Security

Last updated: 24 July 2026

We take the security of your data and payments seriously. Here's how we approach it.

Payments

Your card details are entered directly into our payment provider's PCI-DSS compliant hosted checkout — we never see, handle, or store your full card number.

Accounts

We don't use passwords. Signing in works by emailing you a one-time, time-limited link — there's no password for us to store, and nothing for an attacker to steal from us or reuse from another site's breach.

Data in transit

Traffic to our site is encrypted in transit. If you ever reach a version of this site without a secure (https://) connection, please don't enter any personal or payment details and let us know.

Data we hold

We keep order and delivery details for as long as needed to fulfil your order and meet our legal obligations. See our Privacy Policy for the full detail.

Reporting a security issue

If you believe you've found a security vulnerability affecting this site, please report it to [email protected] rather than disclosing it publicly. We'll investigate and respond as quickly as we can.