Privacy Rights & Data Request

Rights you may have

Depending on your location and applicable law, you may be able to:

• Access — ask for a copy of the personal information we hold about you.
• Correction — ask us to fix inaccurate or incomplete information.
• Deletion — ask us to delete your personal information.
• Restriction — ask us to limit how we process your information.
• Objection — object to certain types of processing.
• Data portability — receive certain information in a structured, commonly used format.
• Withdraw consent — where processing relies on your consent, withdraw it at any time. This does not affect processing that already happened lawfully.
• Marketing opt-out — unsubscribe from marketing communications. Essential messages about your orders or account may still be sent.

These rights are not absolute in every situation. Which ones apply depends on the law in your location.

Information we may need to keep

Some information may need to be retained where required or permitted by law — for example for accounting and tax records, payment processing, fraud prevention, security, or establishing or defending legal claims. If we cannot complete a request in full, we will explain why where we are legally allowed to.

Identity verification

To protect your information, we may ask you to verify your identity before acting on a request. We will only ask for what is reasonably necessary to confirm the request relates to you.