Privacy policy
Last updated 27 October 2026
The short version: we collect what we need to sell and deliver your order, and to email you if you're happy for us to. We never sell your data. You can opt out of marketing any time.
Who's responsible for your data
Wesh Corporation Ltd (company number 05336562), Business Design Centre, Unit 114A, 52 Upper Street, London N1 0QH, is the controller of your personal data. Contact us about privacy at [email protected].
What we collect
- Order details: your name, email, delivery address, what you bought and how much you paid.
- Payment: handled by Stripe. We never see or store your full card number.
- Account (if you create one): your name, email and an encrypted (hashed) password.
- Email preferences: whether we may send you news and offers, and when that changed.
- Messages: emails you send us and our replies.
- Technical: your approximate country (to show the right currency) and the security data our hosting and protection services need to keep the site running and stop abuse. We don't use analytics or advertising trackers.
Why we use it and our legal basis
| Purpose | Legal basis (UK and EU GDPR) |
|---|---|
| Taking payment, delivering your order, order and delivery emails, returns and customer service | Performing our contract with you |
| Keeping accounting and tax records | Legal obligation |
| Running your account, keeping the site secure, preventing fraud | Legitimate interests |
| Emailing customers about our similar products, news and offers (you can say no at checkout or opt out any time) | Legitimate interests, under the "soft opt-in" rules for existing customers |
| Emailing news and offers to people who haven't bought from us | Your consent, given by ticking a box |
Marketing emails
If you buy from us, we'll occasionally email you news, updates and offers unless you tick "No thanks" at checkout. Every marketing email has a one-click unsubscribe link, and you can also change your choice in your account or by emailing us. When you opt out we keep a note of your email address only so we don't email you again. Order and delivery emails aren't marketing and are always sent.
Who we share it with
We never sell your personal information. We share it only with the services that help us run the shop, under contracts that require them to protect it:
- Stripe (payments and fraud prevention)
- Resend (sending and receiving email)
- Cloudflare (website delivery and security)
- Hetzner (website hosting, in Germany)
- Postal and courier services (delivering your order)
We may also disclose data where the law requires it, or to protect our rights.
International transfers
Some of these providers process data in the United States or other countries outside the UK and EU. Where they do, the transfer is protected by recognised safeguards such as the UK–US Data Bridge, the EU–US Data Privacy Framework, or standard contractual clauses.
How long we keep it
- Order and payment records: 6 years after the end of the financial year of the order, as UK tax law requires.
- Accounts: until you ask us to close yours.
- Emails with us: as long as needed to deal with your query and any related order.
- Marketing opt-outs: kept so we respect your choice.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Where we rely on consent you can withdraw it at any time. Email [email protected]. We'll reply within one month. We may need to keep some data, such as order records, where the law requires it.
If you're unhappy with how we've handled your data you can complain to the UK Information Commissioner's Office (ico.org.uk) or, in the EU, your local data protection authority. We'd appreciate the chance to put it right first.
United States residents
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We don't collect sensitive personal information. Depending on your state (including California), you may have the right to know what personal information we hold about you, to correct it, and to delete it. Email [email protected] to make a request. We won't treat you differently for using these rights.
Children
Our shop isn't meant for children, and we don't knowingly collect data from anyone under 18.
Cookies
We only use cookies the site needs to work. See our Cookies page.
Changes
We'll update this page if anything changes and show the date at the top.