Privacy

Review draft: owner approval is required before publication.

This site is operated by Operator details awaiting confirmation.

Enquiries

We use your name, email, enquiry type and message to respond to you. Configured enquiries are sent through Resend to the team inbox. We do not subscribe you to a mailing list. Please avoid private details about children. In a disconnected preview, copying an enquiry only places it on your clipboard.

Browser storage

Your box selections are stored on your device until you clear them or clear site data. Delivery, purchaser email and gift drafts are saved in this tab’s session storage. Addresses are saved in local storage only when you choose “Save this address”; use “Forget this saved address” to remove one. On a shared device, avoid saving addresses and clear site data after use. A browser may restore session data when restoring tabs.

Orders and payments

The store receives delivery details, purchaser email, selected items and optional gift messages to calculate, fulfil and support your order. When purchasing is enabled, Stripe handles payment details; the store keeps payment references, totals and status, but does not receive full card numbers. Delivery details are shared with the fulfilment and delivery providers identified below.

Security and service providers

Requests reach our hosting service, which may keep operational logs. Abuse controls retain keyed hashes of client network addresses for a short period; these are not used for advertising. Administrator sign-ins and changes are recorded for security and accountability.

Hosting, database, identity and delivery providers and their processing locations must be confirmed before launch.

Measurement

Audience measurement is disabled. No advertising pixels are installed.

Retention and your choices

The owner must confirm retention and deletion periods before public launch.

Contact the site team to request access, correction or deletion, or to raise a privacy concern. We may need to verify your identity and retain records where required.

The owner must confirm the complaint response process and applicable escalation contacts before launch.