Your privacy

When you place an order we ask for your name, email address, postal address and, if you choose to give it, a phone number. You can also leave a note with the order — a gift message, or anything Margie Daatadeen should know.

When you use the contact form we collect your name, email address and whatever you write.

When you join the mailing list we store only your email address.

We never ask for card numbers, and none ever reach this website — see Payment below.

To make and send your order, to email you about it, and to answer you if you write to us. That's the whole of it. We don't build profiles, and we don't sell or rent your details to anyone, ever.

Payments are handled by PayPal. If you pay online, your card details go to PayPal and never touch this website — we never see or store them. We keep a record of PayPal's confirmation (a reference number, the amount, and the email address on the payment) so we can match the payment to your order and help if something goes wrong.

PayPal handles that information under their own privacy policy.

Only the companies that run the shop's plumbing, and only to the extent they must:

• Supabase — Stores orders, your address and the mailing list. Data is held in the United States.
• Netlify — Hosts the website and serves its pages.
• PayPal — Takes payment, as described above.
• Our email provider — Delivers the order confirmations and replies we send you.

Nobody else. We will only ever hand your details to anyone else if the law requires it.

Your shopping bag is kept in your own browser's storage so it survives a refresh — it stays on your device and is never sent to us.

We use no advertising or tracking cookies.

There is one cookie for the shop owner's admin login. It is only ever set for her.

Order records are kept for as long as they might be needed for accounts and tax — usually seven years. Contact-form messages are kept while they're useful and deleted once they're not. Your email stays on the mailing list until you ask to come off it.

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Just send a message and say what you'd like. There's no form to fill in and no charge.

To come off the mailing list, reply to any email we've sent you and say so — that's enough.

Depending on where you live you may have further rights, including under the California Consumer Privacy Act or the UK and EU GDPR. We will honour those requests the same way: write to us and we'll sort it.

This shop isn't aimed at children, and we don't knowingly collect anything from anyone under 13. If you believe a child has sent us details, tell us and we'll delete them.

If this policy changes, the date at the top changes with it.

Margie Daatadeen reads everything herself. Use the contact page for anything at all — privacy included.