Privacy.

What we collect, and why

Only what an order needs. Nothing here is gathered speculatively, and there is no profile built about you in the background.

• Your name, email and mobile number. To confirm the order, to tell you when it ships, and so the rider can reach you.
• Your delivery address. To deliver the parcel, and to work out the delivery rate, which depends on the province.
• Your payment reference and the receipt you upload. To check the money arrived. A person reads the reference against the account. This is the one thing we hold that you did not type, and it is treated accordingly below.
• Whether you asked for our emails. Only if you ticked the box. Buying something is not consent to be marketed to, and we treat those as two separate decisions.

What we never have

• Card numbers, CVVs or bank logins. Both payment methods are transfers you make yourself in your own app. Nothing on this site ever asks for a card, and if a page ever does, it is not us.
• Your password to anything.
• Anything a measurement cookie collected before you agreed to it. Nothing is stored until you accept, and declining is a working answer rather than a delay.

The receipt you upload

A payment receipt is a screenshot of your banking app. It can carry your name, your number and your balance, so it is handled as the sensitive thing it is.

• It is stored outside anything the web server will serve. There is no URL that reaches it, however well anyone guesses.
• The filename you uploaded is discarded and replaced with random characters, and the file type is decided by reading the file rather than by trusting its name.
• Only a logged in member of the shop can open it, and only through a screen that checks who they are first.
• It is never published, never posted, and never shown to another customer.
• It is kept while it is needed to prove the payment and to settle any dispute about the order, and deleted after that.

Where it is kept

Orders, receipts and customer details are held in the shop’s own WooCommerce system on Hostinger. The storefront you are reading runs on Vercel and keeps nothing: it passes what you type straight to the shop and forgets it. Both companies process data on our instructions and neither is permitted to use it for anything else.

What your browser keeps

Your bag is kept in your own browser, on your own device, so that it survives a refresh. It never reaches us until you place an order, and clearing your browser data clears it. So is your answer to the cookie question, and the theme you picked.

Measurement and advertising

We use Google Analytics, through Google Tag Manager, to see which pieces people look at and which pages they leave from, and to tell whether an advertisement we paid for actually led to an order. It is the shop counting, not a profile of you being built for sale.

Nothing is stored until you accept. Until then Google is explicitly told it may not set a cookie or keep an identifier, and it receives an anonymous count with nothing in it that points back to you. Press Decline and that stays true for good. Press Accept and it may set its own cookies, which is what lets it tell a returning visitor from a new one.

To change your mind later, clear this site’s data in your browser and the question is asked again. Google processes this on our instructions under its own terms, and we never send it your name, your address, your email or anything you typed at the checkout.

Who else sees it

The courier gets your name, address and number, because that is a parcel. The people who run the shop see your order. Nobody else. We do not sell your details, we do not trade them, and we do not hand them to anybody for their own marketing.

Your rights

Under the Data Privacy Act of 2012, Republic Act 10173, you can ask what we hold about you, ask us to correct it, ask us to delete it, object to how we use it, and ask for a copy. You can withdraw consent to marketing email at any time, using the link in every one of those emails or by asking us.

Deleting everything is not always possible straight away: an order we are legally required to keep a record of stays a record. We will say plainly which parts we can remove and which we cannot, and why.

How to reach us

Write to us and say what you want done. We answer every one of these, including the ones that are simply asking what we hold.

Children

This shop is not aimed at children, and we do not knowingly collect anything from anyone under eighteen. If you believe a child has sent us their details, tell us and we will remove them.

Changes

When this page changes, the date at the bottom changes with it. We will not quietly start collecting something new and leave this page describing the old site.

See also the shipping and returns pages, which cover what happens to an order rather than to your details.