Privacy

How we handle your information.

Order information

When orders open, we will store ordered items, payment status, delivery address, contact details and any delivery instructions or order requests you submit. These are used to process orders, arrange delivery and handle issues. Store administration is restricted; your private order link should not be shared publicly.

Payments

Stripe handles card information. Our store receives payment confirmations and relevant customer and shipping details; it does not store full card numbers.

Invitations and browsing

When you enter an invitation, we record your email, optional name, invitation group and page visits associated with your browser registration. The initial invitation email is self-reported. When you set a password, we verify email ownership using a private, single-use email link. Passwords are stored as salted hashes, never as readable text. We use limited page tracking to understand how invited groups browse the collection. We rely on our legitimate interest in understanding collection interest for this tracking; you can object by contacting [email protected]. We link your page loads on the collection, product, checkout and order pages to your browser registration so we can understand which invitation groups explored the store. We do not record search terms, URL query strings, private order tokens or GPS location in these page-view records. This information is available only in restricted store administration and the database owner’s reports.

Product wishlists

When you add an item to your wishlist, we store your choice with your invitation registration and use the email address you entered there to contact you when that item is available. You can remove an item from your wishlist on its product page, or contact [email protected] to request deletion. Wishlist requests do not reserve stock or guarantee a price.

Delivery-area waitlist

For areas outside our initial delivery plan, we store the locality you enter and the email or WhatsApp number you explicitly choose for future area-availability updates. This list is separate from invitations and product wishlists. We do not use it for unrelated promotions or send automated messages yet. Contact [email protected] to correct your details or leave the list. We will verify requests before changing or removing an entry.

Retention and requests

Invitation access uses a secure browser cookie lasting 30 days, renewed during active page visits. A group may be revoked earlier. Page-view records older than 90 days are pruned when subsequent browsing occurs. Registration contacts are retained for invitation access and feedback; contact [email protected] to request access, correction or deletion. After setting a password, you can sign in with your email and password in another browser without using another invitation place. Password setup and reset links expire after 15 minutes. Password changes invalidate older sessions. Setup and sign-in attempts are limited using hashed email and IP identifiers; these limits are retained for up to two days.

Sign-in email

When you request password setup or reset, Cloudflare sends a transactional email to the address associated with an active invitation. This is separate from marketing, order and availability notifications. For emails entered in multiple earlier browser registrations, password access uses the first active registration unless an account is already established; existing registrations and their wishlists are not automatically merged.

Browser storage

Your bag is saved locally in your browser. Your private order token is held in session storage so you can check that order in the same browser session. It is removed from the visible URL after checkout.

Browsing analytics

We use limited invitation-linked page tracking as described in this policy. We do not use external advertising analytics.