
• Hosting and email — the providers that run this site's servers and send its transactional email.
• Professional advisers and authorities — accountants, auditors and law enforcement, where we are required by law or where it is necessary to establish or defend a legal claim.

Each processor is bound to use the information only on our instructions. We do not disclose your information to data brokers, advertising networks or list rental services. If the business is ever sold, personal information may transfer as part of that sale, and this notice will bind the buyer until it is replaced by one no less protective.

Strictly necessary cookies keep your bag between pages, hold your session at checkout, and record the cookie choice you made. The site cannot function without them and they cannot be declined.

Non-essential cookies are used only if you accept them. The banner on your first visit lets you accept or reject them, and the reject button sits beside the accept button rather than behind a settings screen. The shop works exactly the same way if you reject them. You can change your mind at any time by clearing this site's cookies in your browser, which brings the banner back.

We do not use advertising pixels or cross-site tracking tags, and we do not participate in any advertising identifier syncing.

We measure traffic from the web server's own access log. We do not load a third-party analytics script, and no third party receives a record of your visit for its own purposes.

The site is served over TLS; requests over plain HTTP are redirected. Administrative access requires an individual account and is limited to the people who need it. Payment card data never reaches our systems. Databases are backed up on a regular schedule and backups are held on infrastructure separate from the live service.

No method of transmission or storage is completely secure, and we do not claim otherwise. If a breach affects your personal information and creates a risk to you, we will notify you and the relevant authority within the period the applicable law requires.

Subject to verification of your identity, you may require us to:

• Know what personal information we hold about you, the categories of source, the purposes, and the categories of recipient.
• Access a copy of that information, in a portable format.
• Correct information that is inaccurate or incomplete.
• Delete your information, except records we are required to keep for tax and accounting purposes.
• Opt out of sale or sharing — we do not sell or share personal information, so there is nothing to opt out of, and this remains true unless this notice is changed.
• Limit the use of sensitive personal information — we do not collect any.
• Withdraw consent to marketing email or non-essential cookies at any time, without affecting anything done before you withdrew it.

Exercise any of these by writing to [email protected] with the email address used on your order. We respond within 45 days and will tell you if we need a further 45, with the reason. Using these rights costs nothing and we will not treat you differently for using them. An authorised agent may act for you on written proof.

If you are dissatisfied with our response, you may complain to your state Attorney General or, where applicable, your supervisory authority.

• Order and payment records — seven years, to satisfy U.S. tax and accounting requirements.
• Support correspondence — three years from the last message.
• Marketing subscriptions — until you unsubscribe, then a suppression record so we do not email you again by mistake.
• Server access logs — 90 days.

At the end of a period the information is deleted or irreversibly anonymised.

This site is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, write to [email protected] and we will delete it.

There is no accepted standard for how a site should respond to a browser Do Not Track signal, so we do not respond to one. This is not to your disadvantage: we do not track you across other sites in the first place.

We ship only within the United States and our service providers process your information there. We do not routinely transfer personal information outside the country.

We may update this notice. The date at the top changes with it. Where a change materially reduces your rights or expands our use of your information, we will say so prominently on this page for at least 30 days before it takes effect.

Write to [email protected], Monday-Friday, 9:00 AM - 6:00 PM MT. Mark a privacy request “Privacy” in the subject line so it reaches the right person quickly.