Privacy
Last updated 30 September 2026
We collect what it takes to source and deliver what you ask for, and nothing for advertising. This page lists it all.
What we collect
When you send a request or order: your name, email address, shipping address, city and country, and what you asked for. When you pay: PayPal collects your payment details and the delivery address it confirms; we never see or store card or account details. When you contact us: your message and email address.
We don't use advertising or analytics trackers. The only browser storage is a sign-in session, for store staff and for customers who connect an AI assistant to the store. Fonts load from Google Fonts, which sees your IP address when they do.
How it's used
To answer and source your request, to process and deliver your order, to send you emails about them, and to prevent abuse. We never sell your information.
The live board
If you leave it switched on, your request appears on the public live board as a product name (written by our intake agent) and your country. Never your name, email, address, city or the wording you used. You can switch it off when you send the request.
Who processes it
Lovable Cloud (Supabase) hosts the store and its database. AI models reached through the Lovable AI gateway and OpenRouter read request details to triage, source and write emails; sourcing searches send only product search terms, never your personal details. PayPal processes payments. Resend delivers email. Our fulfilment partners receive the name and address needed to ship your order.
Some AI models, including free or preview models, may be operated by providers who keep prompts to improve their services. We send them the product details of your request, not your contact details, when sourcing.
How long we keep it
Request and order records are kept while they're needed to fulfil, support and account for your order, and as long as tax and consumer law require. Requests that never become orders are deleted on request.
Your rights
You can ask for a copy of your data, a correction, or its deletion, through the contact page. We'll respond within 30 days.
Questions about this policy? Contact the crew.