Privacy Policy

You never create a login or password on this site. Whatever we hold about you comes from something you typed into a form — checkout, an order lookup, a wholesale inquiry, a review, or saving your wishlist — never from tracking you into an account.

• Checkout (bank transfer): your name, phone number, email, delivery address (typed into the order notes), any note you add, and the payment slip photo or PDF you upload — stored privately in Supabase Storage and only visible to our team while we verify payment.
• Checkout (WhatsApp): nothing is written to our database — it opens a prefilled WhatsApp chat, and whatever you send there is between you and WhatsApp.
• Order tracking (/track-order): we look up your existing order using the order ID/phone or email/phone you provide — this doesn’t create a new record, it just proves the lookup is yours.
• Wishlist: the heart button saves product IDs on your own device (browser local storage) by default — we never see this. If you enter an email to save it permanently, that email and your saved product IDs are stored on our server, used only to sync your wishlist across devices and to send the two wishlist emails described below. You can unlink your device at any time from the wishlist page.
• Reviews: the name, rating, and comment you submit — held privately until an admin approves it for the product page.
• Wholesale inquiries: your company name, contact name, email, phone, region, and message.

We only email you in direct response to something you did: a wishlist confirmation when you first save one permanently, and — if items are still sitting there unpurchased after a few days — one reminder email. Nothing else is sent, and there’s no separate newsletter signup on this site.

Your cart and device-local wishlist live in your browser’s local storage, not a cookie, and never leave your device unless you link a wishlist email. The admin dashboard (staff only) uses a session cookie to stay signed in. If Google Analytics, Meta Pixel, or TikTok Pixel are enabled in Settings, those third parties may set their own cookies per their own privacy policies — check the site footer/dev tools for whether they’re active.

• Supabase — hosts our database and file storage; it doesn’t use your data for anything of its own.
• Our courier — only your name, phone, and delivery address, only to get your order to you.
• Our email provider (SMTP) — only to deliver the two wishlist emails above, and only to the address you gave us.

We don’t sell your information to anyone, ever.

Order records are kept for our own accounting and in case you need order history later. A linked wishlist stays until you ask us to remove it. Reviews stay attached to the product they were left on. Contact us (below) to ask what we hold about you or to have it deleted.

If this page changes in a way that matters, we’ll update the date at the top. Checking back occasionally is the only notice you’ll get — there’s no account to email you a change notice through.