Privacy Policy

1. What we collect

• Identity and contact details. Your name, email address, delivery and billing address, and phone number, provided when you order or contact us.
• Order details. The products you buy, order value, delivery method, and order history.
• Payment status. Confirmation from our payment providers that a payment succeeded or failed. We never see or store your card number or bank login. If you pay in cryptocurrency, we also hold the payment address and the blockchain transaction reference for that payment, because our accounting records require it.
• Correspondence. Emails you send to us, including any photos or videos you attach, and our replies.
• Technical data. Hosting providers process technical data to operate the site. Optional shop analytics records an anonymous visit identifier, source domain or campaign source, approximate country, pages visited, basket additions and checkout starts. It does not store your IP address, contact details or payment data (see section 7).

We do not collect any special-category (sensitive) data, and we ask you not to include any in correspondence with us.

2. How we use it, and our lawful basis

• Processing and delivering your order, including payment, order confirmation, and delivery updates (performance of a contract).
• Replying when you contact us and resolving delivery or payment issues (legitimate interests: running a responsive business).
• Keeping accounting and tax records (legal obligation).
• Preventing fraud and keeping the site secure, including checking the photos and videos sent with a damage or missing-item claim, and their file metadata, for signs of editing or AI generation (legitimate interests).
• Sending marketing emails (consent, or the “soft opt-in” where you are an existing customer). Every marketing email contains an unsubscribe link, and unsubscribing takes effect immediately.
• Understanding how the site is used so we can improve it (consent for optional shop analytics, with aggregated statistics).

3. Who we share it with

We never sell personal data. We share it only with service providers who need it to perform a service for us, under terms that prohibit them from using it for their own purposes:

• Payment providers. Card acquiring, open banking (“Pay by Bank”) and cryptocurrency payment services, to take and refund payments. Your card details are entered directly with the payment provider and never touch our servers.
• Delivery carriers. Courier and shipping partners receive your name, address, and contact details to deliver your order.
• Email providers. To send order confirmations, delivery updates, and (where subscribed) marketing emails.
• Hosting, CDN, and security providers. To run and protect the website.
• Analytics. Our hosting provider and optional shop analytics. The password-protected Statistics page displays aggregated visits, traffic sources, countries, pages and shopping activity, never individual visitor identifiers or contact details.
• Google Analytics. With your optional analytics consent, Google Analytics measures visits and pages viewed. Google may process online identifiers, device and visit data and use analytics cookies under its privacy policy: https://policies.google.com/privacy. Our page-view tracking does not send URL query parameters, delivery-form or payment details. Google advertising storage and personalization remain disabled.
• Microsoft Clarity. With your optional analytics consent, Microsoft Clarity collects device and interaction data for heatmaps and session replay. Page text is masked, including form details; we do not send customer identifiers to Clarity. Microsoft may process visit data and analytics cookies under its privacy statement: https://privacy.microsoft.com/privacystatement. Advertising storage is denied.
• Microsoft Advertising. With your optional tracking consent, Microsoft Universal Event Tracking (UET) measures advertising and visits across this site. Microsoft may process online identifiers, device and visit data and use advertising cookies under its privacy statement: https://privacy.microsoft.com/privacystatement. Our integration does not send delivery-form or payment details, and orders placed at checkout are not recorded as purchases until payment is confirmed.
• Drafting tools. We use software, including AI-based tools, to help our team draft replies to customer emails. Every reply is reviewed by a member of staff before it is sent, and these providers may not use your data for their own purposes.

We may also disclose personal data where the law requires it, or where necessary to establish, exercise, or defend legal claims.

4. International transfers

5. How long we keep it

6. Security

7. Cookies

We use browser storage and security cookies:

• Essential cookies. Your basket and discount-code preference are stored locally in your browser. Our hosting provider may set security cookies. Checkout takes place on reta.britishlabs.uk, which has its own storage practices.
• Optional analytics storage. Only after you allow analytics, a random visit identifier is kept in session storage, renewing after 30 minutes of inactivity. Your analytics choice is kept in local storage. Do Not Track is respected. You can disable analytics on the Statistics page without affecting your basket or checkout.
• Google Analytics cookies. The Google tag loads only after you allow optional analytics and respects Do Not Track. Declining prevents it from loading; withdrawing consent disables Google Analytics tracking and denies analytics storage. Existing cookies can be removed in your browser settings.
• Microsoft Clarity cookies. Clarity loads only after you allow optional analytics and respects Do Not Track. Declining prevents it from loading; withdrawing consent denies analytics and advertising storage and stops recording. Existing cookies can be removed in your browser settings.
• Microsoft Advertising cookies. The Microsoft UET tag loads only after you allow optional tracking and respects Do Not Track. Microsoft may then set advertising cookies. Declining optional tracking prevents the tag from loading; withdrawing consent sends Microsoft an advertising-storage denial. Existing cookies can be removed in your browser settings.

You can block or delete browser storage in your browser settings. Optional analytics can be declined without affecting checkout.

8. Your rights

9. Age

10. Changes to this policy