01What we store
- Your account: your name, your email address and a hash of your password (never the password itself).
- Addresses: the shipping addresses you save, and a copy of the one each order was sent to.
- Orders: what you bought, the prices and totals, the order’s status and tracking number.
- Your bag, wishlist and reviews. Reviews are shown with your first name and last initial.
- Sign-in sessions: for each device you sign in on, the browser it reported and the IP address it came from, so a session can be recognised and ended.
02Why we use it
To sign you in, take your orders, ship them, email you about them and handle returns and refunds. We don’t use your data for advertising and we don’t build profiles of you.
03Who else sees it
A few services do part of the work for us, and get only what that part needs:
- Stripe takes payments. You enter your card on Stripe’s page, so we never see or store your card details.
- Our email provider delivers order and password-reset emails to your address.
- Cloudinary hosts the product photos. It receives nothing about you beyond what any image request carries.
We don’t sell or rent your data to anyone.
05How long we keep it
Account details, addresses and orders are kept while your account is open. Order records are kept after that for as long as tax and accounting rules require. A sign-in session ends after 30 days without use, or 90 days after you signed in at the latest, and is deleted once it ends.
06Your choices
You can change your name and password in account settings, and remove saved addresses in your address book. Changing your password signs out your other devices.
To get a copy of your data, correct your email address or close your account, write to us at support@cartspace.example.