Privacy policy

What we collect

We collect the details you give us and the details an order needs. There is no analytics profile of you beyond that.

• Account details: your email address, and the first and last name you choose to add.
• Order details: the products you bought, the prices, the currency, the order number and the date.
• Delivery and billing addresses, and a phone number if you add one for a courier.
• Correspondence: the messages you send to support, kept so we can answer them and refer back.
• Technical details needed to keep a session working: your cart identifier, your sign-in session and your country and currency choices.

Why we use it

We use your data to take payment, pack and send your order, tell you what happened to it, and answer your questions. That is the contract between us.

We also use your email address to send order and delivery notifications, which are part of the order and not marketing. If you join the drop list, we use it for that list until you ask to leave.

We keep records of orders and payments because tax and accounting rules require it, and we keep a small amount of technical data to keep accounts secure and prevent abuse.

Payments

Card payments are processed by Stripe when card payment is enabled for your region. Your card number is entered in Stripe's own payment form and is never sent to or stored by our servers. We receive the result of the payment, the amount, the currency and a reference we can use to find the transaction if something goes wrong.

Where a region is configured for payment on delivery or another manual method, we record the payment status of the order but take no card details at all.

Cookies and local storage

We set a small number of cookies so the store works: one holds the contents of your cart, one keeps you signed in to your account, and one remembers the region you are shopping in. None of them is used to follow you around other websites.

Your light or dark theme preference is stored in your browser's local storage, not in a cookie, and never reaches our servers. The cookie policy describes each of these in more detail.

Who we share it with

We share only what a provider needs to do its job, and only with providers that process data on our instructions.

• Stripe, when card payment is enabled, to take and refund payments.
• Resend, to deliver order, delivery and account emails.
• Our hosting and database providers, which store the site and its data.
• A courier or postal service, which receives the name, address and phone number needed to deliver a parcel.
• Authorities, where the law requires us to hand something over.

How long we keep it

Order and payment records are kept for as long as tax and accounting rules require, which is usually six to seven years depending on the country. Contact messages are kept for two years so a later question can be answered with the earlier context.

Account details are kept while the account exists. A closed account is deleted within thirty days, except for the order records we are obliged to keep. Newsletter addresses are deleted when you unsubscribe, and a signup that is never confirmed is deleted after thirty days.

Your rights

Depending on where you live, you can ask us to show you the data we hold about you, correct it, delete it, restrict how we use it, or send it to another service in a portable format. You can object to a use you did not expect, and you can withdraw consent for marketing at any time.

Write to support@kazimirazrafi.dev and we will answer within thirty days. We may ask you to confirm you are the account holder before we act. If you are not satisfied with our answer you can complain to the data-protection authority in your country.

Children

The store is not directed at children under sixteen, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will remove it.

Changes and contact

If this policy changes in a way that affects you, we will note the new date at the top and, for a significant change, email registered customers before it takes effect.

Questions about this policy, or about the data we hold, go to support@kazimirazrafi.dev.