Privacy policy

Information we collect

• Your account: your name, email address, phone number if you add it, and a securely hashed password (or your Google account, if you sign in with Google).
• Orders: the items you buy, delivery addresses, your email address and phone number, the payment method you chose and a payment reference. We never receive or store card numbers: card and mobile-money payments are handled by Pesepay, Stripe and Paynow.
• Messages: what you send us through the contact form (your name, email, phone if given, and message). To protect the form from spam we also keep a one-way, keyed hash of your IP address, which cannot be turned back into the address.
• Chat assistant: the questions you type into the chat assistant, its answers, the page you were on and whether you chose to contact us from the chat. To count visitors without identifying them we keep a one-way, keyed hash of your IP address, never the address itself. We read these chats to improve our answers and our service.
• Your cart, wishlist and saved addresses, so they are there when you return.

How we use it

• To process, deliver and support your orders, including order and shipping emails.
• To run your account and answer your messages.
• To keep the website secure and prevent fraud and spam.
• To meet our legal obligations, such as keeping accounting records.

We do not sell your information, and we do not use it for advertising.

Cookies and local storage

We use only what the website needs to work: a cookie that keeps you signed in, and your browser's local storage for your cart, recently viewed pieces and your light or dark theme choice. We do not use advertising or analytics cookies.

Who we share it with

We use trusted service providers who process information on our behalf and only as needed to provide their service:

• Supabase: our database, sign-in and file storage.
• Vercel: website hosting.
• Groq: writing the chat assistant's answers from the messages you send it.
• Resend: sending order and account emails.
• Pesepay, Stripe and Paynow: payments, when you choose them.
• Google: sign-in, if you choose to sign in with Google.
• Couriers: your name, address and phone number, to deliver your order.

Some of these providers store information outside your country. We share information with authorities only when the law requires it.

How long we keep it

We keep order records for as long as the law requires for tax and accounting. Account information is kept while your account is open. Messages are kept for as long as needed to deal with them and any follow-up. Chat assistant conversations are deleted after 12 months. Unpaid orders are cancelled automatically, but their record is kept with the rest of our order history.

Your rights

You can see and update your account details at any time under Your profile. You may also ask us for a copy of the information we hold about you, ask us to correct or delete it, or object to how we use it, under the data protection law that applies to you (including Zimbabwe's Cyber and Data Protection Act). Some information, such as order records, we must keep by law. To make a request, contact us.

Security

Information is sent over encrypted connections, passwords are stored only in hashed form, and access to customer information is restricted to the people who need it to run the shop.

Children

This website is not intended for children under 18, and we do not knowingly collect their information.

Changes

If we change this policy, we will update it here and change the date at the top. For significant changes affecting account holders, we will also let you know by email.