Your Privacy Choices

This page lets you exercise your privacy rights without signing in — including the California right to opt out of the sale or sharing of personal information, and the rights to know, delete and correct the personal data we hold about you. If you have an account, the quickest route for most requests is your account settings; the links are below.

We honor these requests from residents of any US state on the same basis, whether or not the law of that state currently requires it. If you are in the European Economic Area, the United Kingdom, Quebec or Australia, your rights are described in our Privacy Policy and you can use the same contact details to exercise them.

We do not sell your personal information for monetary or other valuable consideration, and we do not share it for cross-context behavioral advertising — which is what “sharing” means under California law. We do not use advertising pixels or behavioral-analytics tools, and we do not give your personal data to anyone for their own marketing purposes.

The only marketing-related disclosure we make is to MailerLite, our email-delivery provider, which sends our newsletter and promotional emails on our behalf if you have asked to receive them. MailerLite acts as our service provider under contract and may not use your address for its own purposes, so that disclosure is not a sale or a share. Even so, we treat an opt-out request as an instruction to stop it — opting out below ends the disclosure and your subscription.

Browser opt-out signals

We honor the Global Privacy Control (GPC). If your browser or a browser extension sends a GPC signal, we treat it as a valid request to opt out of the sale or sharing of personal information and to switch off non-essential cookies, without you needing to fill in anything on this page. Because the signal is sent by a browser rather than by an account, it applies to the browser it comes from; if you are signed in when we receive it, we apply it to your account too. We do not respond to the older Do Not Track header, which has no agreed meaning.

Opt out of marketing emails

Limit Use of Sensitive Personal Information

Under the California Privacy Rights Act (CPRA) you have the right to limit how a business uses your “sensitive personal information.” The credentials you use to sign in — your email address together with your password — fall within that definition. We collect them only so that you can access your account, and we use them only for that purpose and the related security purposes the CPRA regulations permit. We never use them to infer characteristics about you.

Because our use is already limited to those permitted purposes, the right to limit gives you nothing further to restrict. We do not collect any other category of sensitive personal information — no precise geolocation, government identifiers, racial or ethnic origin, health data, or contents of your communications. If you would like us to confirm how we handle your credentials, contact us using the details below.

Right to Know, Delete, and Correct

If you have an account, you can request a downloadable copy of your personal data, initiate account deletion, or correct your profile directly from your account:

Request a copy of your personal data (Right to Know / Right of Access)
Delete your account (Right to Delete / Right to Erasure)
Correct your profile information (Right to Correct / Right to Rectification)

If you do not have an account, email our privacy inbox to exercise your Right to Know, your Right to Delete or your Right to Correct. Please include the email address associated with your orders so that we can match your request to our records.

How long we take. We respond to a California request within 45 days. If we need more time we may extend that by a further 45 days, and we will tell you within the first 45 days if we do. Requests under other laws have their own deadlines, which are set out in our Privacy Policy.

Verifying who you are. Before we act on a request to know, delete or correct, we need to be reasonably sure it comes from you. If you have an account, being signed in is enough. If you do not, we will ask for the email address used on your orders and enough detail to match the request to our records. We use what you give us only to verify the request and then delete it. If we cannot verify you to the standard the law requires, we will tell you why and, where we can, offer a narrower response rather than refusing outright.

Using an authorized agent. You may appoint someone to make a request for you. We will ask them for written proof that you authorized them, and we may contact you directly to confirm both that you gave that authorization and that you want the request made. If your agent holds a valid power of attorney, we will not ask you separately.

If we say no. If we refuse a request, we will tell you why and how to ask us to reconsider. If you are still unhappy, you can complain to the California Privacy Protection Agency or the California Attorney General, or to the Attorney General of your own state.

Right to Non-Discrimination

We will not deny you goods or services, charge different prices, or provide a different level of quality because you exercised any of these privacy rights.

For the full description of how we collect and use personal data — and for the rights available to residents of other US states and of the EEA, the United Kingdom, Quebec and Australia — see our Privacy Policy.

Cookies on this site