Data Protection

As a UK business, the personal information you provide us with is controlled in accordance with the Data Protection Act 1998. If you place an order with us or set up an account on this site, you provide us with personal information such as your name, address, contact telephone number and email address. With this information, we will:

• Process the information as necessary for undertaking and managing transactions with you.
• Share the information with people and organisations necessary to do this,
  • e.g. sharing these details with a delivery company to ship your order.
• Use this information to contact you.
• Keep the information for as long as we have a relationship with you, or as long as is necessary for our accounts and financial records.

We will not sell your information to any third parties.

Under the Data Protection Act 1998, you have a right to access the information we hold about you and to have it corrected. If the access provided by logging into your account in not sufficient, you may make a formal written subject access request (SAR). We may charge a fee of up to £10 provide the information requested.

Data Security

Account and order information is stored on our server in a password protected database. For order processing, sensitive information is transfered over a SSL encrypted connection, so your data cannot be seen in transit. In our database, no passwords are stored in plain text, only the cryptographic hash of your password is stored, however, it is still good practice to use a different password for every service. 

No credit card data is ever trasmitted to, or recieved by our server. When you pay for an order, you will be taken automatically to our payment provider's site (currently paypal) where you can pay by any method that they allow (e.g. credit/debit card, paypal transfer, etc.). At no point do we ever recieve the details of your payment method.