Privacy

This site sets no cookies and does not track you

There is no analytics, no advertising pixel, no tracking script and no cookie banner, because there is nothing to consent to. We do not know who you are, where you came from, or which pages you looked at.

This is not a promise about the future — it is a statement about what the site is made of today, and it was checked against the code rather than assumed.

How we knowVerified by searching the whole of src/ for cookie, analytics, gtag, googletagmanager, plausible and fbq. No match.

The fonts do not phone home

The typefaces are served from this website itself. Your browser never asks Google for them, so no request carrying your address goes anywhere else when a page loads.

How we knowRead from src/app/layout.tsx — the fonts are loaded through next/font, which downloads and self-hosts them when the site is built.

The map, and the one thing that does load from elsewhere

The map of the shop is Google's, and Google does set its own cookies. So it does not load until you ask for it — the page shows the address and a button, and nothing reaches Google unless you press it.

Everything else on the page works whether you open the map or not.

How we knowRead from src/components/VisitMap.tsx — the Google embed is mounted only on a deliberate click.

Your bag stays in your browser

What you put in your bag is saved on your own device and is not sent to us. Clear your browser data and it is gone; use a different phone and it was never there.

It only leaves your device when you press Checkout, and then only as a list of pieces and sizes so the payment can be worked out.

How we knowRead from src/lib/useCart.tsx — the bag is stored in the browser's localStorage under one key.

If you use the contact form

Your name, your email address and your message are emailed to the shop so somebody can reply. That is all that is sent, and nothing is saved on this website.

Your IP address is used for one thing: counting how many messages have come from one place in the last ten minutes, so a script cannot flood the shop's inbox. It is held in the server's memory for those ten minutes, is never written down, and is never included in the email.

How we knowRead from src/app/api/contact/route.ts — the emailed text is name, address and message only; the IP is a key in an in-memory map with a ten-minute window.

If you buy something

The pieces and sizes in your bag go to our server, which prices them and asks SumUp to set up a payment. Your name, address and card details are given to SumUp on their own page and never come back to us.

How we knowRead from src/app/api/checkout/route.ts — the request carries slugs, sizes and quantities, and no customer detail.

The three companies involved

Vercel hosts the website and keeps ordinary server logs. SumUp takes the payment and holds whatever a payment needs. Resend delivers the contact form's email to the shop. Each has its own privacy notice.

Nobody else receives anything. Your details are not sold, shared for advertising, or passed to a mailing list — there is no mailing list.

How we knowRead from the project's dependencies and route handlers: no other third party is contacted by this site.

How long the shop keeps things

Who to ask, and how

What you can ask us to do

You can ask what information we hold about you, ask us to correct it, ask us to delete it, or object to us using it. Ask, and we will answer within one month. There is no charge.

If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk. You can go to them directly and you do not have to come to us first.

Your legal rightUK GDPR — the rights of access, rectification, erasure and objection, the one-month response period, and the right to lodge a complaint with the supervisory authority.