Privacy

This Privacy Policy explains how Aelfaco (a UK sole trader) collects and uses your personal data when you visit this website or purchase a piece. Aelfaco is the data controller for this site and complies with the UK GDPR and the Data Protection Act 2018.

What is collected

• Order information: items purchased, price, currency and timestamps.
• Contact details provided during checkout, primarily email address.
• Technical data to protect the service, for example IP address for rate limiting.
• Essential cookie data to operate the bag and checkout.
• Mailing list data, if you sign up: your email address, the time you subscribed, the IP address used at sign-up, and which form you used.
• Anonymous usage data: pages visited and on-page interactions, including session replay. Anything you type is masked before it leaves your browser, and this data is not linked to your name or email.

How the data is used

• To process and deliver your order (contract).
• To prevent fraud and secure the service (legitimate interests).
• To comply with legal and tax obligations (legal obligation).
• To provide customer support (contract / legitimate interests).
• To understand how the shop is used and improve it (legitimate interests).

Sharing

Limited data is shared with providers strictly as needed:

• Payment processing (Stripe).
• Website hosting and related infrastructure.
• Shipping carriers for delivery and customs documentation.
• Anonymous usage analytics and session replay (PostHog, hosted in the EU).

These providers may process data in the UK, EEA and elsewhere. Where data is transferred internationally, appropriate safeguards are relied upon where applicable.

Cookies

Only essential and functional cookies are used, needed to operate the site (for example, to keep items in your bag and progress through checkout). Analytics and advertising cookies are not used — usage analytics runs cookie-free and stores nothing on your device. See the Cookies policy for details.

Mailing list

If you join the mailing list, your email is stored only to let you know when a new piece is available. The legal basis is your consent, given when you submit the sign-up form. There is no third-party marketing and your email is not shared for marketing purposes.

You can withdraw consent at any time using the unsubscribe link included in every mailing-list email, or by getting in touch. After you unsubscribe, a minimal record (your email and the unsubscribe date) is kept so we can honour your opt-out and not re-add you.

Retention

• Order records: up to six years for tax and accounting.
• Security and operational logs: kept for a limited period.
• Mailing list: until you unsubscribe; a minimal suppression record is kept thereafter to honour your opt-out.
• Cookies: expire as described in the Cookies policy or when you clear them.

Your rights

Under UK data protection law you have rights including access, correction, deletion, restriction, objection and data portability, subject to limitations. You may also complain to the UK Information Commissioner's Office.

Contact

To exercise your rights or to ask a question, email hello@aelfaco.com, get in touch, or write to Aelfaco, Office 9993, 321-323 High Road, Chadwell Heath, Essex, RM6 6AX, United Kingdom.

Changes

This Privacy Policy may be updated periodically. The latest version will always be on this page.