Privacy notice

What we store

• Account — your email address, a hash of your password (never the password itself), an optional display name, and whether the email is verified. If you sign in with Google we also store the Google account id.
• Order — recipient name, delivery address, the items, quantities and prices, the order status, and the carrier and tracking code once shipped.
• Order history — every order you place stays linked to your account so you can look it up later and so reviews can be tied to a paid order.
• Bag — the cart contents are stored against an anonymous cart id in a cookie, and against your account once you check out.
• Session — a signed-in session id in an http-only cookie, valid for seven days.

What we do not store

Card numbers never reach our server. Payments are handled by Stripe, which gives us a checkout session id and, for paid orders, the payment reference needed to issue refunds. This store runs in Stripe test mode, so no real payment is taken.

Who sees it

Shop staff (managers) can see orders, customers and order history in order to fulfil orders and answer questions. Carriers can see the order, the delivery address and the shipping status, and can update the carrier and tracking code. Nobody else at ORRIS sees your data.

Email

We email you order receipts, shipping notices, address-verification links and password-reset links. These are transactional messages sent because you placed an order or asked for them; we do not run a newsletter.

Your choices

You can request a copy of your data, correction of your details, or deletion of your account. Orders are kept as long as tax and accounting rules require, even after an account is deleted; the personal fields on those orders are then no longer needed to serve you. Write to us from your account to make a request.

Cookies

We set three cookies: your cart id, the cart item count for the header badge, and — when you sign in — a session cookie. No analytics or advertising cookies are set.