PRIVACY POLICY

This explains what we collect, why, who else handles it and what you can ask us to do with it. It covers this website only. The person responsible for it is [your registered company name], [your registered address].

This page describes what this shop actually does. It is not legal advice, and it should be read by a lawyer before you rely on it.

WHAT WE COLLECT

When you order

Your name, delivery address, email address and telephone number, and what you bought. We need these to take the order, deliver it and talk to you about it.

When you pay by card

We never see your card number. The payment is handled by Stripe and the card details go straight to them. We keep only the result — whether it succeeded, and a reference for matching a refund to a payment.

When you create an account

Your email address and password are held by Clerk, our sign-in provider. We do not store your password and cannot read it.

When you sign up to the mailing list

Your email address, and nothing else, until you ask us to remove it.

When you simply browse

Standard server records — the page requested, the time, and the browser and network it came from. We keep no advertising profile of you and we do not sell anything about you to anyone.

WHY WE ARE ALLOWED TO HOLD IT

• To perform the contract you entered when you ordered: your name, address, contact details and order history.
• Because the law requires it: invoices and payment records, kept for the period Tunisian tax law sets.
• Because you asked: the mailing list, which you can leave at any time.
• Because the shop cannot run otherwise: keeping the site up, stopping fraud, and answering your questions.

WHO ELSE HANDLES IT

We use a small number of services, each doing one job. They may hold data outside Tunisia.

• Stripe — takes card payments. Receives your payment details and the amount.
• Clerk — runs accounts and sign-in. Holds your email address and credentials.
• Vercel — hosts the website. Handles every request you make to it.
• Supabase — the database. Holds orders, addresses and the mailing list.
• Cloudflare R2 — stores the photographs. Holds no personal data.
• Upstash — a short-lived cache that speeds the site up. Holds no personal data.
• Our courier — receives your name, address and telephone number so the parcel can reach you.

We do not sell your data, and we do not share it with anyone else unless the law obliges us to.

HOW LONG WE KEEP IT

• Orders and invoices — for as long as Tunisian tax and accounting law requires.
• Your account — until you delete it.
• The mailing list — until you unsubscribe.
• Server records — a short period, then discarded.

WHAT YOU CAN ASK FOR

At any time you may ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong;
• delete what we hold, except what the law makes us keep;
• stop sending you the mailing list.

Write to [your contact email]. We will reply within 30 days, and we will ask you to confirm who you are before we send anyone their data.

CHILDREN

The shop is not intended for children under 16 and we do not knowingly collect their data. If you believe we hold a child’s data, tell us and we will delete it.

CHANGES

If we change this page we change the date below. If the change is a significant one, we will say so on the site rather than hope you notice.

COOKIES

Set out separately, on Cookie Policy.