Privacy Policy
1. Information we collect
Information you give us. When you place an order, create an account, track a shipment, subscribe to our newsletter or contact support, we collect your name, billing and shipping address, email address, phone number and order contents.
Payment information. We do not collect or store full payment card numbers. Card details are entered directly into our payment processor’s secure fields and are processed by them. We receive only a transaction confirmation, the card brand, and the last four digits.
Information collected automatically. When you browse the site we collect your IP address, browser type and version, device type, operating system, referring URL, pages viewed and time spent, via cookies and similar technologies.
2. How we use your information
- To process, fulfil, ship and track your orders
- To handle returns, refunds, warranty claims and support requests
- To send order confirmations, shipping notifications and delivery updates
- To send marketing emails, where you have opted in
- To detect, investigate and prevent fraudulent or unauthorised transactions
- To improve our products, site performance and merchandising
- To comply with tax, accounting and other legal obligations
3. How we share your information
We share personal information only with parties who need it to run the store:
- Payment processors — to authorise and settle your payment
- Shipping carriers and fulfilment partners — to deliver your order and provide tracking
- Email and analytics providers — to send transactional and marketing email and to understand site usage
- Professional advisers — accountants and lawyers, where required
- Authorities — where we are legally compelled, or to protect our rights, property or safety
We do not sell your personal information for money. Some analytics and advertising cookies may qualify as “sharing” or a “sale” under certain state privacy laws; you can opt out as described in section 6.
4. Cookies
We use strictly necessary cookies (cart contents, checkout, login sessions — the site cannot function without these); performance and analytics cookies (aggregate traffic and behaviour); and marketing cookies (measuring campaigns and showing relevant ads). You can block or delete cookies in your browser settings; blocking strictly necessary cookies will break checkout.
5. Data retention
We keep order records for as long as needed to fulfil the order and honour returns, and afterwards for the period required by tax and accounting law — generally seven years. Marketing contact details are kept until you unsubscribe. Account data is kept until you ask us to close your account.
6. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your information, subject to our legal retention duties
- Port your information to another service
- Opt out of marketing email, targeted advertising, or the sale/sharing of personal information
- Not be discriminated against for exercising any of these rights
To exercise a right, email support@thegadgetdrawer.shop with the subject line “Privacy Request”. We will verify your identity — usually by confirming details of a recent order — and respond within 45 days. You may use an authorised agent; we will ask for proof of authorisation.
To stop marketing email, click unsubscribe in any marketing message. You will still receive transactional email about orders you have placed.
7. Security
We use TLS encryption in transit, restrict internal access to order data on a need-to-know basis, and work only with PCI-DSS-compliant payment processors. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
8. Children’s privacy
The site is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.
9. Do Not Track
Our site does not currently respond to browser Do Not Track signals, as no common standard has been adopted. We do honour recognised opt-out preference signals such as Global Privacy Control where required by law.
10. Changes to this policy
We may update this policy. Material changes will be posted here with a new effective date, and where required we will notify you by email.