Legal / 02
Privacy
TODO-LEGAL — placeholder copy. Structure and layout are final; the words are not. Owner supplies final text, reviewed by someone who works in this category.
Scope
TODO-LEGAL. This notice covers personal data handled through this site and the orders placed through it. The controller's legal name and registered address are to be supplied.
What is collected
- Order details — what was bought, when, and for how much.
- Contact and delivery details needed to fulfil and invoice an order.
- Correspondence, where a purchaser writes in.
TODO-LEGAL. Card details are never received or stored by this site. Payment is handled by the payment provider named at checkout, which holds that data under its own terms.
Cookies and local state
TODO-LEGAL. Two kinds of browser storage are in use, both functional:
hgt_age_ok— records that the age prompt was confirmed, so it is not shown on every visit to the store. Expires 180 days after it is set. SameSite=Lax.snipcart-*— set by the cart provider to keep a basket and a checkout session together across page loads.
TODO-LEGAL. There is no analytics, advertising or cross-site tracking on this site, and nothing here profiles a visitor.
Who it is shared with
TODO-LEGAL. Order data is shared with the payment provider, the cart provider and the carrier, each only to the extent needed to take payment, keep a basket or deliver a parcel. It is not sold and not shared for marketing.
How long it is kept
TODO-LEGAL. Order and tax records are kept for the period the applicable law requires; correspondence is kept only as long as it is useful. Retention periods to be specified.
Rights
TODO-LEGAL. Depending on where the purchaser is resident, rights of access, correction, deletion, portability and objection may apply, along with a right to complain to a supervisory authority. The request address is to be supplied.